CompTIA Security+ (Evening)

CompTIA Security+ (SY0-701) is a global certification that validates the baseline skills necessary to perform core security functions and pursue an IT security career.

Open the Door to Your Cybersecurity Career

Launch a successful cybersecurity career

Develop a core foundation of essential skills, paving the way for a fulfilling career. More job roles use Security+ for baseline cybersecurity skills than any other certification in the industry.

Assess on-the-job skills

Security+ is the most widely adopted ISO/ANSI-accredited early career cybersecurity certification on the market with hands-on, performance-based questions on the certification exam. These practical questions assess your ability to effectively problem solve in real-life situations and demonstrate your expertise to potential employers immediately.

Embrace the latest trends

Understand and use the most recent advancements in cybersecurity technology, terms, techniques, and tools. By acquiring early career skills in the latest trends such as automation, zero trust, risk analysis, operational technology, and IoT, you will be well-equipped to excel in the ever-evolving cybersecurity landscape.

Exam SY0-701

The new CompTIA Security+ represents the latest and greatest in cybersecurity, covering the most in-demand skills related to current threats, automation, zero trust, IoT, risk - and more. Once certified, you'll understand the core skills needed to succeed on the job - and employers will notice too. The Security+ exam verifies you have the knowledge and skills required to:

• Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions.
• Monitor and secure hybrid environments, including cloud, mobile, Internet of Things (IoT), and operational technology.
• Operate with an awareness of applicable regulations and policies, including principles of governance, risk, and compliance.
• Identify, analyze, and respond to security events and incidents.

CompTIA Security+ is compliant with ISO 17024 standards and approved by the U.S. DoD to meet directive 8140/8570.01-M requirements. Regulators and government rely on ANSI accreditation because it provides confidence and trust in the outputs of an accredited program. Over 2.3 million CompTIA ISO/ANSI-accredited exams have been delivered since January 1, 2011.

What Skills Will You Learn?

General Security Concepts

Includes key cybersecurity terminology and concepts up front to provide a foundation for security controls discussed throughout the exam.

Threats, Vulnerabilities & Mitigations

Focuses on responding to common threats, cyberattacks, vulnerabilities, and security incidents and appropriate mitigation techniques to monitor and secure hybrid environments.

Security Architecture

Includes security implications of different architecture models, principles of securing enterprise infrastructure, and strategies to protect data.

Security Operations

Includes applying and enhancing security and vulnerability management techniques, as well as security implications of proper hardware, software, and data management.

Security Program Management & Oversight

Updated to better reflect the reporting and communication skills required for Security+ job roles relating to governance, risk management, compliance, assessment, and security awareness.

Jobs You Can Land With CompTIA Security+

• Cloud Penetration Tester
• Network Security Operations
• Penetration Tester
• Network Security Analyst
• Web App Penetration Tester
• Security Architect

Course Content

1.0 General Security Concepts

Compare and contrast various types of security controls.

• Categories
• Control types

Summarize fundamental security concepts.

• Confidentiality, Integrity, and Availability (CIA)
• Non-repudiation
• Authentication, Authorization, and Accounting (AAA)
• Gap analysis
• Zero Trust
• Physical security
• Deception and disruption technology

Explain the importance of change management processes and the impact to security.

• Business processes impacting security operation
• Technical implications
• Documentation
• Version control

Explain the importance of using appropriate cryptographic solutions.

• Public key infrastructure (PKI)
• Encryption
• Tools
• Obfuscation
• Steganography
• Tokenization
• Data masking
• Hashing
• Salting
• Digital signatures
• Key stretching
• Blockchain
• Open public ledger
• Certificates

2.0 Threats, Vulnerabilities, and Mitigations

Compare and contrast common threat actors and motivations.

• Threat actors
• Attributes of actors
• Motivations

Explain common threat vectors and attack surfaces.

• Message-based
• Email
• Short Message Service (SMS)
• Instant messaging (IM)
• Image-based
• File-based
• Voice call
• Removable device
• Vulnerable software
• Unsupported systems and applications
• Unsecure networks
• Open service ports
• Default credentials
• Supply chain
• Human vectors/social engineering

Explain various types of vulnerabilities.

• Application
• Operating system (OS)-based
• Web-based
• Hardware
• Virtualization
• Cloud-specific
• Supply chain
• Cryptographic
• Misconfiguration
• Mobile device
• Zero-day

Given a scenario, analyze indicators of malicious activity.

• Malware attacks
• Physical attacks
• Network attacks
• Application attacks
• Cryptographic attacks
• Password attacks
• Indicators

Explain the purpose of mitigation techniques used to secure the enterprise.

• Segmentation
• Access control
• Application allow list
• Isolation
• Patching
• Encryption
• Monitoring
• Least privilege
• Configuration enforcement
• Decommissioning
• Hardening techniques

3.0 Security Architecture

Compare and contrast security implications of different architecture models.

• Architecture and infrastructure concepts
• Considerations

Given a scenario, apply security principles to secure enterprise infrastructure.

• Infrastructure considerations
• Secure communication/access
• Selection of effective controls

Compare and contrast concepts and strategies to protect data.

• Data types
• Data classifications
• General data considerations
• Methods to secure data

Explain the importance of resilience and recovery in security architecture.

• High availability
• Site considerations
• Platform diversity
• Multi-cloud systems
• Continuity of operations
• Capacity planning
• Testing
• Backups
• Power

4.0 Security Operations

Given a scenario, apply common security techniques to computing resources.

• Secure baselines
• Hardening targets
• Wireless devices
• Mobile solutions
• Wireless security settings
• Application security
• Sandboxing
• Monitoring

Explain the security implications of proper hardware, software, and data asset management.

• Acquisition/procurement process
• Assignment/accounting
• Monitoring/asset tracking
• Disposal/decommissioning

Explain various activities associated with vulnerability management.

• Identification methods
• Analysis
• Vulnerability response and remediation
• Validation of remediation
• Reporting

Explain security alerting and monitoring concepts and tools.

• Monitoring computing resources
• Activities
• Tools

Given a scenario, modify enterprise capabilities to enhance security.

• Firewall
• IDS/IPS
• Web filter
• Operating system security
• Implementation of secure protocols
• DNS filtering
• Email security
• File integrity monitoring
• DLP
• Network access control (NAC)
• Endpoint detection and response (EDR)/extended detection and response (XDR)
• User behavior analytics

Given a scenario, implement and maintain identity and access management.

• Provisioning/de-provisioning user accounts
• Permission assignments and implications
• Identity proofing
• Federation
• Single sign-on (SSO)
• Interoperability
• Attestation
• Access controls
• Multifactor authentication
• Password concepts
• Privileged access management tools

Explain the importance of automation and orchestration related to secure operations.

• Use cases of automation and scripting
• Benefits
• Other considerations

Explain appropriate incident response activities.

• Process
• Training
• Testing
• Root cause analysis
• Threat hunting
• Digital forensics

Given a scenario, use data sources to support an investigation.

• Log data
• Data sources

5.0 Security Program Management and Oversight

Summarize elements of effective security governance.

• Guidelines
• Policies
• Standards
• Procedures
• External considerations
• Monitoring and revision
• Types of governance structures
• Roles and responsibilities for systems and data

Explain elements of the risk management process.

• Risk identification
• Risk assessment
• Risk analysis
• Risk register
• Risk tolerance
• Risk appetite
• Risk management strategies
• Risk reporting
• Business impact analysis

Explain the processes associated with third-party risk assessment and management.

• Vendor assessment
• Vendor selection
• Agreement types
• Vendor monitoring
• Questionnaires
• Rules of engagement

Summarize elements of effective security compliance.

• Compliance reporting
• Consequences of non-compliance
• Compliance monitoring
• Privacy

Explain types and purposes of audits and assessments.

• Attestation
• Internal
• External
• Penetration testing

Given a scenario, implement security awareness practices.

• Phishing
• Anomalous behavior recognition
• User guidance and training
• Reporting and monitoring
• Development
• Execution

MCSEClasses.com is your best choice for CompTIA Security+ Evening, CompTIA Security+ Evening training, CompTIA Security+ Evening certification, CompTIA Security+ Evening certification boot camp, CompTIA Security+ Evening boot camp, CompTIA Security+ Evening certification training, CompTIA Security+ Evening boot camp training, CompTIA Security+ Evening boot camp certification, CompTIA Security+ Evening certification course, CompTIA Security+ Evening course, training CompTIA Security+ Evening, certification CompTIA Security+ Evening, boot camp CompTIA Security+ Evening, certification CompTIA Security+ Evening boot camp, certification CompTIA Security+ Evening training, boot camp CompTIA Security+ Evening training, certification CompTIA Security+ Evening course.

mcseclasses home | technical schedule | application schedule | class outlines | mcse, mcdba, mcsd training | microsoft .net | cisco certification | security training | ced solutions oracle® certification training | linux, unix, aix | comptia certification | webmaster training | pricing | locations | financing | instructors needed | e-mail us