Search icon Close icon
Search icon CANCEL
Subscription
0
Cart icon
Cart
Close icon
You have no products in your basket yet
Save more on your purchases!
Savings automatically calculated. No voucher code required
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Home > Security > Cybersecurity > CompTIA Security+ SY0-701 Certification Guide - Third Edition
CompTIA Security+ SY0-701 Certification Guide - Third Edition
CompTIA Security+ SY0-701 Certification Guide - Third Edition

CompTIA Security+ SY0-701 Certification Guide: Master cybersecurity fundamentals and pass the SY0-701 exam on your first attempt, Third Edition

Profile Icon Ian Neil
By Ian Neil
$44.99
Book Jan 2024 622 pages 3rd Edition
Print
$44.99
Subscription
Free Trial
Renews at $19.99p/m
Profile Icon Ian Neil
By Ian Neil
$44.99
Book Jan 2024 622 pages 3rd Edition
Print
$44.99
Subscription
Free Trial
Renews at $19.99p/m
Print
$44.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with Print?

Product feature icon Instant access to your digital eBook copy whilst your Print order is Shipped
Product feature icon Black & white paperback book shipped to your address
Product feature icon Access this title in our online reader with advanced features
Table of content icon View table of contents Preview book icon Preview Book

CompTIA Security+ SY0-701 Certification Guide - Third Edition

Domain 1: General Security Concepts

The first domain of the CompTIA Security+ SY0-701 certification focuses on key security concepts and practices. This domain is divided into four chapters, each providing an understanding of different aspects of cybersecurity.

You’ll get an overview of the various types of security controls, such as preventative, deterrent, detective, correcting, compensating, and directive, and the different levels at which security is considered, including technical, managerial, operational, and physical. You’ll also learn about fundamental security concepts, such as the CIA Triad, AAA, Zero Trust, physical security, and different deception technologies.

This section will further discuss the change management process, covering the decision-making processes between stakeholders regarding security concerns that impact business operations and the technical implications of change, documentation, and version control.

Finally, Domain 1 emphasizes the use of cryptographic solutions, such as public keys and encryption and their relevant tools, as well as concepts such as salting, digital signatures, key stretching, blockchains, and certificates.

This section comprises the following chapters:

  • Chapter 1, Compare and contrast various types of security controls
  • Chapter 2, Summarize fundamental security concepts
  • Chapter 3, Explain the importance of change management processes and the impact on security
  • Chapter 4, Explain the importance of using appropriate cryptographic solutions
Left arrow icon

Page 1 of 1

Right arrow icon
Download code icon Download Code

Key benefits

  • Gain certified cybersecurity knowledge from Ian Neil, a world-class CompTIA certification trainer
  • Explore up-to-date content meticulously aligned with 701 exam objectives
  • Unlock an exclusive 12% exam discount voucher inside the book
  • Purchase of this book unlocks access to web-based exam prep resources such as mock exams and flashcards

Description

Building on the success of its bestselling predecessor, this third edition of the CompTIA Security+ SY0-701 Certification Guide serves as your one-stop resource for SY0-701 exam preparation. Written by cybersecurity expert Ian Neil, this comprehensive guide helps you unlock the intricacies of cybersecurity and understand the technology behind the SY0-701 certification, ensuring you approach the exam with confidence. By exploring cybersecurity in detail, this book introduces essential principles, controls, and best practices. The chapters are carefully structured to align with the exam objectives of the 701 update, bringing to you the most recent and relevant exam study material. By mastering cybersecurity fundamentals, you’ll acquire the knowledge and skills to identify and mitigate threats, manage vulnerabilities, and safeguard enterprise infrastructure. You’ll be well equipped to apply the principles of security governance and compliance, conduct risk assessments, and excel in audit and assessment tasks. The book also contains mock exams and flashcards to help reinforce your learning and assess your exam-readiness. Whether you aim to excel the CompTIA Security+ SY0-701 exam, advance your career in cybersecurity, or enhance your existing knowledge, this book will transform you into a cybersecurity expert.

What you will learn

  • Differentiate between various security control types
  • Apply mitigation techniques for enterprise security
  • Evaluate security implications of architecture models
  • Protect data by leveraging strategies and concepts
  • Implement resilience and recovery in security
  • Automate and orchestrate for running secure operations
  • Execute processes for third-party risk assessment and management
  • Conduct various audits and assessments with specific purposes

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Jan 19, 2024
Length 622 pages
Edition : 3rd Edition
Language : English
ISBN-13 : 9781835461532
Category :
Security
Concepts :
Cybersecurity

What do you get with Print?

Product feature icon Instant access to your digital eBook copy whilst your Print order is Shipped
Product feature icon Black & white paperback book shipped to your address
Product feature icon Access this title in our online reader with advanced features

Product Details

Publication date : Jan 19, 2024
Length 622 pages
Edition : 3rd Edition
Language : English
ISBN-13 : 9781835461532
Category :
Security
Concepts :
Cybersecurity

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
START FREE TRIAL
BUY NOW
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
START FREE TRIAL
BUY NOW
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
START FREE TRIAL
BUY NOW

Table of Contents

38 Chapters
Preface Chevron down icon Chevron up icon
Preface
Who This Book Is For
What This Book Covers
Domain 1: General Security Concepts
Domain 2: Threats, Vulnerabilities, and Mitigations
Domain 3: Security Architecture
Domain 4: Security Operations
Domain 5: Security Program Management and Oversight
How to Use This Book
End of Chapter Self-Assessment Questions
Additional Online Resources
Download the Color Images
Conventions Used
Get in Touch
Reviews
1. Domain 1: General Security Concepts Chevron down icon Chevron up icon
Domain 1: General Security Concepts
2. Chapter 1: Compare and contrast various types of security controls Chevron down icon Chevron up icon
Introduction
Control Categories
Control Types
Summary
Exam Objectives 1.1
Chapter Review Questions
3. Chapter 2: Summarize fundamental security concepts Chevron down icon Chevron up icon
Introduction
Confidentiality, Integrity, and Availability
Authentication, Authorization, and Accounting
Gap Analysis
Zero Trust
Physical Security
Deception and Disruption Technology
Summary
Exam Objectives 1.2
Chapter Review Questions
4. Chapter 3: Explain the importance of change management processes and the impact to security Chevron down icon Chevron up icon
Introduction
Change Management
Technical Implications
Documentation
Version Control
Summary
Exam Objectives 1.3
Chapter Review Questions
5. Chapter 4: Explain the importance of using appropriate cryptographic solutions Chevron down icon Chevron up icon
Introduction
Public Key Infrastructure (PKI)
Encryption
Tools
Obfuscation
Hashing
Key Stretching
Blockchain
Certificates
Summary
Exam Objectives 1.4
Chapter Review Questions
6. Domain 2: Threats, Vulnerabilities, and Mitigations Chevron down icon Chevron up icon
Domain 2: Threats, Vulnerabilities, and Mitigations
7. Chapter 5: Compare and contrast common threat actors and motivations Chevron down icon Chevron up icon
Introduction
Threat Actors
Attributes of Actors
Motivations
Summary
Exam Objectives 2.1
Chapter Review Questions
8. Chapter 6: Explain common threat vectors and attack surfaces Chevron down icon Chevron up icon
Introduction
Message-Based
Image-Based
File-Based
Voice Call
Removable Device
Vulnerable Software
Unsupported Systems and Applications
Unsecure Networks
Supply Chain
Human Vectors/Social Engineering
Summary
Exam Objectives 2.2
Chapter Review Questions
9. Chapter 7: Explain various types of vulnerabilities Chevron down icon Chevron up icon
Introduction
Application Vulnerabilities
Operating System (OS)-Based Vulnerabilities
Web-Based Vulnerabilities
Hardware Vulnerabilities
Virtualization Vulnerabilities
Cloud-Specific Vulnerabilities
Supply Chain Vulnerabilities
Cryptographic Vulnerabilities
Misconfiguration Vulnerabilities
Mobile Device Vulnerabilities
Zero-Day Vulnerabilities
Summary
Exam Objective 2.3
Chapter Review Questions
10. Chapter 8: Given a scenario, analyze indicators of malicious activity Chevron down icon Chevron up icon
Introduction
Malware Attacks
Physical Attacks
Network Attacks
Application Attacks
Cryptographic Attacks
Password Attacks
Indicators of Attack
Summary
Exam Objectives 2.4
Chapter Review Questions
11. Chapter 9: Explain the purpose of mitigation techniques used to secure the enterprise Chevron down icon Chevron up icon
Introduction
Segmentation
Access Control
Application Allow List
Application Block List
Isolation
Patching
Encryption
Monitoring
Least Privilege
Configuration Enforcement
Decommissioning
Hardening Techniques
Summary
Exam Objectives 2.5
Chapter Review Questions
12. Domain 3: Security Architecture Chevron down icon Chevron up icon
Domain 3: Security Architecture
13. Chapter 10: Compare and contrast security implications of different architecture models Chevron down icon Chevron up icon
Introduction
Securing the Network
Architecture and Infrastructure Concepts
Infrastructure as Code (IaC)
Serverless
Network Infrastructure
Considerations for Your Infrastructure
Summary
Exam Objectives 3.1
Chapter Review Questions
14. Chapter 11: Given a scenario, apply security principles to secure enterprise infrastructure Chevron down icon Chevron up icon
Introduction
Infrastructure Considerations
Secure Communication/Access
Selection of Effective Controls
Summary
Exam Objectives 3.2
Chapter Review Questions
15. Chapter 12: Compare and contrast concepts and strategies to protect data Chevron down icon Chevron up icon
Introduction
Data Types
Data Classifications
General Data Considerations
Methods to Secure Data
Summary
Exam Objectives 3.3
Chapter Review Questions
16. Chapter 13: Explain the importance of resilience and recovery in security architecture Chevron down icon Chevron up icon
Introduction
High Availability
Site Considerations
Platform Diversity
Multi-Cloud Systems
Continuity of Operations
Capacity Planning
Testing
Backups
Power
Summary
Exam Objectives 3.4
Chapter Review Questions
17. Domain 4: Security Operations Chevron down icon Chevron up icon
Domain 4: Security Operations
18. Chapter 14: Given a scenario, apply common security techniques to computing resources Chevron down icon Chevron up icon
Introduction
Secure Baselines
Wireless Devices
Mobile Solutions
Wireless Security Settings
Application Security
Sandboxing
Monitoring
Summary
Exam Objectives 4.1
Chapter Review Questions
19. Chapter 15: Explain the security implications of proper hardware, software, and data asset management Chevron down icon Chevron up icon
Introduction
Acquisition/Procurement Process
Assignment/Accounting
Monitoring/Asset Tracking
Disposal/Decommissioning
Summary
Exam Objective 4.2
Chapter Review Questions
20. Chapter 16: Explain various activities associated with vulnerability management Chevron down icon Chevron up icon
Introduction
Identification Methods
Vulnerability Response and Remediation
Validation of Remediation
Reporting
Summary
Exam Objective 4.3
Chapter Review Questions
21. Chapter 17: Explain security alerting and monitoring concepts and tools Chevron down icon Chevron up icon
Introduction
Monitoring Computing Resources
Activities
Alert Response and Remediation/Validation
Tools
Summary
Exam Objectives 4.4
Chapter Review Questions
22. Chapter 18: Given a scenario, modify enterprise capabilities to enhance security Chevron down icon Chevron up icon
Introduction
Firewall
Zones
IDSs/IPSs
Web Filtering
Operating System Security
The Implementation of Secure Protocols
Email Security
File Integrity Monitoring
Data Loss Prevention (DLP)
Network Access Control (NAC)
Endpoint Detection and Response, and Extended Detection and Response
User Behavior Analytics
Summary
Exam Objectives 4.5
Chapter Review Questions
23. Chapter 19: Given a scenario, implement and maintain identity and access management Chevron down icon Chevron up icon
Introduction
Provisioning User Accounts
Deprovisioning User Accounts
Permission Assignments and Implications
Identity Proofing
Federation
Single Sign-On (SSO)
Interoperability
Attestation
Access Controls
Multi-Factor Authentication
Password Concepts
Password Managers
Passwordless
Privileged Access Management (PAM)
PAM Tools
Summary
Exam Objective 4.6
Chapter Review Questions
24. Chapter 20: Explain the importance of automation and orchestration related to secure operations Chevron down icon Chevron up icon
Introduction
Security Orchestration, Automation, and Response (SOAR)
Use Cases of Automation and Scripting
Benefits
Other Considerations
Summary
Exam Objectives 4.7
Chapter Review Questions
25. Chapter 21: Explain appropriate incident response activities Chevron down icon Chevron up icon
Introduction
Process
Attack Frameworks
Training
Testing
Root Cause Analysis
Threat Hunting
Digital Forensics
Summary
Exam Objectives 4.8
Chapter Review Questions
26. Chapter 22: Given a scenario, use data sources to support an investigation Chevron down icon Chevron up icon
Introduction
Log Data
Data Sources
Packet Captures
Summary
Exam Objectives 4.9
Chapter Review Questions
27. Domain 5: Security Program Management and Oversight Chevron down icon Chevron up icon
Domain 5: Security Program Management and Oversight
28. Chapter 23: Summarize elements of effective security governance Chevron down icon Chevron up icon
Introduction
Guidelines
Policies
Software Development Life Cycle
Standards
Procedures
External Considerations
Monitoring and Revision
Types of Governance Structures
Roles and Responsibilities for Systems and Data
Summary
Exam Objectives 5.1
Chapter Review Questions
29. Chapter 24: Explain elements of the risk management process Chevron down icon Chevron up icon
Introduction
Risk Analysis
Risk Register
Risk Tolerance
Risk Appetite
Risk Management Strategies
Risk Reporting
Business Impact Analysis
Summary
Exam Objectives 5.2
Chapter Review Questions
30. Chapter 25: Explain the processes associated with third-party risk assessment and management Chevron down icon Chevron up icon
Introduction
Vendor Assessment
Vendor Selection
Agreement Types
Vendor Monitoring
Questionnaires
Rules of Engagement
Summary
Exam Objectives 5.3
Chapter Review Questions
31. Chapter 26: Summarize elements of effective security compliance Chevron down icon Chevron up icon
Introduction
Compliance Reporting
Compliance Monitoring
Privacy – Regulations
Privacy – Data
Summary
Exam Objectives 5.4
Chapter Review Questions
32. Chapter 27: Explain types and purposes of audits and assessments Chevron down icon Chevron up icon
Introduction
Summary
Exam Objectives 5.5
Chapter Review Questions
33. Chapter 28: Given a scenario, implement security awareness practices Chevron down icon Chevron up icon
Introduction
Phishing
Anomalous Behavior Recognition
User Guidance and Training
Reporting and Monitoring
Summary
Exam Objectives 5.6
Chapter Review Questions
34. Chapter 29: Accessing the online practice resources Chevron down icon Chevron up icon
Chapter 29: Accessing the online practice resources
Troubleshooting Tips
Practice Resources – A Quick Tour
35. Solutions Chevron down icon Chevron up icon
Chapter 1: Compare and contrast various types of security controls
Chapter 2: Summarize fundamental security concepts
Chapter 3: Explain the importance of change management processes and the impact to security
Chapter 4: Explain the importance of using appropriate cryptographic solutions
Chapter 5: Compare and contrast common threat actors and motivations
Chapter 6: Explain common threat vectors and attack surfaces
Chapter 7: Explain various types of vulnerabilities
Chapter 8: Given a scenario, analyze indicators of malicious activity
Chapter 9: Explain the purpose of mitigation techniques used to secure the enterprise
Chapter 10: Compare and contrast security implications of different architecture models
Chapter 11: Given a scenario, apply security principles to secure enterprise infrastructure
Chapter 12: Compare and contrast concepts and strategies to protect data
Chapter 13: Explain the importance of resilience and recovery in security architecture
Chapter 14: Given a scenario, apply common security techniques to computing resources
Chapter 15: Explain the security implications of proper hardware, software, and data asset management
Chapter 16: Explain various activities associated with vulnerability management
Chapter 17: Explain security alerting and monitoring concepts and tools
Chapter 18: Given a scenario, modify enterprise capabilities to enhance security
Chapter 19: Given a scenario, implement and maintain identity and access management
Chapter 20: Explain the importance of automation and orchestration related to secure operations
Chapter 21: Explain appropriate incident response activities
Chapter 22: Given a scenario, use data sources to support an investigation
Chapter 23: Summarize elements of effective security governance
Chapter 24: Explain elements of the risk management process
Chapter 25: Explain the processes associated with third-party risk assessment and management
Chapter 26: Summarize elements of effective security compliance
Chapter 27: Explain types and purposes of audits and assessments
Chapter 28: Given a scenario, implement security awareness practices
Why subscribe?
36. Other Books You May Enjoy Chevron down icon Chevron up icon
Other Books You May Enjoy
Share Your Thoughts
37. Coupon Code for CompTIA Security+ Exam Vouchers Chevron down icon Chevron up icon
Coupon Code for CompTIA Security+ Exam Vouchers

Recommendations for you

Left arrow icon
Python for Security and Networking
Python for Security and Networking
Read more
Jun 2023 586 pages
Full star icon 4.5
ebook
eBook
  • ebook eBook $27.98
  • print Print $49.99
$27.98 $39.99
$49.99
CompTIA Security+ SY0-701 Certification Guide
CompTIA Security+ SY0-701 Certification Guide
Read more
Jan 2024 622 pages
print
Print
  • print Print $44.99
$44.99
Mastering Reverse Engineering
Mastering Reverse Engineering
Read more
Oct 2018 436 pages
ebook
eBook
  • ebook eBook $27.98
  • print Print $48.99
$27.98 $39.99
$48.99
Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux
Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux
Read more
Feb 2022 5h 48m
video Video
$59.99
Cybersecurity Architecture Fundamentals
Cybersecurity Architecture Fundamentals
Read more
Jul 2023 3h 3m
video Video
$109.99
Risk Management Excellence - NIST 800-37 Framework Training
Risk Management Excellence - NIST 800-37 Framework Training
Read more
Feb 2024 1h 58m
video Video
$64.99
Practical Cyber Hacking Skills for Beginners
Practical Cyber Hacking Skills for Beginners
Read more
Dec 2022 8h 23m
video Video
$109.99
Hack the Cybersecurity Interview
Hack the Cybersecurity Interview
Read more
Aug 2024 344 pages
ebook
eBook
  • ebook eBook $24.99
  • print Print $44.99
$24.99 $35.99
$44.99
ChatGPT for SOC Analyst - Master Cyber Security with AI
ChatGPT for SOC Analyst - Master Cyber Security with AI
Read more
Aug 2024 4h 8m
video Video
$109.99
Adversarial AI Attacks, Mitigations, and Defense Strategies
Adversarial AI Attacks, Mitigations, and Defense Strategies
Read more
Jul 2024 586 pages
ebook
eBook
  • ebook eBook $27.98
  • print Print $49.99
$27.98 $39.99
$49.99
Right arrow icon

About the author

Profile icon Ian Neil
Ian Neil is one of the world's top trainers of Security+. He is able to break down information into manageable chunks so that people with no background knowledge can gain the skills required to become certified. He has recently worked for the US Army in Europe and designed a Security+ course that catered to people from all backgrounds (not just IT professionals), with an extremely successful pass rate. He is an MCT, MCSE, A+, Network+, Security+, CASP, and RESILIA practitioner that has worked with high-end training providers over the past 23 years and was one of the first technical trainers to train Microsoft internal staff when they opened their Bucharest Office in 2006.
Read more
See other products by Ian Neil
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

How do I buy and download an eBook? Chevron down icon Chevron up icon

Where there is an eBook version of a title available, you can buy it from the book details for that title. Add either the standalone eBook or the eBook and print book bundle to your shopping cart. Your eBook will show in your cart as a product on its own. After completing checkout and payment in the normal way, you will receive your receipt on the screen containing a link to a personalised PDF download file. This link will remain active for 30 days. You can download backup copies of the file by logging in to your account at any time.

If you already have Adobe reader installed, then clicking on the link will download and open the PDF file directly. If you don't, then save the PDF file on your machine and download the Reader to view it.

Please Note: Packt eBooks are non-returnable and non-refundable.

Packt eBook and Licensing When you buy an eBook from Packt Publishing, completing your purchase means you accept the terms of our licence agreement. Please read the full text of the agreement. In it we have tried to balance the need for the ebook to be usable for you the reader with our needs to protect the rights of us as Publishers and of our authors. In summary, the agreement says:

  • You may make copies of your eBook for your own use onto any machine
  • You may not pass copies of the eBook on to anyone else
How can I make a purchase on your website? Chevron down icon Chevron up icon

If you want to purchase a video course, eBook or Bundle (Print+eBook) please follow below steps:

  1. Register on our website using your email address and the password.
  2. Search for the title by name or ISBN using the search option.
  3. Select the title you want to purchase.
  4. Choose the format you wish to purchase the title in; if you order the Print Book, you get a free eBook copy of the same title. 
  5. Proceed with the checkout process (payment to be made using Credit Card, Debit Cart, or PayPal)
Where can I access support around an eBook? Chevron down icon Chevron up icon
  • If you experience a problem with using or installing Adobe Reader, the contact Adobe directly.
  • To view the errata for the book, see www.packtpub.com/support and view the pages for the title you have.
  • To view your account details or to download a new copy of the book go to www.packtpub.com/account
  • To contact us directly if a problem is not resolved, use www.packtpub.com/contact-us
What eBook formats do Packt support? Chevron down icon Chevron up icon

Our eBooks are currently available in a variety of formats such as PDF and ePubs. In the future, this may well change with trends and development in technology, but please note that our PDFs are not Adobe eBook Reader format, which has greater restrictions on security.

You will need to use Adobe Reader v9 or later in order to read Packt's PDF eBooks.

What are the benefits of eBooks? Chevron down icon Chevron up icon
  • You can get the information you need immediately
  • You can easily take them with you on a laptop
  • You can download them an unlimited number of times
  • You can print them out
  • They are copy-paste enabled
  • They are searchable
  • There is no password protection
  • They are lower price than print
  • They save resources and space
What is an eBook? Chevron down icon Chevron up icon

Packt eBooks are a complete electronic version of the print edition, available in PDF and ePub formats. Every piece of content down to the page numbering is the same. Because we save the costs of printing and shipping the book to you, we are able to offer eBooks at a lower cost than print editions.

When you have purchased an eBook, simply login to your account and click on the link in Your Download Area. We recommend you saving the file to your hard drive before opening it.

For optimal viewing of our eBooks, we recommend you download and install the free Adobe Reader version 9.