CompTIA Security+ SY0-701 - eLearning (exam included)

Threats, attacks, and vulnerabilities on the Internet from newer custom devices that require mitigation, such as: B. IoT and embedded devices, new DDoS attacks, and current event-based social engineering attacks.

Comparing Security Roles and Controls

- Compare and Contrast Information Security Roles
- Compare and Contrast Security Control and Framework Types
- Q&A with Knowledge Checks

Threat Actors and Threat

- Threat Actor Types and Attack Vectors
- Threat Intelligence Sources
- Q&A with Knowledge Checks

Assess Organizational Security with Network Reconnaissance Tools

- Security Concerns with General Vulnerability Types
- Vulnerability Scanning Techniques
- Penetration Testing Concepts
- Q&A with Knowledge Checks

Identifying Social Engineering and Malware

- Compare and Contrast Social Engineering Techniques.
- Analyze Indicators of Malware-Based Attacks
- Q&A with Knowledge Checks

The scope of the enterprise environment and its dependence on the cloud, which is rapidly increasing as the enterprise moves to a hybrid network.

Summarizing Basic Cryptographic Concepts

- Compare and Contrast Cryptographic Ciphers
- Summarize Cryptographic Modes of Operation
- Summarize Cryptographic Use Cases and Weaknesses
- Summarize Other Cryptographic Technologies
- Q&A with Knowledge Checks

Implementing Public Key Infrastructure

- Certificates and Certificate Authorities
- PKI Management
- Q&A with Knowledge Checks

Implementing Authentication Controls

- Authentication Design Concepts
- Knowledge-Based Authentication
- Authentication Technologies
- Biometrics Authentication Concepts
- Q&A with Knowledge Checks

Implementing Identity and Account Management Controls

- Identity and Account Types
- Account Policies
- Authorization Solutions
- Importance of Personnel Policies
- Q&A with Knowledge Checks

Focus on identity management, access management, PKI, basic cryptography, wireless security and end-to-end security.

Implementing Secure Network Designs

- Secure Network Designs
- Secure Switching and Routing
- Secure Wireless Infrastructure
- Load Balancers
- Q&A with Knowledge Checks

Implementing Network Security Appliances

- Firewalls and Proxy Servers
- Network Security Monitoring
- Use of SIEM
- Q&A with Knowledge Checks

Implementing Secure Network Protocols

- Secure Network Operations Protocols
- Secure Application Protocols
- Secure Remote Access Protocols
- Q&A with Knowledge Checks

Implementing Host Security Solutions

- Secure Firmware
- Endpoint Security
- Embedded System Security Implications
- Q&A with Knowledge Checks

Implementing Secure Mobile Solutions

- Mobile Device Management
- Secure Mobile Device Connections
- Q&A with Knowledge Checks

Includes organizational security assessments and incident management procedures such as: B. Basic threat detection, risk mitigation techniques, security controls and basic digital forensics.

Secure Application Concepts

- Analyze Indicators of Application Attacks
- Analyze Indicators of Web Application Attacks
- Secure Coding Practices
- Secure Script Environments
- Deployment and Automation Concepts
- Q&A with Knowledge Checks

Implementing Secure Cloud Solutions

- Secure Cloud and Virtualization Services
- Apply Cloud Security Solutions
- Infrastructure as Code Concepts
- Q&A with Knowledge Checks

Explaining Data Privacy and Protection Concepts

- Privacy and Data Sensitivity Concepts
- Privacy and Data Protection Controls
- Q&A with Knowledge Checks

Performing Incident Response

- Incident Response Procedures
- Utilize Appropriate Data Sources for Incident Response
- Apply Mitigation Controls
- Q&A with Knowledge Checks

Explaining Digital Forensics

- Key Aspects of Digital Forensics Documentation
- Key Aspects of Digital Forensics Evidence Acquisition
- Q&A with Knowledge Checks

Enhancements to support organizational risk management and compliance with regulations such as PCI-DSS, SOX, HIPAA, GDPR, FISMA, NIST and CCPA.

Summarizing Risk Management Concepts

- Risk Management Processes and Concepts
- Business Impact Analysis Concepts
- Q&A with Knowledge Checks

Implementing Cybersecurity Resilience

- Redundancy Strategies
- Backup Strategies
- Cybersecurity Resilience Strategies
- Q&A with Knowledge Checks

Explaining Physical Security

- Importance of Physical Site Security Controls
- Importance of Physical Host Security Controls
- Q&A with Knowledge Checks