CompTIA Security+

Fundamentals of Security

• Threats & Vulnerabilities
• CIA Triad
• IAAA of Security
• Security Controls
• Gap Analysis
• Zero-Trust Model

Threat Actors

• Threat Actor Motives
• Threat Actors
  • Shadow IT
• Deception Techniques

Physical Security

• Physical Security

Social Engineering

• Motivational Triggers
• Phishing Attacks
• Social Engineering Attacks
  • Impersonation

Malware

• Types of Malware
• Malware Exploitation Techniques
• Indicators of Malware Attack

Data Protection

• Data Classification
• Data Ownership
• Data States & Types
• Data Protection Techniques
• Data Loss Prevention (DLP)

Cryptographic Solutions

• Encryption
• Hashing
• Digital Certificate
• Blockchain
• Encryption Tools & Techniques
• Obfuscation
• Cryptographic Attacks

Risk Management

• Risk Assessment Frequency
• Risk Identification
  • Business Impact Analysis (BIA)
• Risk Analysis
  • Risk Appetite
  • Risk Register
• Risk Management Strategies
• Risk Monitoring

Third-Party Vendor Risk

• Third-party Vendor Risks
• Contract and Agreement

Governance and Compliance

• Governance
• Policies
• Standards & Procedures
• Compliance

Asset & Change Management

• Asset Management
  • Mobile Device Management
• Change Management

Audits & Assessments

• Internal Audits
• External Audits
• Penetration Testing
• Reconnaissance

Cyber Resilience & Redundancy

• High Availability
• Redundant Data (RAID)
• Redundant Site
• Powering Data Centers
• Data Backup

Security Architecture

• Benefits of Cloud Computing
• Cloud Security Concerns
• Virtualization
• Software Defined Networking (SDN)
• Internet of Things (IoT)
• ICS and SCADA Systems
• Embedded Systems

Security Infrastructure

• Network Ports
  • Port Security
• Firewalls
• IDS and IPS
• Load Balancer
• Proxy Server
• VPN Server
  • IPsec Protocol Suite
• SD-WAN and SASE
• Network Security Zones
  • Screened Subnet

Identity and Access Management (IAM) Solutions

• Identity and Access Management (IAM)
• Authentication Factors
• Single Sign-On (SSO)
  • Identity Providers (IdP)
  • Federation
  • Lightweight Directory Access Protocol (LDAP)
• Access Control Models

Vulnerabilities and Attacks

• Bluetooth Vulnerabilities
• Mobile Vulnerabilities
• SQL Injection
• Cross Site Scripting (XSS)

Malicious Activity

• Denial of Service (DoS) Attack
• Domain Name System (DNS) Attacks

Hardening

• SELinux
• Data Encryption

Security Techniques

• Wireless Encryption Standards
• Application Security
• Network Access Control (NAC)
• Web and DNS Filtering
• Email Security
• Endpoint Protection

Vulnerability Management

• Cyber Threat Intelligence (CTI)
  • Threat Hunting
• Analyzing Vulnerabilities

Alerting and Monitoring

• Simple Network Management Protocol (SNMP)
• Security Content Automation Protocol (SCAP)
• NetFlow

Incident Response

• Incident Response Procedure
• Threat Hunting
• Digital Media Forensics