CompTIA Security+ (SY0-701) Exam Blueprint

comparing technical, preventive, managerial, deterrent, operational, detective, physical, corrective, compensating, and directive controls.

summarizing confidentiality, integrity, and availability (CIA); non-repudiation; authentication, authorization, and accounting (AAA); zero trust; and deception/disruption technology.

explaining business processes, technical implications, documentation, and version control.

using public key infrastructure (PKI), encryption, obfuscation, hashing, digital signatures, and blockchain.

comparing nation-states, unskilled attackers, hacktivists, insider threats, organized crime, shadow IT, and motivations like data exfiltration, espionage, and financial gain.

explaining message-based, unsecure networks, social engineering, file-based, voice call, supply chain, and vulnerable software vectors.

explaining application, hardware, mobile device, virtualization, operating system (OS)-based, cloud-specific, web-based, and supply chain vulnerabilities.

analyzing malware attacks, password attacks, application attacks, physical attacks, network attacks, and cryptographic attacks.

using segmentation, access control, configuration enforcement, hardening, isolation, and patching.

comparing on-premises, cloud, virtualization, Internet of Things (IoT), industrial control systems (ICS), and infrastructure as code (IaC).

applying security principles to infrastructure considerations, control selection, and secure communication/access.

comparing data types, securing methods, general considerations, and classifications.

explaining high availability, site considerations, testing, power, platform diversity, backups, and continuity of operations

applying secure baselines, mobile solutions, hardening, wireless security, application security, sandboxing, and monitoring.

explaining acquisition, disposal, assignment, and monitoring/tracking of hardware, software, and data assets.

identifying, analyzing, remediating, validating, and reporting vulnerabilities.

explaining monitoring tools and computing resource activities.

modifying firewalls, IDS/IPS, DNS filtering, DLP (data loss prevention), NAC (network access control), and EDR/XDR (endpoint/extended detection and response).

implementing provisioning, SSO (single sign-on), MFA (multifactor authentication), and privileged access tools.

explaining automation use cases, scripting benefits, and considerations.

implementing processes, training, testing, root cause analysis, threat hunting, and digital forensics.

using log data and other sources to support investigations.

summarizing guidelines, policies, standards, procedures, external considerations, monitoring, governance structures, and roles/responsibilities.

explaining risk identification, assessment, analysis, register, tolerance, appetite, strategies, reporting, and business impact analysis (BIA).

managing vendor assessment, selection, agreements, monitoring, questionnaires, and rules of engagement.

summarizing compliance reporting, consequences of non-compliance, monitoring, and privacy.

explaining attestation, internal/external audits, and penetration testing.

implementing phishing training, anomalous behavior recognition, user guidance, reporting, and monitoring.