Index

Sitemap

5 domains · 28 objectives · 130 lessons · 25 guides · 20 posts

Topic Guides

CIA Triad (Confidentiality, Integrity, Availability)Zero Trust Architecture (Never Trust, Always Verify)Symmetric vs Asymmetric Encryption Phishing and Social Engineering Attacks Risk Management Process (Risk Assessment, BIA, Mitigation)PKI (Public Key Infrastructure) — Certificates, CA, CRL, OCSP Firewalls, IDS, IPS, and Network Security Devices Malware Types: Virus, Ransomware, Trojan, Rootkit, Worm Incident Response Process (NIST 800-61) and SIEM Identity and Access Management (IAM): Authentication, MFA, SSO Hashing Algorithms: SHA, MD5, Salting, and Digital Signatures Cloud Security: IaaS, PaaS, SaaS and the Shared Responsibility Model Disaster Recovery and Business Continuity: RTO, RPO, Backups Social Engineering Attacks: Physical and Psychological Manipulation SQL Injection, XSS, and Application Vulnerabilities VPN: Virtual Private Networks, IPSec, and SSL VPN Security Compliance: GDPR, HIPAA, PCI DSS, and Regulatory Frameworks Network Security: 802.1X, NAC, Port Security, and VLANs Endpoint Security: EDR, XDR, Hardening, and Secure Baselines Security Governance: Policies, Standards, Procedures, and Guidelines Defense in Depth: Layered Security Controls and Strategy Supply Chain Risk Management: Vendor Assessment, SLAs, and Third-Party Risk Data Privacy: PII, Data Classification, and Privacy Principles Non-Repudiation: Digital Signatures, Audit Logs, and Proof of Origin AAA Framework: Authentication, Authorization, and Accounting

Blog Posts

100 Free CompTIA Security+ Practice Questions (SY0-701)CompTIA Security+ Exam Day Checklist: What to Bring and What to Expect How I Passed CompTIA Security+ in 30 Days: A Complete Study Plan Complete CompTIA Security+ Cheat Sheet (SY0-701)CompTIA Security+ Port Numbers Cheat Sheet: Every Port You Need to Know 5 Common CompTIA Security+ Exam Mistakes and How to Avoid Them Top 50 CompTIA Security+ PBQ Examples (Performance-Based Questions)CompTIA Security+ Certification Roadmap: A+ to CASP+CompTIA Security+ Exam Domains Explained (SY0-701)Zero Trust Architecture Explained: Never Trust, Always Verify Incident Response Lifecycle: NIST 800-61 Phases Explained CIA Triad Real-World Examples: Confidentiality, Integrity, Availability Firewall Types Explained: WAF, NGFW, UTM, and Packet Filter Every CompTIA Security+ Acronym Explained (Complete Glossary)Malware Types Explained: Virus, Worm, Trojan, Ransomware, Rootkit PKI Explained: How Public Key Infrastructure Works Authentication vs Authorization: What's the Difference?Risk Management Guide for CompTIA Security+: Assessment, Analysis, and Mitigation Cloud Security Basics: IaaS, PaaS, SaaS, and Shared Responsibility Social Engineering Attacks: Types, Techniques, and Prevention

FAQ Guides

What Is CompTIA Security+?Security+ vs Network+ vs CySA+ vs CISSP vs CEH Security+ Exam Cost & Renewal Guide Security+ Study Plan: How to Pass in 30, 60, or 90 Days Security+ Career: Jobs, Salary & Certification Path Security+ Exam Tips: How to Pass on Your First Attempt

Study Domains

Domain 1

General Security Concepts

1.1Security Controls

Compare and contrast various types of security controls.

2 lessons

1.1.1 Categories of Controls 1.1.2 Control Types

1.2Fundamental Security Concepts

Summarize fundamental security concepts.

7 lessons

1.2.1 CIA Triad 1.2.2 Non-repudiation 1.2.3 Authentication, Authorization, Accounting (AAA)1.2.4 Gap Analysis 1.2.5 Zero Trust 1.2.6 Physical Security 1.2.7 Deception & Disruption Technology

1.3Change Management

Explain the importance of change management processes and the impact to security.

3 lessons

1.3.1 Business Processes 1.3.2 Technical Implications 1.3.3 Documentation & Version Control

1.4Cryptographic Solutions

Explain the importance of using appropriate cryptographic solutions.

7 lessons

1.4.1 Public Key Infrastructure (PKI)1.4.2 Encryption 1.4.3 Cryptographic Tools 1.4.4 Obfuscation 1.4.5 Hashing, Salting & Signatures 1.4.6 Key Stretching & Blockchain 1.4.7 Certificates

Domain 2

Threats, Vulnerabilities, and Mitigations

2.1Threat Actors & Motivations

Compare and contrast common threat actors and motivations.

3 lessons

2.1.1 Threat Actors 2.1.2 Attributes of Actors 2.1.3 Motivations

2.2Threat Vectors & Attack Surfaces

Explain common threat vectors and attack surfaces.

6 lessons

2.2.1 Message-Based Vectors 2.2.2 Image, File & Voice Vectors 2.2.3 Removable Devices & Vulnerable Software 2.2.4 Unsecure Networks & Open Ports 2.2.5 Supply Chain Vectors 2.2.6 Human Vectors / Social Engineering

2.3Types of Vulnerabilities

Explain various types of vulnerabilities.

6 lessons

2.3.1 Application Vulnerabilities 2.3.2 OS & Web-Based Vulnerabilities 2.3.3 Hardware Vulnerabilities 2.3.4 Virtualization & Cloud 2.3.5 Supply Chain & Cryptographic 2.3.6 Misconfiguration, Mobile & Zero-day

2.4Indicators of Malicious Activity

Analyze indicators of malicious activity.

6 lessons

2.4.1 Malware Attacks 2.4.2 Physical Attacks 2.4.3 Network Attacks 2.4.4 Application Attacks 2.4.5 Cryptographic & Password Attacks 2.4.6 Indicators

2.5Mitigation Techniques

Explain the purpose of mitigation techniques used to secure the enterprise.

5 lessons

2.5.1 Segmentation & Isolation 2.5.2 Access Control 2.5.3 Patching, Encryption & Monitoring 2.5.4 Configuration Enforcement & Decommissioning 2.5.5 Hardening Techniques

Domain 3

Security Architecture

3.1Architecture Models

Compare and contrast security implications of different architecture models.

6 lessons

3.1.1 Cloud Architecture 3.1.2 IaC, Serverless & Microservices 3.1.3 Network Infrastructure 3.1.4 Containerization & Virtualization 3.1.5 IoT, ICS/SCADA & Embedded Systems 3.1.6 Architecture Considerations

3.2Securing Enterprise Infrastructure

Apply security principles to secure enterprise infrastructure.

5 lessons

3.2.1 Infrastructure Considerations 3.2.2 Network Appliances 3.2.3 Port Security 3.2.4 Firewall Types 3.2.5 Secure Communication & Access

3.3Protecting Data

Compare and contrast concepts and strategies to protect data.

4 lessons

3.3.1 Data Types & Classifications 3.3.2 Data States 3.3.3 Data Sovereignty & Geolocation 3.3.4 Methods to Secure Data

3.4Resilience & Recovery

Explain the importance of resilience and recovery in security architecture.

5 lessons

3.4.1 High Availability 3.4.2 Site Considerations 3.4.3 Continuity & Capacity Planning 3.4.4 Testing 3.4.5 Backups & Power

Domain 4

Security Operations

4.1Securing Computing Resources

Apply common security techniques to computing resources.

7 lessons

4.1.1 Secure Baselines 4.1.2 Hardening Targets 4.1.3 Wireless Devices & Site Surveys 4.1.4 Mobile Solutions 4.1.5 Wireless Security Settings 4.1.6 Application Security 4.1.7 Sandboxing & Monitoring

4.2Asset Management

Explain the security implications of proper hardware, software, and data asset management.

4 lessons

4.2.1 Acquisition & Procurement 4.2.2 Assignment & Accounting 4.2.3 Monitoring & Asset Tracking 4.2.4 Disposal & Decommissioning

4.3Vulnerability Management

Explain various activities associated with vulnerability management.

4 lessons

4.3.1 Identification Methods 4.3.2 Analysis 4.3.3 Response & Remediation 4.3.4 Validation & Reporting

4.4Alerting & Monitoring

Explain security alerting and monitoring concepts and tools.

3 lessons

4.4.1 Monitoring Computing Resources 4.4.2 Activities 4.4.3 Tools

4.5Enterprise Capabilities

Modify enterprise capabilities to enhance security.

6 lessons

4.5.1 Firewall 4.5.2 IDS/IPS & Web Filter 4.5.3 OS Security 4.5.4 Secure Protocols & DNS Filtering 4.5.5 Email Security 4.5.6 FIM, DLP, NAC & EDR/XDR

4.6Identity & Access Management

Implement and maintain identity and access management.

6 lessons

4.6.1 Provisioning & De-provisioning 4.6.2 Federation & SSO 4.6.3 Access Controls 4.6.4 Multifactor Authentication 4.6.5 Password Concepts 4.6.6 Privileged Access Management

4.7Automation & Orchestration

Explain the importance of automation and orchestration related to secure operations.

3 lessons

4.7.1 Use Cases 4.7.2 Benefits 4.7.3 Other Considerations

4.8Incident Response

Explain appropriate incident response activities.

4 lessons

4.8.1 Process 4.8.2 Training & Testing 4.8.3 Root Cause Analysis & Threat Hunting 4.8.4 Digital Forensics

4.9Investigation Data Sources

Use data sources to support an investigation.

2 lessons

4.9.1 Log Data 4.9.2 Data Sources

Security Program Management and Oversight domain icon

Domain 5

Security Program Management & Oversight

5.1Security Governance

Summarize elements of effective security governance.

5 lessons

5.1.1 Guidelines & Policies 5.1.2 Standards & Procedures 5.1.3 External Considerations 5.1.4 Governance Structures 5.1.5 Roles & Responsibilities

5.2Risk Management

Explain elements of the risk management process.

5 lessons

5.2.1 Risk Identification & Assessment 5.2.2 Risk Analysis 5.2.3 Risk Register & Tolerance 5.2.4 Risk Management Strategies 5.2.5 Business Impact Analysis

5.3Third-Party Risk

Explain the processes associated with third-party risk assessment and management.

4 lessons

5.3.1 Vendor Assessment 5.3.2 Vendor Selection 5.3.3 Agreement Types 5.3.4 Vendor Monitoring & Questionnaires

5.4Security Compliance

Summarize elements of effective security compliance.

4 lessons

5.4.1 Compliance Reporting 5.4.2 Consequences of Non-Compliance 5.4.3 Compliance Monitoring 5.4.4 Privacy

5.5Audits & Assessments

Explain types and purposes of audits and assessments.

4 lessons

5.5.1 Attestation & Internal Audits 5.5.2 External Audits 5.5.3 Penetration Testing 5.5.4 Reconnaissance

5.6Security Awareness

Implement security awareness practices.

4 lessons

5.6.1 Phishing Awareness 5.6.2 Anomalous Behavior Recognition 5.6.3 User Guidance & Training 5.6.4 Reporting, Monitoring & Development

Other Pages

About CyberPath Contact Privacy Policy Terms of Service