CompTIA Security+ Certification (Exam SY0-701) Online Course

The CompTIA Security+ SY0-701 training provides students with core security skills needed to function in a security role in Information Security.

Security Plus certification provided by CompTIA is a globally recognized certification for IT security professionals.  It is the foundation needed to work in and grow your career in a rewarding cybersecurity role. The official Exam ID is SY0-701.

After taking this Security+ Plus Certification training, students are prepared to sit for exam SY0-701 required by CompTIA for certification.  Following this course, students wanting to advance in a cybersecurity field should consider the more advanced CySA+ course.

As a Certified Security plus professional, you will have skills that exhibit the ability to work hands-on as a problem solver.  Your job role will typically include securing company systems, software, and hardware.   You will gain skills in risk assessment, incident response management, security controls, computer forensics, networks, and cloud operations.

CompTIA Security+ SY0-701 Course Overview
Dive into the evolving world of cybersecurity with our CompTIA Security+ SY0-701 course. This program is meticulously crafted to align with the latest cybersecurity trends and techniques, ensuring learners grasp the core concepts and skills necessary in today’s dynamic IT security landscape. Ideal for aspiring security specialists, network administrators, and IT auditors, this course is a stepping stone to mastering essential cybersecurity principles and practices.

Course Modules and Highlights

Module 1: General Security Concepts

• Kickstart your journey with a thorough understanding of fundamental security concepts and controls.
• Delve into Zero Trust models, a pivotal aspect of modern cybersecurity strategies.
• Engage in hands-on activities such as testing honeypots, crucial for grasping deception and disruption techniques.
• Learn about cryptographic solutions, including both symmetric and asymmetric encryption.

Module 2: Threats, Vulnerabilities, and Mitigations

• Explore various threat actors, motivations, and the latest trends in attack vectors, integral to risk management in cybersecurity.
• Understand social engineering, operating system vulnerabilities, and application attacks, reflecting the current threat landscape.
• Practical exercises on buffer overflows, SQL injections, and XSS attacks, preparing you for real-world cybersecurity challenges.

Module 3: Security Architecture

• Gain insights into designing and implementing secure network and system architectures.
• Focus on hybrid and cloud operations, critical in today’s cloud-dominated IT environments.
• Explore Internet of Things (IoT) and Operational Technology (OT) security, increasingly relevant in modern enterprise networks.

Module 4: Security Operations

• Dive into the domain of security operations, learning about monitoring, vulnerability management, and incident response.
• Understand the importance of identity and access management, a key component in managing user identities and access control.

Module 5: Security Program Management and Oversight

• Conclude with insights into effective security governance and risk management processes.
• Learn about the impact of third-party risks and compliance requirements in cybersecurity.

Who Should Enroll?
This course is designed for individuals aiming to start or advance their careers in cybersecurity. It’s particularly beneficial for entry-level cybersecurity professionals, security engineers, and system administrators.

Enhanced Features for Better Learning

• Course structured around the latest CompTIA Security+ SY0-701 exam domains.
• Emphasis on vendor-neutral certification, making the skills learned applicable across various technologies and platforms.
• Inclusion of current trends in cybersecurity, ensuring the content is up-to-date and relevant.

Testing and official certification are provided by CompTIA.  Please Note: The Official CompTIA Certification Exam is not included. Click here for testing options.

COURSE OUTLINE

Module 1 – SY0-701 General Security Concepts
1.0 Introduction to the Course
1.1 Fundamental Security Concepts
1.2 Zero Trust
1.3 Deception and Disruption
1.3.1 ACTIVITY – Testing a Honeypot
1.4 Security Controls
1.5 Change Management and Security
1.6 Cryptography Basics
1.6.1 ACTIVITY – Examining Symmetric Encryption
1.7 Asymmetric Encryption
1.7.1 ACTIVITY – Exploring Asymmetric Encryption
1.8 Hashing
1.8.1 ACTIVITY – Verifying Integrity with Hashing
1.9 Digital Certificates
1.10 Public Key Infrastructure
1.11 Data and Keys
1.12 Crypto Implementations
1.13 Blockchain
1.14 Non-Cryptographic Data Protection

Module 2 – SY0-701 Threats, Vulnerabilities, and Mitigations
2.1 Threat Actors and Motivations
2.2 Threat Vectors
2.2.1 ACTIVITY – O.MG Cable Baiting
2.2.2 O.MG-No Cable
2.3 Social Engineering
2.4 Operating System Vulnerabilities and Attacks
2.5 Application Vulnerabilities and Attacks
2.5.1 ACTIVITY – Performing a Buffer Overflow
2.6 Web-based Vulnerabilities and Attacks
2.6.1 ACTIVITY – Abusing Unsanitized Input
2.6.2 ACTIVITY – Grabbing Passwords with SQL Injection
2.6.3 ACTIVITY – Swiping a Token with XSS
2.7 Other Vulnerabilities
2.8 Common Malicious Activity Indicators
2.9 Insider Threat Indicators
2.10 Social Engineering Indicators
2.10.1 ACTIVITY – Capturing Credentials through Social Engineering
2.11 Malware Activity Indicators
2.12 Operating System Attack Indicators
2.13 Application Attack Indicators
2.13.1 ACTIVITY – Recognizing Directory Traversal
2.14 Physical Attack Indicators
2.14.1 ACTIVITY – Quickly Cloning an RFID Badge
2.15 Network Attack Indicators
2.15.1 ACTIVITY – Crashing a Target with DoS
2.16 Cryptographic Attack Indicators
2.17 Password Attack Indicators
2.17.1 ACTIVITY – Password Cracking
2.18 Network Segmentation
2.19 Access Control
2.20 Enterprise Device Hardening

Module 3 – SY0-701 Security Architecture
3.1 Network Segmentation
3.1.1 ACTIVITY – Segementing a Network
3.2 High Availability
3.3 Virtualization
3.3.1 ACTIVITY – Deploying Docker Containers
3.4 Cloud
3.5 Serverless Computing
3.6 IoT
3.7 ICS SCADA
3.7.1 ACTIVITY – Operating a SCADA System
3.8 RTOS and Embedded Systems
3.9 Reducing the Attack Surface
3.10 Firewalls
3.11 IDS IPS.mp4
3.12 Secure Communications – Access
3.13 Port Security
3.14 SD-WAN and SASE
3.15 Data Classifications
3.16 Protecting Data Types
3.17 Data Considerations
3.18 Redundancy
3.19 Alternate Sites
3.20 Multiple Platforms
3.21 Business Continuity

Module 4 – SY0-701 Security Operations
4.1 Secure Baselines
4.2 Attack Surface Reduction
4.3 Wireless Installation
4.4 Wireless Security Settings
4.5 Mobile Solutions
4.5.1 ACTIVITY – Pwning a Mobile Device
4.6 Application Security Management
4.7 Asset Management
4.8 Vulnerability Management
4.9 Monitoring Activities
4.10 Monitoring Tools
4.10.1 ACTIVITY – Scanning a Network for Vulnerabilities
4.11 Firewall Configuration
4.11.1 ACTIVITY – Configuring Firewall Rules
4.12 Intrusion Detection Configuration
4.13 Web Traffic Filtering
4.14 Operating System Policy
4.14.1 ACTIVITY – Examining Windows Group Policy
4.15 Network Service Security
4.16 Data Loss Protection
4.16.1 ACTIVITY – Checking File Integrity
4.17 Network Access Control
4.17.1 ACTIVITY – Require Multifactor Authentication
4.18 Identity Management
4.19 Access Management
4.19.1 ACTIVITY – Implementing Access Control
4.20 Security Automation
4.21 Incident Response
4.22 Digital Forensics

Module 5 – SY0-701 Security Program Management and Oversight
5.1 Elements of Effective Security Governance
5.2 Elements of the Risk Management Process
5.3 Third Party Risk Assessment and Management
5.3.1 ACTIVITY – Analyzing the Solar Winds Supply Chain Failure
5.4 Effective Security Compliance
5.5 Audits and Assessments
5.5.1 ACTIVITY – Conducting OSINT
5.5.2 ACTIVITY – Performing Active Reconnaissance
5.6 Security Awareness Practices
5.7 Course Outro

Key Term Knowledge Base: Key Terms Related to CompTIA Security+ SY0-701
Understanding key terms is crucial in effectively grasping the concepts and principles of cybersecurity, especially when preparing for certifications like the CompTIA Security+ SY0-701. This certification covers a broad range of cybersecurity topics, so familiarizing yourself with its terminology can greatly aid in comprehension and application in real-world scenarios.

These terms provide a foundational understanding for anyone studying for the CompTIA Security+ SY0-701 certification or interested in the field of cybersecurity.

Frequently Asked Questions Related to CompTIA Security+ 701

What is the CompTIA Security+ SY0-701 Certification?
The CompTIA Security+ SY0-701 is the latest version of the Security+ certification, a globally recognized credential validating foundational IT security knowledge and skills. It focuses on practical security skills and principles, keeping pace with the evolving cybersecurity landscape.

How does the SY0-701 version differ from its predecessors?
The SY0-701 version of Security+ has been updated to include the latest cybersecurity trends and techniques, emphasizing areas like risk assessment, incident response, enterprise networks, hybrid/cloud operations, and security controls. It reflects a more focused approach to cybersecurity, aligning with the current industry needs.

Who should take the CompTIA Security+ SY0-701 exam?
This certification is ideal for security specialists, network administrators, IT auditors, security consultants, security engineers, system administrators, and entry-level cybersecurity professionals. It is particularly beneficial for those seeking to establish or advance their careers in the field of IT security.

Are there prerequisites for the SY0-701 exam?
While there are no strict prerequisites, it is recommended that candidates have a solid background of at least two years in a security or systems administrator job role. Familiarity with general IT concepts and practices is also beneficial for understanding the course material.

What topics are covered in the SY0-701 exam?
The SY0-701 exam covers five main domains: General Security Concepts, Threats, Vulnerabilities, and Mitigations, Security Architecture, Security Operations, and Security Program Management and Oversight. These domains include a range of topics from cybersecurity controls and risk management to incident response and cloud security.