Questions? Call 1.800.716.8955

Security

CompTIA Security+

Threats and attacks, security architecture, implementation, incident response and governance.

SY0-601 0 of 39 read Start reading

Part AIntroduction

  1. A.1Part A: Introduction
  2. A.2Breakdown
  3. A.3Recommended Tools, Hardware & Software
  4. A.4Acronyms Used in This Book

Part BExam objectives

"% of exam" is each domain's share of questions in the exam outline this guide follows.

1.0Threats, Attacks and Vulnerabilities24% of exam · 8 objectives
  1. 1.1Compare and contrast different types of social engineering techniques
  2. 1.2Given a scenario, analyze potential indicators to determine the type of attack
  3. 1.3Given a scenario, analyze potential indicators associated with application attacks
  4. 1.4Given a scenario, analyze potential indicators associated with network attacks
  5. 1.5Explain different threat actors, vectors, and intelligence sources
  6. 1.6Explain the security concerns associated with various types of vulnerabilities
  7. 1.7Summarize the techniques used in security assessments
  8. 1.8Explain the techniques used in penetration testing
2.0Architecture and Design21% of exam · 8 objectives
  1. 2.1Explain the importance of security concepts in an enterprise environment
  2. 2.2Summarize virtualization and cloud computing concepts
  3. 2.3Summarize secure application development, deployment, and automation concepts
  4. 2.4Summarize authentication and authorization design concepts
  5. 2.5Given a scenario, implement cybersecurity resilience
  6. 2.6Explain the security implications of embedded and specialized systems
  7. 2.7Explain the importance of physical security controls
  8. 2.8Summarize the basics of cryptographic concepts
3.0Implementation25% of exam · 9 objectives
  1. 3.1Given a scenario, implement secure protocols
  2. 3.2Given a scenario, implement host or application security solutions
  3. 3.3Given a scenario, implement secure network designs
  4. 3.4Given a scenario, install and configure wireless security settings
  5. 3.5Given a scenario, implement secure mobile solutions
  6. 3.6Given a scenario, apply cybersecurity solutions to the cloud
  7. 3.7Given a scenario, implement identity and account management controls
  8. 3.8Given a scenario, implement authentication and authorization solutions
  9. 3.9Given a scenario, implement public key infrastructure
4.0Operations and Incident Response16% of exam · 5 objectives
  1. 4.1Given a scenario, use the appropriate tool to assess organizational security
  2. 4.2Summarize the importance of policies, processes, and procedures for incident response
  3. 4.3Given an incident, utilize appropriate data sources to support an investigation
  4. 4.4Given an incident, apply mitigation techniques or controls to secure an environment
  5. 4.5Explain the key aspects of digital forensics
5.0Governance, Risk, and Compliance14% of exam · 5 objectives
  1. 5.1Compare and contrast various types of controls
  2. 5.2Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture
  3. 5.3Explain the importance of policies to organizational security
  4. 5.4Summarize risk management processes and concepts
  5. 5.5Explain privacy and sensitive data concepts in relation to security