CompTIA Security+ Study Guide

Exam Overview

CompTIA Security+ (SY0-701) validates baseline cybersecurity skills and is the first security certification IT professionals should earn.

Exam Details

  • Cost: $392
  • Duration: 90 minutes
  • Questions: 90 multiple choice and performance-based
  • Passing Score: 750/900
  • Validity: 3 years
  • Prerequisites: CompTIA Network+ recommended (2 years IT experience)

Core Domains

Threats, Attacks & Vulnerabilities (24%)

  • Malware: Viruses, trojans, ransomware, spyware, rootkits
  • Social Engineering: Phishing, pretexting, baiting, tailgating
  • Attack Vectors: Email, web, wireless, removable media
  • Vulnerabilities: Unpatched systems, misconfigurations, weak passwords
  • Threat Intelligence: Indicators of compromise, threat actors

Architecture & Design (21%)

  • Security Controls: Preventive, detective, corrective, deterrent
  • Network Security: Firewalls, IDS/IPS, VPN, segmentation
  • Secure Protocols: HTTPS, SSH, SFTP, SNMPv3, LDAPS
  • Cloud Security: Shared responsibility model, CASB, cloud access
  • Zero Trust: Never trust, always verify, least privilege

Implementation (25%)

  • Identity Management: MFA, SSO, federation, directory services
  • PKI: Certificates, CAs, digital signatures, key management
  • Cryptography: Symmetric/asymmetric encryption, hashing, steganography
  • Mobile Security: BYOD, MDM, application management
  • Data Security: Classification, retention, disposal, DLP

Operations & Incident Response (16%)

  • Security Monitoring: SIEM, log analysis, threat hunting
  • Incident Response: Preparation, identification, containment, recovery
  • Forensics: Evidence collection, chain of custody, analysis
  • Disaster Recovery: BCP, RTO, RPO, backup strategies
  • Compliance: GDPR, HIPAA, SOX, PCI DSS

Governance, Risk & Compliance (14%)

  • Risk Management: Risk assessment, mitigation, acceptance
  • Security Policies: Acceptable use, incident response, data handling
  • Compliance Frameworks: NIST, ISO 27001, COBIT
  • Auditing: Internal/external audits, vulnerability assessments
  • Training: Security awareness, phishing simulation, education

Study Resources

Free Online Courses

Practice Labs

Practice Tests

  • CompTIA CertMaster Practice - Official practice questions
  • Jason Dion Practice Tests - 6 practice exams
  • ExamCompass - Free practice tests
  • Crucial Exams - Free practice questions

Books

  • “CompTIA Security+ Study Guide” by Mike Chapple
  • “CompTIA Security+ All-in-One Exam Guide” by Wm. Arthur Conklin
  • “CompTIA Security+ Certification Study Guide” by Glen Clarke

Hands-On Practice

Security Lab Setup

  1. Virtual Machines: Windows, Linux, vulnerable systems
  2. Security Tools: Wireshark, Nmap, Metasploit, Burp Suite
  3. Network Simulation: Packet Tracer, GNS3
  4. Cloud Environment: AWS, Azure free tiers

Common Lab Scenarios

  • Network Scanning: Port scanning, service enumeration
  • Vulnerability Assessment: Automated and manual testing
  • Incident Response: Log analysis, evidence collection
  • Cryptography: Encryption, hashing, certificate management

Key Concepts to Master

Cryptography

  • Symmetric Encryption: AES, DES, 3DES, key management
  • Asymmetric Encryption: RSA, ECC, key exchange
  • Hashing: SHA, MD5, HMAC, password hashing
  • Digital Signatures: Non-repudiation, integrity, authentication
  • PKI: Certificate authorities, certificate lifecycle

Network Security

  • Firewalls: Stateful, stateless, application-layer
  • IDS/IPS: Signature-based, anomaly-based, behavior-based
  • VPN: Site-to-site, remote access, SSL/TLS
  • Wireless Security: WPA2, WPA3, 802.1X, enterprise security

Identity and Access Management

  • Authentication: Something you know, have, are
  • Authorization: RBAC, ABAC, least privilege
  • Single Sign-On: SAML, OAuth, OpenID Connect
  • Multi-Factor Authentication: TOTP, SMS, biometrics

Risk Management

  • Risk Assessment: Identify, analyze, evaluate, treat
  • Risk Mitigation: Avoid, transfer, mitigate, accept
  • Business Impact: RTO, RPO, MTBF, MTTR
  • Compliance: Regulatory requirements, industry standards

Security Tools and Technologies

Network Security

  • Nmap: Network discovery, port scanning
  • Wireshark: Packet analysis, protocol inspection
  • Snort: Intrusion detection, rule-based analysis
  • pfSense: Firewall, VPN, traffic shaping

Vulnerability Assessment

  • Nessus: Vulnerability scanning, compliance checking
  • OpenVAS: Open-source vulnerability scanner
  • Burp Suite: Web application security testing
  • OWASP ZAP: Web application security scanner

Incident Response

  • Splunk: Log analysis, SIEM, correlation
  • ELK Stack: Elasticsearch, Logstash, Kibana
  • Volatility: Memory forensics, malware analysis
  • Autopsy: Digital forensics, evidence analysis

Exam Preparation Tips

Study Schedule (8-10 weeks)

  • Weeks 1-2: Threats, attacks, vulnerabilities
  • Weeks 3-4: Architecture, design, implementation
  • Weeks 5-6: Operations, incident response
  • Weeks 7-8: Governance, risk, compliance
  • Weeks 9-10: Practice tests, review

Study Methods

  1. Watch Videos: Professor Messer, Jason Dion
  2. Read Books: Official study guides
  3. Hands-on Practice: TryHackMe, HackTheBox
  4. Practice Tests: Multiple practice exams
  5. Flashcards: Key concepts and acronyms

Lab Practice

  • Set up vulnerable VMs: Metasploitable, DVWA
  • Practice with tools: Nmap, Wireshark, Burp Suite
  • Simulate attacks: SQL injection, XSS, privilege escalation
  • Incident response: Log analysis, evidence collection

Career Paths

Security Positions

  • Security Analyst - $50,000-80,000
  • Security Engineer - $70,000-120,000
  • Incident Responder - $60,000-100,000
  • Compliance Analyst - $55,000-85,000

Next Certifications

  • CompTIA CySA+ - Security analytics
  • CompTIA PenTest+ - Penetration testing
  • CISSP - Advanced security management
  • CISM - Information security management

Maintenance and Renewal

Continuing Education

  • CEUs Required: 20 CEUs every 3 years
  • Activities: Training, conferences, additional certs
  • Cost: $50 annual maintenance fee
  • Timeline: 3-year renewal cycle

Renewal Options

  • Additional Certifications: CySA+, PenTest+, CASP+
  • Training: CompTIA training courses
  • Teaching: Instructor-led training
  • Conferences: Security conferences and events

Remember: Security+ is your cybersecurity foundation. Focus on understanding security concepts, not just memorizing facts. Hands-on practice with security tools and scenarios is essential for success.