CompTIA Security+ Certification Exam SY0-601

The CompTIA Security+ exam will certify that you have the knowledge and skills required to assess the security posture of an enterprise environment, recommend and implement appropriate security solutions, monitor and secure hybrid environments, operate with an awareness of applicable laws and policies, and identify, analyses, and respond to security events and incidents.

Recommended Prerequisite:

(a) Basic understanding of Operating Systems and computer networking

(b)  0-2 years of IT experience

Possible Job Roles:

Security Administrator

Systems Administrator

Helpdesk Manager / Analyst

Network / Cloud Engineer

Security Engineer / Analyst

DevOps / Software Developer

IT Auditors

IT Project Manager

1 – COMPARING SECURITY ROLES AND CONTROLS

  Topic 1A: Compare and Contrast Information Security Roles

  Topic 1B: Compare and Contrast Security Control and Framework Types

2 – EXPLAINING THREAT ACTORS AND THREAT INTELLIGENCE

  Topic 2A: Explain Threat Actor Types and Attack Vectors

3 – PERFORMING SECURITY ASSESSMENTS

  Topic 3A: Assess Organizational Security with Network Reconnaissance Tools

  Topic 3B: Explain Security Concerns with General Vulnerability Types

  Topic 3C: Summarize Vulnerability Scanning Techniques

  Topic 3D: Explain Penetration Testing Concepts

4 – IDENTIFYING SOCIAL ENGINEERING AND MALWARE

  Topic 4A: Compare and Contrast Social Engineering Techniques

  Topic 4B: Analyze Indicators of Malware-Based Attacks

5 – SUMMARIZING BASIC CRYPTOGRAPHIC CONCEPTS

  Topic 5A: Compare and Contrast Cryptographic Ciphers

  Topic 5B: Summarize Cryptographic Modes of Operation

  Topic 5C: Summarize Cryptographic Use Cases and Weaknesses

  Topic 5D: Summarize Other Cryptographic Technologies

6 – IMPLEMENTING PUBLIC KEY INFRASTRUCTURE

  Topic 6A: Implement Certificates and Certificate Authorities

  Topic 6B: Implement PKI Management

7 – IMPLEMENTING AUTHENTICATION CONTROLS

  Topic 7A: Summarize Authentication Design Concepts

  Topic 7B: Implement Knowledge-Based Authentication

  Topic 7C: Implement Authentication Technologies

  Topic 7D: Summarize Biometrics Authentication Concepts

8 – IMPLEMENTING IDENTITY AND ACCOUNT MANAGEMENT CONTROLS

  Topic 8A: Implement Identity and Account Types

  Topic 8B: Implement Account Policies

  Topic 8C: Implement Authorization Solutions

  Topic 8D: Explain the Importance of Personnel Policies

9 – IMPLEMENTING SECURE NETWORK DESIGNS

  Topic 9A: Implement Secure Network Designs

  Topic 9B: Implement Secure Switching and Routing

  Topic 9C: Implement Secure Wireless Infrastructure

  Topic 9D: Implement Load Balancers

10 – IMPLEMENTING NETWORK SECURITY APPLIANCES

  Topic 10A: Implement Firewalls and Proxy Servers

  Topic 10B: Implement Network Security Monitoring

  Topic 10C: Summarize the Use of SIEM

11 – IMPLEMENTING SECURE NETWORK PROTOCOLS

  Topic 11A: Implement Secure Network Operations Protocols

  Topic 11B: Implement Secure Application Protocols

  Topic 11C: Implement Secure Remote Access Protocols

12 – IMPLEMENTING HOST SECURITY SOLUTIONS

  Topic 12A: Implement Secure Firmware

  Topic 12B: Implement Endpoint Security

  Topic 12C: Explain Embedded System Security Implications

13 – IMPLEMENTING SECURE MOBILE SOLUTIONS

  Topic 13A: Implement Mobile Device Management

  Topic 13B: Implement Secure Mobile Device Connections

14 – SUMMARIZING SECURE APPLICATION CONCEPTS

  Topic 14A: Analyze Indicators of Application Attacks

  Topic 14B: Analyze Indicators of Web Application Attacks

  Topic 14C: Summarize Secure Coding Practices

  Topic 14D: Implement Secure Script Environments

  Topic 14E: Summarize Deployment and Automation Concepts

15 – IMPLEMENTING SECURE CLOUD SOLUTIONS

  Topic 15A: Summarize Secure Cloud and Virtualization Services

  Topic 15B: Apply Cloud Security Solutions

  Topic 15C: Summarize Infrastructure as Code Concepts

16 – EXPLAINING DATA PRIVACY AND PROTECTION CONCEPTS

  Topic 16A: Explain Privacy and Data Sensitivity Concepts

  Topic 16B: Explain Privacy and Data Protection Controls

17 – PERFORMING INCIDENT RESPONSE

  Topic 17A: Summarize Incident Response Procedures

  Topic 17B: Utilize Appropriate Data Sources for Incident Response

  Topic 17C: Apply Mitigation Controls

18 – EXPLAINING DIGITAL FORENSICS

  Topic 18A: Explain Key Aspects of Digital Forensics Documentation

  Topic 18B: Explain Key Aspects of Digital Forensics Evidence Acquisition

19 – SUMMARIZING RISK MANAGEMENT CONCEPTS

  Topic 19A: Explain Risk Management Processes and Concepts

20 – IMPLEMENTING CYBERSECURITY RESILIENCE

  Topic 20A: Implement Redundancy Strategies

  Topic 20B: Implement Backup Strategies

  Topic 20C: Implement Cybersecurity Resiliency Strategies

21 – EXPLAINING PHYSICAL SECURITY

  Topic 21A: Explain the Importance of Physical Site Security Controls

  Topic 21B: Explain the Importance of Physical Host Security Controls