CompTIA Security+ SY0-701 Study Guide: Key Topics Across Five Domains

Summary

A study guide outlining the five CompTIA Security+ SY0-701 domains and topics to prioritize, including attacks, secure design, incident response, and risk management. It notes that foundational concepts make up about 12% of the exam.

Key points

• The SY0-701 exam is organized into five domains, which the article recommends using to structure study.
• The foundational cybersecurity concepts domain accounts for about 12% of the exam, but its concepts apply across the other domains.
• The attacks and mitigation topics include malware, social engineering, network attacks, vulnerabilities, patching, input validation, and segmentation.
• The secure-design domain covers building systems with security in mind, including networks, identities, and trust between components.
• Operations and incident response topics include SIEM basics, log analysis, incident-response stages, vulnerability management, and backup and recovery.
• The governance and risk-management domain focuses on risk decisions, investment, and risk acceptance.