• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
CompTIA Security+ SY0-701 Course

37 sections · 419 lessons

  • Video
  • Reading
  • Quiz
  • Premium
  1. 1 1.0: About the course and exam
    1. Reading: About the course and certification Preview
    2. Reading: About the course author Preview
    3. Reading: Pre-requisites Preview
    4. Video: Tools and tips to help you study more efficiently Preview
    5. Video: Study techniques that will help you pass Preview
  2. 2 1.1: Compare and contrast social engineering techniques
    1. Video: What is social engineering? Preview
    2. Video: Principles Preview
    3. Video: Spam Preview
    4. Video: Blocking and Managing Spam Premium
    5. Video: Phishing Preview
    6. Video: Smishing Preview
    7. Video: Vishing Premium
    8. Video: Spear Phishing Premium
    9. Video: Whaling Premium
    10. Video: Impersonation Premium
    11. Video: Dumpster diving Premium
    12. Video: Shoulder surfing Premium
    13. Video: Pharming Premium
    14. Video: Tailgating Premium
    15. Video: Eliciting information Premium
    16. Video: Prepending Premium
    17. Video: Identity fraud Premium
    18. Video: Invoice scams Premium
    19. Video: Credentials harvesting Premium
    20. Video: Reconnaissance Premium
    21. Video: Hoax Premium
    22. Video: Watering hole attack Premium
    23. Video: Typo squatting and URL hijacking Premium
    24. Video: Influence campaigns Premium
    25. Video: Hybrid warfare Premium
    26. Reading: Practical knowledge check: 1.1 Premium
  3. 3 1.2: Analyze potential indicators to determine the type of attack
    1. Video: What is malware? Preview
    2. Video: Malware classification Preview
    3. Video: Virus Preview
    4. Video: Worms Preview
    5. Video: Backdoor Premium
    6. Video: Trojans Preview
    7. Video: Remote Access Trojan (RAT) Premium
    8. Video: Ransomware and Crypto Malware Preview
    9. Video: How does ransomware work? Premium
    10. Video: Potentially unwanted programs (PUPs) Premium
    11. Video: Spyware Preview
    12. Video: Adware and Malvertising Preview
    13. Video: Bloatware Premium
    14. Video: Keyloggers Preview
    15. Video: Fileless malware Premium
    16. Video: Logic bombs Premium
    17. Video: Rootkit Premium
    18. Video: Bots and Botnets Preview
    19. Video: Command and control Premium
    20. Video: What are password attacks? Premium
    21. Video: Plaintext, encrypted, and hashed passwords Premium
    22. Video: Brute force Premium
    23. Video: Dictionary attacks Premium
    24. Video: Spraying attacks Premium
    25. Video: Rainbow and hash tables Premium
    26. Video: Credential stuffing Premium
    27. Video: What are physical attacks? Premium
    28. Video: Malicious universal serial bus (USB) cable Premium
    29. Video: Malicious flash drive Premium
    30. Video: Card cloning Premium
    31. Video: Skimming Premium
    32. Video: What is adversarial AI and tainted training for ML? Premium
    33. Video: Supply-chain attacks Premium
    34. Video: Cloud-based vs. on-premises attacks Premium
    35. Video: Cryptography concepts Premium
    36. Video: Cryptographic attacks Premium
    37. Reading: Quiz: 1.2 Premium
      1. Quiz: Quiz 1.2.1 Premium
      2. Quiz: Quiz 1.2.2 Premium
      3. Quiz: Quiz 1.2.3 Premium
  4. 4 1.3: Analyze potential indicators associated with application attacks
    1. Video: Privilege escalation Premium
    2. Video: Improper input handling Premium
    3. Video: Improper error handling Premium
    4. Video: Cross-Site Scripting (XSS) Premium
    5. Video: Structured Query Language (SQL) injections Premium
    6. Video: Dynamic Link Library (DLL) Injections Premium
    7. Video: Lightweight directory access protocol (LDAP) Injections Premium
    8. Video: Extensible Markup Language (XML) and XPATH Injections Premium
    9. Video: XXE Injections Premium
    10. Video: Directory traversal Premium
    11. Video: Request forgeries (server-side, client-side, and cross-site) Premium
    12. Video: Application Programming Interface (API) attacks Premium
    13. Video: Secure Sockets Layer (SSL) stripping Premium
    14. Video: Replay attacks (session replays) Premium
    15. Video: Pass the hash Premium
    16. Video: Race conditions (time of check and time of use) Premium
    17. Video: Resource exhaustion Premium
    18. Video: Memory leak Premium
    19. Video: Pointer/object dereference Premium
    20. Video: Integer overflow Premium
    21. Video: Buffer overflows Premium
    22. Video: Driver manipulation (shimming and refactoring) Premium
    23. Reading: Quiz 1.3 Premium
      1. Quiz: Quiz 1.3.1 Premium
      2. Quiz: Quiz 1.3.2 Premium
  5. 5 1.4: Analyze potential indicators of network attacks
    1. Video: What are wireless attacks? Premium
    2. Video: Distributed Denial of Service (DDoS) Premium
    3. Video: Rogue access point and Evil Twin Premium
    4. Video: Bluesnarfing and Bluejacking Premium
    5. Video: Disassociation and Jamming Premium
    6. Video: Radio Frequency Identifier (RFID) attacks Premium
    7. Video: Near Field Communication (NFC) Premium
    8. Video: Initialization Vector (IV) Premium
    9. Video: Man in the middle (on-path) Premium
    10. Video: Man in the browser (on-path browser) Premium
    11. Reading: Network Attacks (credential replay) Premium
    12. Video: What are layer 2 attacks? Premium
    13. Video: Address resolution protocol (ARP) Premium
    14. Video: Media access control (MAC) flooding Premium
    15. Video: MAC cloning Premium
    16. Video: What are Domain Name System (DNS) attacks and defenses? Premium
    17. Video: Domain hijacking Premium
    18. Video: DNS poisoning Premium
    19. Video: Universal resource locator (URL) redirection Premium
    20. Video: Domain reputation Premium
    21. Quiz: Quiz 1.4 Premium
  6. 6 1.5: Explain threat actors, vectors, and intelligence sources
    1. Video: What are actors and threats? Premium
    2. Video: Attributes of actors Premium
    3. Video: Vectors Premium
    4. Video: Insider threats Premium
    5. Video: State actors Premium
    6. Video: Hacktivists Premium
    7. Video: Script kiddies Premium
    8. Video: Hackers (white hat, black hat, gray hat) Premium
    9. Video: Criminal syndicates Premium
    10. Video: Advanced persistent threats (APTs) Premium
    11. Video: Shadow IT Premium
    12. Video: Competitors Premium
    13. Video: Threat intelligence sources (OSINT and others) Premium
    14. Video: Using threat intelligence Premium
    15. Video: Research sources Premium
    16. Quiz: Quiz 1.5 Premium
  7. 7 1.6: Security concerns associated with various vulnerabilities
    1. Video: Cloud-based vs. on-premises vulnerabilities Premium
    2. Video: Zero-day vulnerabilities Premium
    3. Video: Weak configurations Premium
    4. Video: Weak encryption, hashing, and digital signatures Premium
    5. Video: Third-party risks Premium
    6. Video: Improper or weak patch management Premium
    7. Video: Legacy platforms Premium
    8. Video: Impacts Premium
    9. Video: Gap analysis Premium
    10. Reading: Validation of remediation Premium
    11. Quiz: Quiz 1.6 Premium
  8. 8 1.7: Summarizing techniques used in security assessments
    1. Video: Threat hunting Premium
    2. Video: Vulnerability scans Premium
    3. Reading: Identification methods Premium
    4. Video: Security information and event management (SIEM) and Syslog Premium
    5. Video: Security orchestration, automation, and response (SOAR) Premium
    6. Reading: Indicators of malicious activity Premium
    7. Reading: Reporting and monitoring Premium
    8. Quiz: Quiz 1.7 Premium
  9. 9 1.8: Explaining techniques used in penetration testing
    1. Video: Important pentesting concepts Premium
    2. Video: Bug bounties Premium
    3. Video: Exercise types (red, blue, white, and purple teams) Premium
    4. Video: Passive and active reconnaissance Premium
    5. Quiz: Quiz 1.8 Premium
  10. 10 1.9: Explaining the importance of security concepts in an enterprise environment
    1. Video: Confidentiality, Integrity, and Availability (CIA) Premium
    2. Video: Configuration management Premium
    3. Video: Data sovereignty Premium
    4. Video: Data protection Premium
    5. Video: Data Format Types Premium
    6. Video: Hardware security module (HSM) and Trusted Platform Module (TPM) Premium
    7. Video: Geographical considerations Premium
    8. Video: Cloud access security broker (CASB) Premium
    9. Video: Response and recovery controls Premium
    10. Video: Secure Sockets Layer (SSL) and Transport Layer Security (TLS) inspection Premium
    11. Video: Hashing Premium
    12. Video: API considerations Premium
    13. Video: Site resiliency Premium
    14. Video: Deception and disruption Premium
    15. Reading: Introduction to Zero Trust and the control plane Premium
    16. Reading: The data plane and Zero Trust Premium
    17. Quiz: Quiz 2.1 Premium
  11. 11 2.0: Virtualization and cloud computing concepts
    1. Video: Comparing cloud models Premium
    2. Video: Cloud service providers Premium
    3. Video: Virtualization Premium
    4. Video: Containers Premium
    5. Video: Microservices and APIs Premium
    6. Video: Serverless architecture Premium
    7. Video: MSPs and MSSPs Premium
    8. Reading: On-premises vs. off-premises Premium
    9. Video: Edge computing Premium
    10. Video: Fog computing Premium
    11. Video: Thin client Premium
    12. Video: Infrastructure as Code Premium
    13. Video: Services integration Premium
    14. Video: Resource policies Premium
    15. Video: Transit gateway Premium
    16. Quiz: Quiz 2.2 Premium
  12. 12 2.1: Secure application development, deployment, and automation concepts
    1. Video: Understanding development environments Premium
    2. Video: Automation and scripting Premium
    3. Video: Version control Premium
    4. Video: Secure coding techniques Premium
    5. Video: Open Web Application Security Project (OWASP) Premium
    6. Video: Integrity measurement Premium
    7. Video: Software diversity Premium
    8. Video: Provisioning and deprovisioning Premium
    9. Video: Elasticity Premium
    10. Video: Scalability Premium
    11. Quiz: Quiz 2.3 Premium
  13. 13 2.2: Authentication and authorization design concepts
    1. Video: Important authentication and authorization concepts Premium
    2. Video: Multifactor authentication (MFA) factors and attributes Premium
    3. Quiz: MFA factors and attributes Premium
    4. Video: Authentication technologies Premium
    5. Video: Biometrics techniques and concepts Premium
    6. Video: Authentication, authorization, and accounting (AAA) Premium
    7. Video: Cloud vs. on-premises requirements Premium
    8. Quiz: Authentication and authorization design concepts Premium
  14. 14 2.3: Implementing cybersecurity resilience
    1. Video: What is redundancy? Premium
    2. Video: Disk redundancy (RAID levels) Premium
    3. Video: Network redundancy Premium
    4. Video: Power redundancy Premium
    5. Video: Replication Premium
    6. Video: Backup types (full, incremental, differential, and snapshot) Premium
    7. Reading: Backup types practice scenarios Premium
    8. Video: Backup devices and strategies Premium
    9. Quiz: Backup types, devices, and strategies Premium
    10. Video: Non-persistence Premium
    11. Video: Restoration order Premium
    12. Video: Diversity Premium
    13. Quiz: Quiz 2.5 Premium
  15. 15 2.4: Security implications of embedded and specialized systems
    1. Video: What are embedded systems? Premium
    2. Video: System on a Chip (SoC) Premium
    3. Video: SCADA and ICS Premium
    4. Video: Internet of Things (IoT) Premium
    5. Video: Specialized systems Premium
    6. Video: VoIP, HVAC, Drones/AVs, MFP, RTOS, Surveillance systems Premium
    7. Video: Communication considerations Premium
    8. Video: Important constraints Premium
  16. 16 2.5: Importance of physical security controls
    1. Video: Bollards/barricades, Mantraps, Badges, Alarms, Signage Premium
    2. Video: Lighting and fencing Premium
    3. Video: Cameras and Closed-circuit television (CCTV) Premium
    4. Video: Industrial camouflage Premium
    5. Video: Personnel, robots, drones/UAVs Premium
    6. Video: Locks Premium
    7. Video: Different sensors Premium
    8. Video: Fire suppression Premium
    9. Video: Protected cable distribution (PCD) Premium
    10. Video: Secure areas (air gap, faraday cages, DMZ, etc…) Premium
    11. Video: Hot and cold aisles Premium
    12. Video: Secure data destruction Premium
    13. Video: USB data blocker Premium
    14. Quiz: Quiz 2.7 Premium
  17. 17 2.6: Basics of cryptography
    1. Video: Common use cases Premium
    2. Video: Key length Premium
    3. Video: Key stretching Premium
    4. Reading: Salting, hashing, digital signatures Premium
    5. Video: Perfect forward secrecy Premium
    6. Video: Elliptic curve cryptography Premium
    7. Video: Ephemeral Premium
    8. Video: Symmetric vs. asymmetric encryption Premium
    9. Video: Key exchange Premium
    10. Video: Cipher suites Premium
    11. Video: Modes of operation Premium
    12. Video: Lightweight cryptography and Homomorphic encryption Premium
    13. Video: Steganography Premium
    14. Video: Blockchain Premium
    15. Video: Quantum and post-quantum Premium
    16. Video: Limitations Premium
    17. Video: Encryption for different data types Premium
    18. Reading: Quizzes 2.6 Premium
      1. Quiz: Quiz: 2.8 Knowledge Check #1 Premium
      2. Quiz: Quiz: 2.8 Knowledge Check #2 Premium
  18. 18 2.7: Implement Secure Protocols
    1. Video: Important protocols to know and use cases Premium
    2. Video: Important email secure protocols Premium
    3. Video: IPsec and VPN Premium
    4. Video: FTPS, SFTP, SCP Premium
    5. Video: DNSSEC Premium
    6. Video: SRTP and NTPsec Premium
    7. Video: DHCP Premium
    8. Video: SNMP and SNMPv3 Premium
    9. Quiz: Quiz 3.1: Knowledge Check Premium
  19. 19 2.8: Implement host or application security solutions
    1. Video: Endpoint protection Premium
    2. Video: Self-encrypting drive (SED), full disk encryption (FDE), and file-level encryption Premium
    3. Video: Boot integrity Premium
    4. Reading: Database and data security Premium
    5. Video: Application security Premium
    6. Video: Hardening hosts Premium
    7. Video: Sandboxing Premium
    8. Quiz: Quiz: 3.2 Knowledge Check Premium
  20. 20 2.9: Implement secure network designs
    1. Reading: DNS Premium
    2. Video: Load balancing Premium
    3. Reading: High availability (clustering) Premium
    4. Video: Network segmentation Premium
    5. Video: East-West and North-South Premium
    6. Video: Jump servers (bastion hosts) Premium
    7. Video: Network Address Translation (NAT) Gateway Premium
    8. Video: Proxy servers Premium
    9. Video: Out-of-band management Premium
    10. Reading: Secure communication and access Premium
    11. Quiz: Quiz: 3.3.1 Knowledge Check Premium
    12. Video: Virtual Private Networks (VPNs) and IPsec Premium
    13. Video: Network Access Control (NAC) Premium
    14. Video: Port security Premium
    15. Video: Network-based intrusion detection system (NIDS) and network-based intrusion prevention system (NIPS) Premium
    16. Video: Firewalls Premium
    17. Video: Next-Generation Firewalls Premium
    18. Video: Access Control List (ACL) and Security Groups (SGs) Premium
    19. Quiz: Quiz 3.3.2: Knowledge Check Premium
    20. Video: Quality of Service (QoS) Premium
    21. Video: Implications of IPv6 Premium
    22. Video: Port scanning and port mirroring Premium
    23. Video: File integrity monitors Premium
    24. Quiz: Quiz 3.3.3: Knowledge Check Premium
  21. 21 3.0: Install and configure wireless security settings
    1. Video: Cryptographic protocols Premium
    2. Video: Methods Premium
    3. Video: Authentication protocols Premium
    4. Video: Installation considerations Premium
    5. Quiz: Quiz 3.4: Knowledge Check Premium
  22. 22 3.1: Implement secure mobile solutions
    1. Video: Connection methods and receivers Premium
    2. Video: Mobile deployment models Premium
    3. Video: Mobile device management (MDM) Premium
    4. Video: Mobile devices Premium
    5. Video: Enforcement and monitoring Premium
    6. Video: Secure enclave Premium
    7. Quiz: Quiz 3.5: Knowledge Check Premium
  23. 23 3.2: Apply cybersecurity solutions to the cloud
    1. Video: Cloud security controls Premium
    2. Video: Secure cloud storage Premium
    3. Video: Secure cloud networking Premium
    4. Video: Secure cloud compute resources Premium
    5. Video: Secure cloud solutions Premium
    6. Quiz: Quiz 3.6: Knowledge Check Premium
  24. 24 3.3: Implement identity and account management controls
    1. Video: Understanding identity Premium
    2. Video: Account types to consider Premium
    3. Video: Account policies to consider Premium
    4. Quiz: Quiz 3.7: Knowledge Check Premium
  25. 25 3.4: Implement authentication and authorization solutions
    1. Video: Authentication management Premium
    2. Video: Authentication protocols and considerations Premium
    3. Reading: Extensible Authentication Protocol (EAP) Premium
    4. Video: RADIUS and TACACS+ Premium
    5. Video: Kerberos, LDAP, and NTLM Premium
    6. Video: Federated Identities Premium
    7. Video: Access control schemes Premium
    8. Reading: Recap notes from this section Premium
    9. Quiz: Quiz 3.8: Knowledge Check Premium
  26. 26 3.5: Implement public key infrastructure
    1. Video: What is public key infrastructure? Premium
    2. Video: Types of certificates Premium
    3. Video: Certificate formats Premium
    4. Video: Important concepts Premium
    5. Quiz: Quiz 3.9: Knowledge Check Premium
  27. 27 3.6: Use the appropriate tools to assess organizational security
    1. Video: Network reconnaissance and discovery part 1 Premium
    2. Video: Network reconnaissance and discovery part 2 Premium
    3. Video: File manipulation Premium
    4. Video: Shell and script environments Premium
    5. Video: Packet capture and replay Premium
    6. Video: Forensics tools Premium
    7. Video: Exploitation frameworks Premium
    8. Video: Password crackers Premium
    9. Video: Data sanitization Premium
    10. Quiz: Quiz 4.1: Knowledge Check Premium
  28. 28 3.7: Policies, processes, and procedures for incident response
    1. Video: Incident response plans Premium
    2. Video: Incident response process Premium
    3. Video: Important exercises Premium
    4. Video: Important attack frameworks Premium
    5. Video: Business processes impacting security operations Premium
    6. Video: Technical implications Premium
    7. Reading: Privileged access management tools Premium
    8. Video: BCP, COOP, and DRP Premium
    9. Video: Incident response team and stakeholder management Premium
    10. Video: Retention policies Premium
    11. Quiz: Quiz 4.2: Knowledge Check Premium
  29. 29 3.8: Using appropriate data sources to support investigations after an incident
    1. Video: Vulnerability scan outputs Premium
    2. Video: SIEM dashboards Premium
    3. Video: Log files Premium
    4. Video: Syslog, rsyslog, syslog-ng Premium
    5. Video: Journald and journalctl Premium
    6. Video: NXLog Premium
    7. Video: Bandwidth and network monitors Premium
    8. Video: Important and useful metadata Premium
    9. Video: Activities Premium
    10. Quiz: Quiz 4.3: Knowledge Check Premium
  30. 30 3.9: Applying mitigation techniques or controls to secure environments during an incident
    1. Video: Reconfiguring endpoint security solutions Premium
    2. Video: Configuration changes Premium
    3. Video: Isolation, containment, and segmentation Premium
    4. Video: Secure Orchestration, Automation, and Response (SOAR) Premium
    5. Quiz: Quiz 4.4: Knowledge Check Premium
  31. 31 4.0: Key aspects of digital forensics
    1. Video: Documentation and evidence Premium
    2. Video: E-discovery, data recovery, and non-repudiation Premium
    3. Video: Integrity and preservation of information Premium
    4. Video: Acquisition Premium
    5. Video: On-premises vs. cloud Premium
    6. Video: Strategic intelligence and counterintelligence Premium
    7. Quiz: Quiz 4.5: Knowledge Check Premium
  32. 32 4.1: Compare and contrast various types of controls
    1. Video: Categories Premium
    2. Video: Control types Premium
    3. Reading: Types of governance structures Premium
    4. Quiz: Quiz 5.1: Knowledge Check Premium
  33. 33 4.2: Applicable regulations, standards, or frameworks that impact organizational security posture
    1. Video: Regulations, standards, and legislation Premium
    2. Video: Key frameworks to know about Premium
    3. Video: Benchmarks and secure configuration guides Premium
    4. Reading: Compliance (part 1) Premium
    5. Reading: Compliance (part 2) Premium
    6. Reading: Internal vs. external compliance Premium
    7. Quiz: Quiz 5.2: Knowledge Check Premium
  34. 34 4.3: Importance of policies to organizational security
    1. Video: Personnel Premium
    2. Video: User training Premium
    3. Video: Third-party risk management Premium
    4. Reading: Vendor monitoring Premium
    5. Reading: Questionnaires Premium
    6. Video: Data Premium
    7. Video: Credential policies Premium
    8. Video: Organizational policies Premium
    9. Quiz: Quiz 5.3: Knowledge Check Premium
  35. 35 4.4: Risk management processes and concepts
    1. Video: Types of risks Premium
    2. Video: Risk management strategies Premium
    3. Video: Risk appetite Premium
    4. Video: Risk analysis Premium
    5. Video: Disasters Premium
    6. Video: Business impact analysis Premium
    7. Quiz: Quiz 5.4: Knowledge Check Premium
  36. 36 4.5: Privacy and sensitive data concepts in relation to security
    1. Video: Organizational consequences of privacy breaches Premium
    2. Video: Notifications of breaches Premium
    3. Video: Data Classification Categories Premium
    4. Video: Privacy enhancing technologies Premium
    5. Video: Roles and responsibilities Premium
    6. Quiz: Quiz 5.5: Knowledge Check Premium
  37. 37 Course Recap and Next Steps
    1. Reading: Looking for the practice exams? Preview
    2. Reading: Receiving your Certificate of Completion Premium

Section 12 · 2.1: Secure application development, deployment, and automation concepts

Quiz 2.3

Christophe Limpalair

Christophe Limpalair

Premium

This quiz is part of a Premium course

Join Premium to take it, along with every course, practice exam and hands-on lab on Cybr.

View Plans Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
PreviousScalability
Next Important authentication and authorization concepts