CompTIA Security+ Study Guide

250+ High-Yield Concepts for the CompTIA Security+ (SY0-701) Exam

A focused, high-yield concept review for the CompTIA Security+ (SY0-701) exam — 250+ high-yield concepts (255 total, each with key facts, a strategy tip, and a practical example) organized exactly like the exam, across all five weighted domains: Part 1 — General Security Concepts (30 concepts): CIA triad, non-repudiation, AAA, least privilege, defense in depth, zero trust, security controls, segmentation, air gaps, honeypots, change management, data classification/lifecycle/roles/states. Part 2 — Threats, Vulnerabilities, and Mitigations (55 concepts): malware families, social engineering (phishing, spear/whaling, vishing, pretexting, baiting, tailgating), network/wireless attacks (MITM, DoS/DDoS, ARP poisoning, DNS attacks, session hijacking, evil twin, rogue AP), application attacks (SQLi, XSS, CSRF, buffer overflow, XXE, zero-days), vulnerability management (CVSS, CVE/NVD, patching, threat hunting, disclosure). Part 3 — Security Architecture (45 concepts): firewalls, IDS/IPS, DMZ, VLANs, NAC, 802.1X, proxies, load balancing, VPNs, cloud models and shared responsibility, CASB, IaC, DevSecOps, IAM (factors, SSO, SAML/OAuth/OIDC, MFA, PAM, RBAC/ABAC), cryptography and PKI (symmetric/asymmetric, hashing, signatures, certificates, TLS, key management). Part 4 — Security Operations (70 concepts): logging and SIEM/SOAR, baselining and anomaly detection, incident response lifecycle, evidence and chain of custody, order of volatility, forensics, backups and RPO/RTO, DR sites, automation/orchestration, hardening, DLP, email security (SPF/DKIM/DMARC), physical security, wireless hardening, MDM/BYOD, IoT/SCADA. Part 5 — Security Program Management and Oversight (55 concepts): risk management (qualitative/quantitative, ALE/SLE/ARO, risk register, response strategies, supply chain), BCP/DRP/COOP, BIA and MTD, testing exercises, compliance (GDPR, HIPAA, PCI DSS, SOX), audits and reporting, governance, policies/standards/baselines/procedures, training and awareness, metrics and continuous improvement. Includes an exam snapshot (SY0-701, up to 90 questions / 90 minutes with single/multiple-response, drag-and-drop, and performance-based items, 750 passing score on a 100-900 scale, five domain weights 12/22/18/28/20, a recommended-not-required 2 years of IT admin experience with a security focus, and 3-year validity with Continuing Education renewal), plus a 30-day study plan and test-day strategy. Confirm at comptia.org: exam facts in this guide are based on the published SY0-701 exam-objectives structure; comptia.org was unreachable at build time, so verify the current version, format, fees, and policies at comptia.org before registering. An independent study aid — not affiliated with, endorsed by, or sponsored by CompTIA. Security+ and SY0-701 are trademarks/designations of CompTIA.