PDF version download HTML version download
📢 About
The main objectives of this repo
This is a 'Open Source Study Guide' for Security+ SY0-501, gathering as many information a
sources on internet to ensure to cover all topics presented on exam.
The second objective is to help you pass the exam without paying any expensive training cou
contribute to infosec community <3 .
ℹ About the exam
⚠ Important Note: The SY0-501 exam is scheduled to be retired in July of 2021 ⚠
CompTIA Security+ is the first security certification IT professionals should earn. It establishes the
required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jo
incorporates best practices in hands-on trouble-shooting to ensure security professionals have pra
problem-solving skills. Cybersecurity professionals with Security+ know how to address security inc
identify them.
Security+ is compliant with ISO 17024 standards and approved by the US DoD to meet directive 81
requirements. Regulators and government rely on ANSI accreditation, because it provides confiden
, Domain % of the Exam Content
Risk Management 14%
Cryptography and PKI 12%
✳ Free Resources
1. Practice Questions - Examcompass - I recommend to test your knowledge after study all topi
exam.
2. Practice Questions - Professor Messer
3. Practice Questions - Github
4. Training Course - Professor Messer - 141 YouTube videos (13 hours of content).
5. Lynda Prep Course - 30 day free trial - 21 hours of content
Index
1. Securing Systems
2. Security Tools
3. Networks and Infrastructure
4. Identity and Access Management
5. Risk Management
6. Incident Response & Forensics
7. Testing the Infrastructure
8. Cryptography
Brief Introduction
Information security, sometimes shortened to infosec, is the practice of protecting information by m
risks. It is part of information risk management. It typically involves preventing or at least reducing t
unauthorized/inappropriate access, use, disclosure, disruption, deletion/destruction, corruption, mo
recording or devaluation, although it may also involve reducing the adverse impacts of incidents.
Goals of Security
,Confidentiality
Keeping systems and data from being accessed, seen, read to anyone who is not authorized to do
Integrity
Protect the data from modification or deletion by unauthorized parties, and ensuring that when auth
changes that shouldn't have been made the damage can be undone.
Availability
Systems, access channels, and authentication mechanisms must all be working properly for the inf
and protect to be available when needed.
Note: In addition, other properties, such as authenticity, accountability, non-repudiation and
be involved. (ISO/IEC 27000:2009)
Auditing & Accountability
Basically keep tracking of everthing, like, who's been logging in when are they loggin in whose acc
, Understanding Attacks
Denial-of-Service (DoS)
Prevents others from accessing a system / comprimising the availability.
Distributed-Denial-of-Service (DDoS)
Uses multiple systems to attack a single host - Generally controlled by BotNets, which is a ty
uses remotely controlled malicious software to control a large range of computers.
📢 About
The main objectives of this repo
This is a 'Open Source Study Guide' for Security+ SY0-501, gathering as many information a
sources on internet to ensure to cover all topics presented on exam.
The second objective is to help you pass the exam without paying any expensive training cou
contribute to infosec community <3 .
ℹ About the exam
⚠ Important Note: The SY0-501 exam is scheduled to be retired in July of 2021 ⚠
CompTIA Security+ is the first security certification IT professionals should earn. It establishes the
required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jo
incorporates best practices in hands-on trouble-shooting to ensure security professionals have pra
problem-solving skills. Cybersecurity professionals with Security+ know how to address security inc
identify them.
Security+ is compliant with ISO 17024 standards and approved by the US DoD to meet directive 81
requirements. Regulators and government rely on ANSI accreditation, because it provides confiden
, Domain % of the Exam Content
Risk Management 14%
Cryptography and PKI 12%
✳ Free Resources
1. Practice Questions - Examcompass - I recommend to test your knowledge after study all topi
exam.
2. Practice Questions - Professor Messer
3. Practice Questions - Github
4. Training Course - Professor Messer - 141 YouTube videos (13 hours of content).
5. Lynda Prep Course - 30 day free trial - 21 hours of content
Index
1. Securing Systems
2. Security Tools
3. Networks and Infrastructure
4. Identity and Access Management
5. Risk Management
6. Incident Response & Forensics
7. Testing the Infrastructure
8. Cryptography
Brief Introduction
Information security, sometimes shortened to infosec, is the practice of protecting information by m
risks. It is part of information risk management. It typically involves preventing or at least reducing t
unauthorized/inappropriate access, use, disclosure, disruption, deletion/destruction, corruption, mo
recording or devaluation, although it may also involve reducing the adverse impacts of incidents.
Goals of Security
,Confidentiality
Keeping systems and data from being accessed, seen, read to anyone who is not authorized to do
Integrity
Protect the data from modification or deletion by unauthorized parties, and ensuring that when auth
changes that shouldn't have been made the damage can be undone.
Availability
Systems, access channels, and authentication mechanisms must all be working properly for the inf
and protect to be available when needed.
Note: In addition, other properties, such as authenticity, accountability, non-repudiation and
be involved. (ISO/IEC 27000:2009)
Auditing & Accountability
Basically keep tracking of everthing, like, who's been logging in when are they loggin in whose acc
, Understanding Attacks
Denial-of-Service (DoS)
Prevents others from accessing a system / comprimising the availability.
Distributed-Denial-of-Service (DDoS)
Uses multiple systems to attack a single host - Generally controlled by BotNets, which is a ty
uses remotely controlled malicious software to control a large range of computers.
