CompTIA Security+ SY0-701 Cheat Sheet

This domain establishes the foundational security principles that underpin the entire Security+ exam. You'll need to understand the CIA triad, different types of security controls (technical, managerial, operational, physical), and when to apply each. Cryptographic concepts including symmetric and asymmetric encryption, hashing, and PKI are heavily tested here.

The second-largest domain covers the threat landscape you'll face as a security professional. Expect questions on threat actor types (nation-state, hacktivist, insider), attack vectors (phishing, supply chain, network-based), and common vulnerabilities like SQL injection and cross-site scripting. You'll also need to know how to identify indicators of compromise and implement appropriate mitigations.

Domain 3 focuses on designing and implementing secure infrastructure. You'll need to understand cloud security models (IaaS, PaaS, SaaS) and the shared responsibility model, network security concepts like segmentation and firewall types, and data protection strategies. Resilience concepts including high availability, backup strategies, and disaster recovery (RPO/RTO) are critical for this domain.

The largest domain covers day-to-day security operations. Topics include system hardening and secure baselines, vulnerability management (scanning, analysis, remediation), and security monitoring with SIEM and SOAR tools. You'll also need to understand identity and access management, endpoint security, and incident response procedures. This domain is where theory meets practice.

Domain 5 covers the governance and management aspects of security. You'll need to understand risk management processes (identification, assessment, response), security policies and procedures, and compliance frameworks like NIST, ISO 27001, and PCI-DSS. Third-party risk management, security awareness training, and audit processes are also heavily tested in this domain.