comptia-security-plus-701-professormesser

Updated 31 Jul 2026

Course Status: Completed
Link: https://www.professormesser.com/sy0-701-certification-course/
Source: Professor Messer
Course Type: online

•
Overview
- •
  a knowledge collection for the CompTIA Security+ (SY0-701) exam, built from Professor Messer's course notes (all 5 domains: general security concepts, threats/vulnerabilities/mitigations, security architecture, security operations, and program management/governance)
•
Materials
- •
  Domain 1 — General Security Concepts
  - •
    Security Controls
    
    •
    Security Control Categories
    
    •
    Technical Control
    
    •
    Operational Control
    
    •
    Managerial Control
    
    •
    Security Control Types
    
    •
    Deterrent Control
    
    •
    Preventive Control
    
    •
    Detective Control
    
    •
    Corrective Control
    
    •
    Compensating Control
    
    •
    Directive Control
  - •
    Fundamentals
    
    •
    CIA Triad
    
    •
    Confidentiality
    
    •
    Integrity
    
    •
    Availability
    
    •
    AAA (Identification, Authentication, Authorization, Accounting)
    
    •
    Identification
    
    •
    Authentication
    
    •
    Authorization
    
    •
    Accounting
    
    •
    Three States of Data
    
    •
    Data in Transit
    
    •
    Data at Rest
    
    •
    Data in Use
    
    •
    Non-repudiation
    
    •
    Gap Analysis
    
    •
    Vulnerability
    
    •
    Threat
    
    •
    Risk
    
    •
    Data Sovereignty
  - •
    Zero Trust
    
    •
    Zero Trust
    
    •
    Data Plane
    
    •
    Control Plane
    
    •
    Adaptive Identity
    
    •
    Policy Enforcement Point (PEP)
  - •
    Physical Security
    
    •
    Physical Security
    
    •
    Lighting (Security)
    
    •
    Fencing
    
    •
    Video Surveillance
    
    •
    Bollards
    
    •
    Access Control Vestibule
    
    •
    Security Guard
    
    •
    Two-Person Integrity-Control
    
    •
    Access Badge
    
    •
    Sensors and Alarms
    
    •
    Infrared Sensors
    
    •
    Pressure Sensors
    
    •
    Microwave Sensors
    
    •
    Ultrasonic Sensors
    
    •
    Tailgating
    
    •
    Piggybacking
    
    •
    Physical Attack (Brute Force)
    
    •
    RFID Cloning
    
    •
    Environmental Attack
  - •
    Deception and Disruption
    
    •
    Deception and Disruption
    
    •
    Honeypot
    
    •
    Honeynet
    
    •
    Honeyfile
    
    •
    Honeytoken
  - •
    Change Management
    
    •
    Change Management
    
    •
    Change Approval Process
    
    •
    Ownership (Change Management)
    
    •
    Stakeholders (Change Management)
    
    •
    Impact Analysis (Change Management)
    
    •
    Sandbox Testing
    
    •
    Backout Plan
    
    •
    Maintenance Window
    
    •
    Standard Operating Procedure (SOP)
    
    •
    Technical Change Management
    
    •
    Allow List - Deny List
    
    •
    Restricted Activities
    
    •
    Downtime
    
    •
    Legacy Application
    
    •
    Dependencies (Change Management)
    
    •
    Documentation (Change Management)
    
    •
    Version Control
  - •
    Cryptography
    
    •
    Cryptography
    
    •
    Hashing
    
    •
    Hash Digest
    
    •
    Collision (Hashing)
    
    •
    Hashing Algorithms
    
    •
    MD5
    
    •
    SHA-256
    
    •
    SHA-512
    
    •
    Salting
    
    •
    Password Hashing
    
    •
    Key Stretching
    
    •
    Encryption
    
    •
    Symmetric Encryption
    
    •
    Asymmetric Encryption
    
    •
    Public Key
    
    •
    Private Key
    
    •
    Key Escrow
    
    •
    Diffie-Hellman Exchange
    
    •
    Key Exchange
    
    •
    In-band Key Exchange
    
    •
    Out-of-band Key Exchange
    
    •
    Session Key
    
    •
    Key Length
    
    •
    Levels of Encryption
    
    •
    Full-Disk Encryption
    
    •
    Partition Encryption
    
    •
    File Encryption
    
    •
    Volume Encryption
    
    •
    Database Encryption
    
    •
    Record Encryption
    
    •
    Transport Encryption
  - •
    Obfuscation
    
    •
    Obfuscation
    
    •
    Steganography
    
    •
    Tokenization
    
    •
    Data Masking
  - •
    Public Key Infrastructure & Certificates
    
    •
    Public Key Infrastructure (PKI)
    
    •
    Digital Certificate
    
    •
    Root of Trust
    
    •
    Certificate Authority
    
    •
    Third-Party Certificate Authority
    
    •
    Private Certificate Authority
    
    •
    Self-Signed Certificate
    
    •
    Certificate Signing Request (CSR)
    
    •
    Chain of Trust
    
    •
    Online Certificate Status Protocol (OCSP)
    
    •
    OCSP Stapling
    
    •
    Certificate Revocation List (CRL)
    
    •
    Subject Alternative Name (SAN)
    
    •
    Wildcard Certificate
  - •
    Digital Signatures & Other Cryptographic Concepts
    
    •
    Digital Signature
    
    •
    Code Signing
    
    •
    Blockchain
  - •
    Cryptographic Tools
    
    •
    Key Management
    
    •
    Secure Enclave
    
    •
    Trusted Platform Module (TPM)
    
    •
    Hardware Security Module (HSM)
- •
  Domain 2 — Threats, Vulnerabilities, and Mitigations
  - •
    Threat Actors
    
    •
    Threat Actor
    
    •
    Nation State
    
    •
    Unskilled Attacker
    
    •
    Hacktivist
    
    •
    Insider Threat
    
    •
    Organized Crime
    
    •
    Shadow IT
  - •
    Threat Vectors & Social Engineering
    
    •
    Vulnerable Software Vector
    
    •
    Unsupported Systems Vector
    
    •
    Unsecure Network Vector
    
    •
    Open Service Ports
    
    •
    Default Credentials
    
    •
    Phishing
    
    •
    Business Email Compromise
    
    •
    Typosquatting
    
    •
    Pretexting
    
    •
    Vishing
    
    •
    Smishing
    
    •
    Impersonation
    
    •
    Eliciting Information
    
    •
    Identity Fraud
    
    •
    Watering Hole Attack
    
    •
    Misinformation-Disinformation
  - •
    Memory Injection
    
    •
    Memory Injection
    
    •
    DLL Injection
  - •
    Application, Hardware & Cloud Vulnerabilities
    
    •
    Buffer Overflow
    
    •
    Race Condition
    
    •
    Malicious Updates
    
    •
    Operating System Vulnerabilities
    
    •
    SQL Injection
    
    •
    Cross-site Scripting (XSS)
    
    •
    Hardware Vulnerability
    
    •
    Firmware
    
    •
    End-of-Life (EOL)
    
    •
    End-of-Service-Life (EOSL)
    
    •
    Legacy Platform
    
    •
    Virtualization Vulnerability
    
    •
    VM Escape
    
    •
    Resource Reuse
    
    •
    Cloud-specific Vulnerability
    
    •
    Supply Chain Vulnerability
    
    •
    Misconfiguration Vulnerability
    
    •
    Mobile Device Vulnerabilities
    
    •
    Jailbreaking-Rooting
    
    •
    Sideloading
    
    •
    Zero-Day Vulnerability
  - •
    Malware & Attacks
    
    •
    Malware
    
    •
    Virus
    
    •
    Worm
    
    •
    Ransomware
    
    •
    Trojan Horse
    
    •
    Fileless Malware
    
    •
    Spyware
    
    •
    Bloatware
    
    •
    Keylogger
    
    •
    Logic Bomb
    
    •
    Rootkit
    
    •
    Denial of Service (DoS)
    
    •
    Distributed Denial of Service (DDoS)
    
    •
    DDoS Reflection and Amplification
    
    •
    DNS Poisoning
    
    •
    Domain Hijacking
    
    •
    Wireless Deauthentication Attack
    
    •
    RF Jamming
    
    •
    On-path Attack
    
    •
    On-path Browser Attack
    
    •
    Replay Attack
    
    •
    Pass the Hash
    
    •
    Session Hijacking
    
    •
    Header Manipulation
    
    •
    Malicious Code
    
    •
    Privilege Escalation
    
    •
    Cross-site Request Forgery (CSRF)
    
    •
    Directory Traversal
  - •
    Cryptographic Attacks
    
    •
    Birthday Attack
    
    •
    Downgrade Attack
    
    •
    SSL Stripping
  - •
    Password Attacks
    
    •
    Spraying Attack
    
    •
    Brute Force (Password Attack)
  - •
    Indicators of Compromise
    
    •
    Indicators of Compromise
    
    •
    Account Lockout
  - •
    Hardening Techniques
    
    •
    Endpoint Detection and Response (EDR)
    
    •
    Host-based Firewall
    
    •
    Host-based Intrusion Prevention System (HIPS)
    
    •
    Access Control List (ACL)
    
    •
    Configuration Enforcement
    
    •
    Decommissioning
- •
  Domain 3 — Security Architecture
  - •
    Infrastructure
    
    •
    Cloud Responsibility Matrix
    
    •
    Hybrid Cloud
    
    •
    Infrastructure as Code
    
    •
    Serverless Architecture
    
    •
    Microservices
    
    •
    Physical Isolation
    
    •
    Physical Segmentation
    
    •
    Logical Segmentation (VLANs)
    
    •
    Software Defined Networking (SDN)
    
    •
    Centralized vs. Decentralized Security
    
    •
    On-premises Security
    
    •
    Application Containerization
    
    •
    Virtualization
    
    •
    SCADA - ICS
    
    •
    Real-Time Operating System (RTOS)
    
    •
    Embedded System
    
    •
    Internet of Things (IoT)
    
    •
    Multi-cloud Systems
    
    •
    Infrastructure Considerations
    
    •
    Resilience
    
    •
    Risk Transference
  - •
    Secure Infrastructures
    
    •
    Device Placement
    
    •
    Security Zone
    
    •
    Attack Surface
    
    •
    Connectivity (Secure Infrastructure)
  - •
    Network Security Appliances
    
    •
    Intrusion Prevention System (IPS)
    
    •
    Failure Modes
    
    •
    Active Monitoring
    
    •
    Passive Monitoring
    
    •
    Jump Server
    
    •
    Proxy
  - •
    Port Security & Firewall Types
    
    •
    Port Security
    
    •
    Firewall
    
    •
    Network-based Firewall
    
    •
    Unified Threat Management (UTM)
    
    •
    Next-Generation Firewall (NGFW)
    
    •
    Web Application Firewall (WAF)
    
    •
    Screened Subnet
  - •
    Secure Communication
    
    •
    VPN Concentrator
    
    •
    SSL-TLS VPN
    
    •
    Site-to-site IPsec VPN
    
    •
    SD-WAN
    
    •
    SASE
  - •
    Data Protection
    
    •
    Data Types and Classifications
    
    •
    Tokenization
    
    •
    Segmentation (Data Protection)
  - •
    Resiliency
    
    •
    Server Clustering
    
    •
    Load Balancing
    
    •
    High Availability
    
    •
    Site Resiliency
    
    •
    Hot Site
    
    •
    Cold Site
    
    •
    Warm Site
    
    •
    Platform Diversity
    
    •
    Continuity of Operations Planning (COOP)
    
    •
    Capacity Planning
    
    •
    Disaster Recovery Testing
    
    •
    Tabletop Exercise
    
    •
    Failover
    
    •
    Backup
    
    •
    Power Resiliency
    
    •
    Uninterruptible Power Supply (UPS)
    
    •
    Generator
- •
  Domain 4 — Security Operations
  - •
    Hardening & Baselines
    
    •
    Secure Baseline
    
    •
    Hardening Target
    
    •
    Site Survey
    
    •
    Mobile Device Management (MDM)
    
    •
    Bring Your Own Device (BYOD)
    
    •
    Wireless Security Mode
    
    •
    RADIUS
    
    •
    IEEE 802.1X
    
    •
    Extensible Authentication Protocol (EAP)
    
    •
    Input Validation
    
    •
    Secure Cookie
    
    •
    Static Application Security Testing (SAST)
    
    •
    Sandboxing
    
    •
    Application Security Monitoring
  - •
    Asset Management
    
    •
    Asset Management
    
    •
    Media Sanitization
  - •
    Threat Intelligence
    
    •
    Threat Intelligence
  - •
    Vulnerability Management
    
    •
    Vulnerability Scanning
    
    •
    Dynamic Analysis (Fuzzing)
    
    •
    Package Monitoring
    
    •
    Common Vulnerabilities and Exposures (CVE)
    
    •
    Common Vulnerability Scoring System (CVSS)
    
    •
    Vulnerability Classification
    
    •
    False Positive - False Negative
    
    •
    Alert Tuning
    
    •
    Vulnerability Remediation
    
    •
    Patching
    
    •
    Risk Tolerance
    
    •
    Segmentation (Network)
  - •
    Security Monitoring & Tools
    
    •
    Log Aggregation
    
    •
    Security Information and Event Management (SIEM)
    
    •
    Security Content Automation Protocol (SCAP)
    
    •
    Benchmark (Security)
    
    •
    Data Loss Prevention (DLP)
    
    •
    USB Blocking
    
    •
    Simple Network Management Protocol (SNMP)
    
    •
    NetFlow
  - •
    Network & Endpoint Security
    
    •
    Content Filtering
    
    •
    URL Scanning
    
    •
    Active Directory
    
    •
    Group Policy
    
    •
    Security-Enhanced Linux (SELinux)
    
    •
    Secure Protocol
    
    •
    Sender Policy Framework (SPF)
    
    •
    Domain Keys Identified Mail (DKIM)
    
    •
    DMARC
    
    •
    File Integrity Monitoring (FIM)
    
    •
    Posture Assessment
    
    •
    Extended Detection and Response (XDR)
    
    •
    User Behavior Analytics
  - •
    Identity and Access Management
    
    •
    Identity and Access Management (IAM)
    
    •
    Identity Proofing
    
    •
    Single Sign-On (SSO)
    
    •
    LDAP (Lightweight Directory Access Protocol)
    
    •
    Security Assertion Markup Language (SAML)
    
    •
    OAuth
    
    •
    Federation
    
    •
    Mandatory Access Control (MAC)
    
    •
    Discretionary Access Control (DAC)
    
    •
    Role-based Access Control (RBAC)
    
    •
    Rule-based Access Control
    
    •
    Attribute-based Access Control (ABAC)
    
    •
    Time-of-day Restrictions
    
    •
    Multifactor Authentication
    
    •
    Password Security
    
    •
    Just-in-time Permissions
  - •
    Scripting and Automation
    
    •
    Scripting and Automation
  - •
    Incident Response
    
    •
    NIST SP 800-61 (Incident Response Lifecycle)
    
    •
    Incident Response
    
    •
    Root Cause Analysis
    
    •
    Threat Hunting
    
    •
    Playbook
    
    •
    Security Orchestration, Automation, and Response (SOAR)
    
    •
    Log Data
    
    •
    Digital Forensics
    
    •
    Legal Hold
    
    •
    Chain of Custody
    
    •
    Forensic Acquisition
    
    •
    Preservation (Digital Forensics)
    
    •
    E-discovery
- •
  Domain 5 — Security Program Management and Oversight
  - •
    Policy & Governance
    
    •
    Software Development Life Cycle (SDLC)
    
    •
    Governance Structure
    
    •
    Security Policy
    
    •
    Security Standard
    
    •
    Security Procedure
    
    •
    Security Consideration (Regulatory, Legal, Industry, Geographic)
    
    •
    Data Roles and Responsibilities
  - •
    Risk
    
    •
    Risk Management
    
    •
    Risk Analysis
    
    •
    Risk Management Strategies
    
    •
    Business Impact Analysis
  - •
    Third-party Risk
    
    •
    Third-party Risk Assessment
    
    •
    Right-to-Audit Clause
    
    •
    Agreement Type
  - •
    Compliance & Privacy
    
    •
    Compliance
    
    •
    Privacy
    
    •
    Data Subject
  - •
    Audits & Assessments
    
    •
    Audits and Assessments
    
    •
    Penetration Test
    
    •
    Lateral Movement
    
    •
    Persistence (Penetration Testing)
    
    •
    The Pivot
    
    •
    Responsible Disclosure Program
  - •
    Security Awareness
    
    •
    Security Awareness Training
•
online
•
https://www.professormesser.com/sy0-701-certification-course/
•
online

◌ Explore connections in Graph view