CompTIA Security+ SY0-701

Master Security+.

The definitive interactive guide for the SY0-701 exam. Select a domain below to explore core concepts and security principles.

Threats & Governance

⚠️

Threats, Attacks & Vulnerabilities

Social engineering, malware, vulnerability assessment, and threat modeling.

📋

Governance, Risk & Compliance

Policies, regulations, risk management, and security governance.

Engineering & Architecture

🏗️

Architecture & Design

Enterprise architecture, cloud security, mobile security, and IoT.

🔐

Cryptography & PKI

Encryption, certificates, digital signatures, and key management.

Operations & Implementation

⚙️

Implementation

Access control, identity management, network security controls.

🚨

Operations & Incident Response

Security operations, incident response, disaster recovery, and forensics.

Threats, Attacks & Vulnerabilities

Architecture & Design

Implementation

🔌

Core &
Web Ports

SSH / Telnet

22 / 23

DNS / DHCP

53 / 67, 68

HTTP / HTTPS

80 / 443

RDP / LDAP

3389 / 389

📧

Email &
File Transfer

FTP / SFTP

20, 21 / 22

SMTP / IMAP

25 / 143

POP3 / NetBIOS

110 / 137-139

SMB / SNMP

445 / 161

Operations & Incident Response

🚧

Phase 1 - 3
Prep, Detect & Contain

✦ 1. Preparation: Policies, training, and tools setup before an incident.
✦ 2. Identification: Detecting the incident and determining its scope.
✦ 3. Containment: Isolating the threat to prevent further damage.

🏁

Phase 4 - 6
Eradicate, Recover & Learn

✦ 4. Eradication: Removing the root cause and restoring clean systems.
✦ 5. Recovery: Bringing systems back online and monitoring closely.
✦ 6. Lessons Learned: Post-incident review to improve future responses.

🤖

Automation & Orchestration (SOAR)

SOAR (Security Orchestration, Automation, and Response) uses Playbooks (high-level strategy) and Runbooks (specific technical steps) to automate repetitive tasks like blocking an IP or isolating a host, reducing MTTR (Mean Time to Respond).

Master Security+.

Threats & Governance

Threats, Attacks & Vulnerabilities

Governance, Risk & Compliance

Engineering & Architecture

Architecture & Design

Cryptography & PKI

Operations & Implementation

Implementation

Operations & Incident Response

Threats, Attacks & Vulnerabilities

Architecture & Design

Implementation

Core &Web Ports

Email &File Transfer

Operations & Incident Response

Phase 1 - 3Prep, Detect & Contain

Phase 4 - 6Eradicate, Recover & Learn

Automation & Orchestration (SOAR)

Governance, Risk & Compliance

Cryptography & PKI

Core &
Web Ports

Email &
File Transfer

Phase 1 - 3
Prep, Detect & Contain

Phase 4 - 6
Eradicate, Recover & Learn