COMPTIACompTIA Security+
CompTIA Security+ is a globally recognized certification that validates the essential skills required for core security functions in IT security. It is ideal for professionals aiming to secure networks, applications, and devices, ensuring data integrity, confidentiality, and availability. This certification is crucial for advancing in the dynamic field of cybersecurity.
808 practice questions · Updated 2023-10-01
5Domains
28Objectives
212Concepts
808Questions
SY0-701 Curriculum
Every domain, objective, and concept the SY0-701 exam measures.
- Technical Controls
- Preventive Controls
- Managerial Controls
- Deterrent Controls
- Operational Controls
- Detective Controls
- Physical Controls
- Corrective Controls
- Compensating Controls
- Directive Controls
- Confidentiality
- Integrity
- Availability
- Non-repudiation
- Authentication
- Authorization
- Accounting
- Zero Trust
- Deception Technology
- Disruption Technology
- Business Process Understanding
- Technical Implications of Change
- Change Management Documentation
- Version Control Systems
- Public Key Infrastructure (PKI)
- Encryption
- Obfuscation
- Hashing
- Digital Signatures
- Blockchain
- Nation-State Threat Actors
- Unskilled Attackers
- Hacktivists
- Insider Threats
- Organized Crime
- Shadow IT
- Data Exfiltration
- Espionage
- Financial Gain
- Message-Based Threat Vectors
- Unsecure Networks
- Social Engineering Vectors
- File-Based Threat Vectors
- Voice Call Threat Vectors
- Supply Chain Threat Vectors
- Vulnerable Software Vectors
- Application Vulnerabilities
- Hardware Vulnerabilities
- Mobile Device Vulnerabilities
- Virtualization Vulnerabilities
- Operating System Vulnerabilities
- Cloud-Specific Vulnerabilities
- Web-Based Vulnerabilities
- Supply Chain Vulnerabilities
- Malware Types
- Malware Analysis Techniques
- Password Attack Methods
- Password Attack Mitigation
- Application Attack Types
- Application Attack Mitigation
- Physical Attack Methods
- Physical Attack Mitigation
- Network Attack Types
- Network Attack Mitigation
- Cryptographic Attack Methods
- Cryptographic Attack Mitigation
- Network Segmentation
- Access Control
- Configuration Enforcement
- System Hardening
- Isolation Techniques
- Patch Management
- On-Premises Architecture
- Cloud Architecture
- Virtualization
- Internet of Things (IoT)
- Industrial Control Systems (ICS)
- Infrastructure as Code (IaC)
- Comparing On-Premises and Cloud
- Comparing Virtualization and Physical Systems
- IoT vs. Traditional IT Systems
- ICS vs. Standard IT Systems
- IaC vs. Traditional Infrastructure Management
- Infrastructure Security Principles
- Control Selection
- Secure Communication Protocols
- Access Control Methods
- Network Segmentation
- Endpoint Security
- Data Loss Prevention
- Security Monitoring
- Cloud Infrastructure Security
- Data Types Identification
- Data Securing Methods
- Data Protection Considerations
- Data Classification Schemes
- Data Handling Procedures
- Data Access Controls
- Data Integrity Assurance
- High Availability
- Site Considerations
- Testing Resilience
- Power Management
- Platform Diversity
- Backup Strategies
- Continuity of Operations
- Secure Baselines
- Mobile Solutions Security
- System Hardening
- Wireless Security
- Application Security
- Sandboxing
- Monitoring
- Hardware Acquisition
- Software Acquisition
- Data Asset Acquisition
- Hardware Disposal
- Software Disposal
- Data Asset Disposal
- Asset Assignment
- Hardware Monitoring and Tracking
- Software Monitoring and Tracking
- Data Asset Monitoring and Tracking
- Vulnerability Identification
- Vulnerability Analysis
- Vulnerability Remediation
- Vulnerability Validation
- Vulnerability Reporting
- Network Monitoring Tools
- Host Monitoring Tools
- Application Monitoring Tools
- Log Analysis
- SIEM Systems
- Resource Utilization Monitoring
- Alerting Mechanisms
- Baseline Analysis
- Anomaly Detection
- Firewall Configuration
- IDS/IPS Configuration
- DNS Filtering Implementation
- DLP Policy Modification
- NAC Configuration
- EDR/XDR Deployment
- Provisioning Processes
- Single Sign-On (SSO)
- Multifactor Authentication (MFA)
- Privileged Access Management
- Identity Lifecycle Management
- Authentication Protocols
- Access Control Models
- Role-Based Access Control (RBAC)
- Identity Federation
- Automation Use Cases
- Scripting Benefits
- Automation Considerations
- Script Maintenance
- Security Automation Tools
- Integration of Automation
- Risk of Automation
- Cost-Benefit Analysis of Automation
- Incident Response Processes
- Incident Response Training
- Incident Response Testing
- Root Cause Analysis
- Threat Hunting
- Digital Forensics
- Log Data Collection
- Log Data Analysis
- Correlation of Log Data
- Log Data Retention Policies
- Using SIEM Tools
- Network Traffic Analysis
- Endpoint Data Sources
- Threat Intelligence Integration
- Data Source Integrity
- Legal and Ethical Considerations
- Guidelines
- Policies
- Standards
- Procedures
- External Considerations
- Monitoring
- Governance Structures
- Roles and Responsibilities
- Risk Identification
- Risk Assessment
- Risk Analysis
- Risk Register
- Risk Tolerance
- Risk Appetite
- Risk Strategies
- Risk Reporting
- Business Impact Analysis (BIA)
- Vendor Assessment
- Vendor Selection
- Vendor Agreements
- Vendor Monitoring
- Vendor Questionnaires
- Rules of Engagement
- Compliance Reporting
- Consequences of Non-Compliance
- Compliance Monitoring
- Privacy in Compliance
- Attestation
- Internal Audits
- External Audits
- Penetration Testing
- Phishing Training
- Anomalous Behavior Recognition
- User Guidance
- Incident Reporting
- Security Monitoring
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for SY0-701, so none is invented.