CompTIA Security+ Exam Material
The largest set here — 83 notes covering SY0-701, from the near-twin distinctions that trip people up on the exam (zero-day vs. n-day, VM escape vs. resource reuse, phishing vs. spear phishing) to the fundamentals everything else builds on.
11 are mapped to a real exam objective and grouped under their domain below; the rest are organized by topic where one applies, or listed under General.
83 notes
Domain 2.0 — Threats, Vulnerabilities, and Mitigations
Objective 2.3
What Are Cloud-Specific Vulnerabilities?
Objective 2.3
What Are Hardware Vulnerabilities?
Objective 2.3 — Explain various types of vulnerabilities
What Are Supply Chain Vulnerabilities?
Objective 2.3
What Are Virtualization Vulnerabilities?
Objective 2.3
What Is a Cryptographic Vulnerability?
Objective 2.3
What Is a Misconfiguration Vulnerability?
Objective 2.3
What Is a Mobile Device Vulnerability?
Objective 2.4
What Is a Trojan?
Objective 2.3
What Is a Zero-Day Vulnerability?
Objective 2.2
What Is Phishing?
Objective 2.4
What Is Ransomware?
IT Fundamentals
What are application vulnerabilities?
What are windows permissions?
What is a key management system (KMS)?
What is a Legacy Systems?
What is a secure enclave?
What is a trusted platform module (TPM)?
What is certificates?
What is default credentials?
What is digital signatures?
What is encryption in depth?
What is hashing?
What is human vectors/social engineering?
What is Linux?
What is Nmap?
What is obfuscation?
What is open service ports?
What is public key infrastructure (PKI)?
What is salting?
What is technical implications?
What is the CIA Triad?
What is unsecure networks?
What is unsupported systems and applications?
What is version control?
What is vulnerable software?
General
What are technical security controls?
What are threat actors?
What is a blockchain?
What is a cyber supply chain?
What is a file-based threat?
What is a removable device threats?
What is a replay attacks?
What is a voice call threats?
What is AAA?
What is business processes impacting IT security operation?
What is compensating security controls?
What is corrective security controls?
What is deception and disruption technology?
What is detective security controls?
What is deterrent security controls?
What is directive security controls?
What is DNS Poisoning?
What is Dumpster Diving?
What is Eliciting Information?
What is gap analysis?
What is image-based threats?
What is IP Address Spoofing?
What is IT documentation?
What is key stretching?
What is managerial security controls?
What is message-based threats?
What is Non-repudiation?
What is operating system-based vulnerabilities?
What is operational security controls?
What is Order of Volatility?
What is Pharming?
What is physical security controls?
What is physical security?
What is preventative security controls?
What is Shoulder Surfing?
What is Smishing?
What is Spam?
What is Spear Phishing?
What is Spim?
What is Tailgating?
What is TCP/IP hijacking?
What is the attributes of threat actors?
What is threat actors motives?
What is Vishing?
What is web-based vulnerabilities?
What is Whaling?
What is zero trust?
What is a hardware security module (HSM)?
