CompTIA Security+ Notes

Table of Contents

1.0 General Security Concepts
1.1 Security Controls

View 1.1 Security Controls

1.2 Fundamental Security Concepts

View 1.2.1 The CIA TRIAD

View 1.2.2 Non-Repudiation

View 1.2.3 AAA Framework

View 1.2.4 Gap Analysis

View 1.2.5 Zero Trust

View 1.2.6 Physical Security

View 1.2.7 Detection and Disruption

1.3 Change Management Process

View 1.3.1 Change Management

View 1.3.2 Technical Change Management

1.4 Appropriate uses of Cryptography

View 1.4.1 Public Key Infrastructure (PKI)

View 1.4.2 Encrypting Data

View 1.4.3 Key Exchange

View 1.4.4 Encryption Technologies

View 1.4.5 Obfuscation

View 1.4.6 Hashing and Digital Signatures

View 1.4.7 Blockchain Technologies

View 1.4.8 Certificates

2.0 Threats, Vulnerabilities, and Mitigations
2.1 Threat Actors

View 2.1 Threat Actors

2.2 Threat Vectors

Coming soon...

2.3 Vulnerability Types

View 2.3.1 Memory Injection

View 2.3.2 Buffer Overflow

View 2.3.3 Race Conditions

View 2.3.4 Malicious Updates

View 2.3.5 Operating System Vulnerabilities

View 2.3.6 SQL Injection

View 2.3.7 Cross-Site Scripting

View 2.3.8 Hardware Vulnerabilities

View 2.3.9 Virtualization Vulnerabilities

View 2.3.91 Cloud-Specific Vulnerabilities

View 2.3.92 Supply Chain Vulnerabilities

View 2.3.93 Misconfiguration Vulnerabilities

View 2.3.94 Mobile Device Vulnerabilities

View 2.3.95 Zero Day Vulnerabilities

2.4 Malicious Indicators

View 2.4.1 Malware Overview

View 2.4.2 Viruses and Worms

View 2.4.3 Spyware and Bloatware

View 2.4.4 Other Malware Types

View 2.4.5 Physical Attacks

View 2.4.6 Denial Of Service

View 2.4.7 DNS Poisoning

View 2.4.8 Wireless Attacks

View 2.4.9 On Path Attacks

View 2.4.10 Replay Attacks

View 2.4.11 Malicious Code

View 2.4.12 Application Attacks

View 2.4.13 Cryptographic Attacks

View 2.4.14 Password Attacks

View 2.4.15 Indicators of Compromise

2.5 Mitigation Techniques

View 2.5.1 Segmentation and Access Control

View 2.5.2 Mitigation Techniques

View 2.5.3 Hardening Techniques

3.0 Security Architecture
3.1 Security of Different Architecture Models

View 3.1.1 Cloud Infrastructures

View 3.1.2 Network Infrastructure Concepts

View 3.1.3 Other Infrastructures

View 3.1.4 Infrastructure Considerations

3.2 Apply Security Principles for Enterprises

View 3.2.1 Secure Infrastructures

View 3.2.2 Intrusion Prevention

View 3.2.3 Network Appliances

View 3.2.4 Port Security

View 3.2.5 Firewall Types

View 3.2.6 Secure Communication

3.3 C&C Methods to Protect Data

View 3.3.1 Data Types

View 3.3.2 States of Data

View 3.3.3 Protecting Data

3.4 Importance of Resilience and Recovery

View 3.4.1 Resiliency

View 3.4.2 Capacity Planning

View 3.4.3 Recovery Testing

View 3.4.4 Backups

View 3.4.5 Power Resiliency

4.0 Security Operations
4.1 Security Techniques (for) Computing Resources

View 4.1.1 Secure Baselines

View 4.1.2 Hardening Techniques

View 4.1.3 Securing Wireless and Mobile

View 4.1.4 Wireless Security Settings

View 4.1.5 Application Security

4.2 Security Implications and Management

View 4.2.1 Asset Management

4.3 Vulnerability Management Activities

View 4.3.1 Vulnerability Scanning

View 4.3.2 Threat Intelligence

View 4.3.3 Penetration Testing

View 4.3.4 Analyzing Vulnerabilities

View 4.3.5 Vulnerability Remediation

4.4 Security Alerting and Monitoring

View 4.4.1 Security Monitoring

View 4.4.2 Security Tools

4.5 Modifying to Enhance Security

View 4.5.1 Firewalls

View 4.5.2 Web Filtering

View 4.5.3 Operating System Security

View 4.5.4 Secure Protocols

View 4.5.5 Email Security

View 4.5.6 Monitoring Data

View 4.5.7 Endpoint Security

4.6 Identity and Access Management

View 4.6.1 Identity and Access Management

View 4.6.2 Access Controls

View 4.6.3 Multi-Factor Authentication

View 4.6.4 Password Security

4.7 Importance of Automation and Orchestration (for Security)

View 4.7.1 Scripting and Automation

4.8 Importance of Incident Response Activities

View 4.8.1 Incident Response

View 4.8.2 Incident Planning

View 4.8.3 Digital Forensics

4.9 Using Data Sources to support Investigation

View 4.9.1 Log Data

5.0 Security Program Management and Oversight
5.1 Elements of Effective Governance

View 5.1.1 Security Policies

View 5.1.2 Security Standards

View 5.1.3 Security Procedures

View 5.1.4 Security Considerations

View 5.1.5 Data Roles and Responsibilities

5.2 Elements of Risk Management

View 5.2.1 Risk Management

View 5.2.2 Risk Analysis

View 5.2.3 Risk Management Strategies

View 5.2.4 Business Impact Analysis

5.3 3rd Party Risk Assessment

View 5.3.1 Third Party Risk Assessment

View 5.3.2 Agreement Types

5.4 Effective Security Compliance

View 5.4.1 Compliance

View 5.4.2 Privacy

5.5 Audits and Assessments

View 5.5.1 Audits and Assessments

View 5.5.2 Penetration Testing

5.6 Security Awareness

View 5.6.1 Security Awareness

View 5.6.2 User Training