Curated Library
CompTIA Security+ SY0-701 Exam Prep: All Five Domains plus Practice Questions
A lecture-style walkthrough of the CompTIA Security+ SY0-701 objectives, taken in exam order. It covers general security concepts, threats and vulnerabilities, security architecture, security operations, and security program management. Three practice-question videos close the course. It suits IT beginners or career changers preparing for the Security+ exam.
Lessons by The Networking Guru | Trepa Technologies on YouTubeCurated by YodaHut. These lessons are hosted on YouTube and produced by their original creators, who are not affiliated with YodaHut. You still earn YodaCoins, keep your streak and track progress here.
What You'll Learn
- Classify security controls and explain the CIA triad, AAA, zero trust, and deception technologies
- Compare symmetric and asymmetric encryption, and explain how PKI, certificates, and other cryptographic tools work
- Identify threat actors, threat vectors, social engineering techniques, and common malware, network, and application attacks
- Describe secure architecture: network segmentation, firewalls and other appliances, data classification, high availability, backups, and hardening
- Explain security operations: vulnerability management, monitoring, identity and access management, automation, incident response, and digital forensics
- Explain governance, risk management, third-party risk, compliance, audits, penetration testing, and security awareness, then test your recall with practice exam questions
Prerequisites
- No prior experience needed
- Basic familiarity with computers and networking helps, but isn't required
Course Curriculum
- 1How to Pass Security+ SY0-701 the First Time21:06
- 2Security Control Types27:15
- 3The CIA Triad23:56
- 4AAA: Authentication, Authorization, Accounting17:48
- 5Zero Trust Architecture39:15
- 6Physical Security10:58
- 7Deception Technologies9:43
- 8Business Processes and Procedures20:10
- 9Change Management Process22:56
- 10Encryption Algorithms24:04
- 11Levels of Encryption9:37
- 12Public Key Infrastructure26:33
- 13PKI Components21:07
- 14Cryptographic Tools10:50
- 15Threat Actors and Motivations20:05
- 16Threat Vectors: Images, Files, Software, SMS, Email, Media16:10
- 17Unsecure Networks, Supply Chain, and Open Ports20:14
- 18Human Vectors and Social Engineering12:15
- 19Application, OS, and Web-Based Vulnerabilities23:41
- 20Hardware, Virtualization, Supply Chain, and Cloud-Specific Vulnerabilities9:29
- 21Cryptographic, Misconfiguration, and Mobile Device Vulnerabilities11:47
- 22Malware and Physical Attacks17:12
- 23Network Attacks13:14
- 24Application and Cryptographic Attacks13:08
- 25Attack Indicators9:38
- 26Segmentation, Access Control, and Least Privilege16:54
- 27Configuration Enforcement and Hardening12:41
- 28Infrastructure Concepts, Part 125:53
- 29Infrastructure Concepts, Part 211:33
- 30Architecture Considerations13:34
- 31Infrastructure Considerations14:00
- 32Network Appliances12:57
- 33Secure Communications8:35
- 34Data Types and Classifications11:36
- 35General Data Considerations9:38
- 36High Availability18:41
- 37Testing, Backups, and Power10:45
- 38Secure Baselines and Hardening15:05
- 39Wireless Devices and Mobile Solutions6:46
- 40Wireless and Application Security8:33
- 41Hardware, Software, and Data Asset Management8:47
- 42Vulnerability Identification Methods11:56
- 43Vulnerability Analysis13:43
- 44Response, Remediation, and Reporting9:06
- 45Compute Resources and Activities10:25
- 46Alerting and Monitoring Tools10:55
- 47Firewalls, IDS/IPS, and Web Filtering8:41
- 48Operating Systems, DNS, Email, and Secure Protocols7:52
- 49Enterprise Applications7:07
- 50Federation, SSO, and Attestation12:03
- 51Access Controls and MFA6:36
- 52Password Concepts and Privileged Access Management4:27
- 53Automation and Scripting16:18
- 54Automation Considerations13:46
- 55Incident Response17:18
- 56Root Cause Analysis, Threat Hunting, and Digital Forensics8:19
- 57Log Data and Data Sources10:49
- 58Guidelines, Policies, and Standards12:53
- 59Procedures and External Considerations6:42
- 60Governance Structures and Roles and Responsibilities8:02
- 61Risk Identification, Assessment, and Analysis9:55
- 62Risk Register, Tolerance, Appetite, and Strategies10:28
- 63Risk Reporting and Business Impact Analysis5:50
- 64Vendor Assessment and Selection14:10
- 65Agreement Types13:09
- 66Reporting and Non-Compliance6:16
- 67Compliance Monitoring and Privacy9:08
- 68Attestation, Internal and External Audits8:11
- 69Penetration Testing Overview9:35
- 70Phishing and Anomalous Behavior7:40
- 71Security Awareness Guidance, Training, and Development11:40
- 72Practice Exam Questions, Set 131:12
- 73Practice Exam Questions, Set 223:37
- 74Practice Questions: Domain 2.0 Threats, Vulnerabilities, and Mitigations45:52
About the Instructor
The Networking Guru | Trepa Technologies
YouTube creator
74 lessons here 17h 42m
The lessons in this course were produced by The Networking Guru | Trepa Technologies and are published on YouTube. YodaHut selected and sequenced them into this course; we did not make them, and The Networking Guru | Trepa Technologies is not affiliated with YodaHut.
Visit the channel on YouTube
- 74 lessons
- 17h 42m of video
- Earns YodaCoins & streaks
- Timestamped notes
- Free — hosted on YouTube
No certificate is issued for Library courses.