From the course: CompTIA Security+ (SY0-701) Cert Prep

General security concepts

From the course: CompTIA Security+ (SY0-701) Cert Prep

Start my 1-month free trial Buy for my team

General security concepts

“

- CompTIA provides a very detailed curriculum for the Security+ Exam. It organizes the content into five major domains of information security: General Security Concepts, Threats, Vulnerabilities and Mitigations, Security Architecture, Security Operations, and Security Program Management and Oversight. If you'd like, take the time to look through the official exam objectives, and get a sense for the things that you'll learn as you prepare for the Security+ Exam. And chances are that you're already familiar with some topics, while others might be brand new to you. That's fine. This course is designed to give you all of the knowledge that you'll need to pass the Security+ Plus exam, no matter where you are in your security career. The first domain of the security plus exam, General Security Concepts, makes up 12% of the questions on the test. It has four objectives. In the first objective for this domain, you're asked to compare and contrast various types of security controls. You'll need to understand security control categories. You also need to understand security control types. These include preventive, deterrent, detective, corrective, compensating, and directive controls. The second objective for this domain requires that you be able to summarize fundamental security concepts. This includes the CIA triad of confidentiality, integrity, and availability, non-repudiation, the AAA model of authentication, authorization and accounting, gap analysis, zero trust, physical security, and deception and disruption technologies. In the third objective for this domain, you need to be able to explain the importance of change management processes and their impact on security. You'll need to understand business processes impacting security operations, technical implications, documentation, and version control. In the final objective for this domain, you need to explain the importance of using appropriate cryptographic solutions. You'll need to understand PKI, encryption, cryptographic tools, obfuscation, hashing and salting, digital signatures, key stretching, blockchain, the open public ledger, and certificates. Alright, let's dive into domain one, General Security Concepts.

Contents