Domain 4: Security Operations

The fourth domain of the CompTIA Security+ SY0-701 certification is the biggest in terms of scope, and outlines the actual security operations needed for a modern, secure IT infrastructure.

You’ll get an overview of common security concepts such as creating secure baselines, hardening targets, and mobile and wireless solutions. You’ll also look at proper asset management and techniques for vulnerability management, such as vulnerability scans, analysis, and responding to vulnerability issues.

This section will discuss best practices for monitoring security risks, how to respond to and report them, and tools and techniques including security content automation protocol (SCAP), data loss prevention, and vulnerability scanners.

You’ll look at how firewalls, filters, access controls, and proper email management will enhance the security of a system. You’ll also deep dive into identity and access management covering identity...