SY0-701: CompTIA Security+

Core principles of confidentiality, integrity, and availability (CIA triad)

Threat actors and attack vectors

Common types of vulnerabilities and exploits

Cybersecurity frameworks and guidelines

Basic cryptographic concepts (hashing, encryption, certificates)

• Malware types (viruses, worms, ransomware, etc.)
• Social engineering and phishing techniques
• Common system and network vulnerabilities
• Vulnerability scanning and penetration testing tools
• Mitigation strategies and controls

• Secure network design (DMZs, segmentation, firewalls)
• Identity and access management (IAM), SSO, MFA
• Secure system design and virtualization
• Security of cloud-based and hybrid environments
• Application and API security principles

• Incident response procedures and digital forensics
• Security monitoring and SIEM tools
• Security assessments and audits
• Log analysis and alert handling
• Business continuity and disaster recovery (BC/DR)

Governance, risk management, and compliance (GRC)

Data privacy laws and regulations (GDPR, HIPAA, etc.)

Security policies, training, and awareness

Vendor and third-party risk management

Project and change management in cybersecurity