CompTIA Security+ (SY0-701) Cert Prep by Infosec

Introduction

• Welcome

1. Security Basics

• Vocabulary
• Security controls: Categories
• Security controls: Types
• Physical security controls

2. Cryptography

• Cryptography intro
• Password hashing
• Hashing: Demo
• Encryption (symmetric)
• Encryption (asymmetric)
• PKI and certificates
• PKI demo
• Uses of cryptography
• Cryptographic tools

3. Threats

• Threat actors
• Threat vectors
• Social engineering

4. Attacks

• Cryptographic attacks
• Hardware attacks
• Network and application attacks
• Malware
• SQL injection
• Vulnerabilities
• CSRF
• Directory traversal
• Pass the hash
• XSS

5. Identity and Access Management

• Privileged access
• IAM
• Password concepts
• MFA
• Access control models

6. Organizational Security

• Enterprise security
• Application security

7. Network Security Devices

• Firewalls
• Network ports
• Load balancer
• IDS/IPS
• Wireless security
• VPN
• Honeypots
• Email security

8. Security Operations

• Change management
• System hardening
• Secure baselines
• Security technologies
• Security monitoring
• SIEM

9. Virtualization

• Virtualization
• Orchestration
• Cloud service models

10. Mobile Security

• Mobile device deployment
• Mobile device management

11. Vulnerability Management

• Vulnerability identification
• Vulnerability analysis
• Vulnerability management
• Vulnerability response

12. Risk Management

• Risk analysis
• Risk management

13. Incident Response

• Backups
• Backup topics
• Continuity of operations (COOP)
• BIA
• Incident response
• Digital forensics

14. Data Protection

• Data protection
• Data classification
• Data destruction
• Data privacy

15. Governance

• Security governance
• Asset management
• Policies
• Pen testing
• Audits and assessments
• Third-party oversight
• Legal considerations
• Security awareness