CompTIA Security+ Essentials

Learn core cybersecurity principles and attack types to build a strong foundation for certification and real-world defense.

What are physical access controls?
What are the core principles of cryptography?
What is authentication?
What is a SIEM?
What is Malware?
What is network segmentation?
What is risk in cybersecurity?
What is the Secure Software Development Life Cycle (SSDLC)?
What is WPA3?
What is a certificate authority (CA)?
What is a hybrid cloud?
What is a security standard?
What is DevSecOps?
What is Phishing?
What is SAML?
What is secure disposal of equipment?
What is Software as a Service (SaaS)?
What is vulnerability scanning?
What is a CRL?
What is a Hardware Security Module (HSM)?
What is code signing?
What is ISO/IEC 27001?
What is OAuth?
What is Spear Phishing?
What is the shared responsibility model in cloud?
What is virtualization in security?
What is vulnerability remediation?
What are physical intrusion detection systems?
What is a Type 1 hypervisor?
What is hash validation?
What is LDAP?
What is OCSP?
What is patch management?
What is the NIST Cybersecurity Framework?
What is Whaling?
Why is encryption important in the cloud?
What are common software deployment models?
What is Active Directory?
What is chain of custody?
What is containerization?
What is encryption at rest?
What is GDPR?
What is tailgating in physical security?
What is Vishing?
What is VM escape?
How to prevent physical social engineering attacks?
How to secure containers?
What is container orchestration?
What is disk imaging in forensics?
What is encryption in transit?
What is fuzz testing?
What is HIPAA?
What is identity proofing?
What is Smishing?
What is a Trusted Platform Module (TPM)?
What is credential management?
What is Data Loss Prevention (DLP)?
What is key rotation?
What is PCI-DSS?
What is penetration testing?
What is Pretexting?
What is Baiting?
What is key escrow?
What is MDM?
What is Privileged Access Management (PAM)?
What is Secure Boot?
What is the purpose of security awareness training?
What are access control mechanisms?
What is application containerization?
What is a VPN?
What is business continuity planning (BCP)?
What is Tailgating?
What is the principle of least privilege?
What are the types of data backups?
What is a DoS attack?
What is disaster recovery (DR)?
What is separation of duties?
What is TLS?
What is a backup retention policy?
What is a DDoS attack?
What is salting in password hashing?
What is the management plane in cloud architecture?
How does WPA2 differ from WEP?
What are the key phases of the SDLC?
What is a mantrap in physical security?
What is a Virus?
What is a VLAN?
What is EDR?
What is multi-factor authentication (MFA)?
What is the CIA triad?
What is the difference between a threat and a vulnerability?
What is a Man-in-the-Middle (MITM) attack?
What is a Replay Attack?
What is ARP Poisoning?
What is DNS Poisoning?
What is IP Spoofing?
What is Port Scanning?
What is MAC Flooding?
What is a Zero-Day vulnerability?
What is a DMZ in network security?
What is a rogue access point?
What is a Worm?
What is biometric authentication?
What is CCTV used for in security?
What is input validation?
What is qualitative risk assessment?
What is SOAR?
What is symmetric encryption?
What is Cross-Site Request Forgery (CSRF)?
What is Insecure API?
What is an evil twin attack?
What is asymmetric encryption?
What is a motion sensor?
What is a Trojan Horse?
What is log correlation?
What is quantitative risk assessment?
What is Role-Based Access Control (RBAC)?
What is the principle of least privilege in software?
What is zero trust architecture?
What are the main risk response strategies?
What is an alert threshold?
What is Attribute-Based Access Control (ABAC)?
What is defense-in-depth?
What is Mobile Device Management (MDM)?
What is Ransomware?
What is SQL injection?
What is the difference between symmetric and asymmetric encryption?
Why is HVAC important for security?
What are the phases of the incident response process?
What is a buffer overflow?
What is a fire suppression system?
What is Discretionary Access Control (DAC)?
What is hashing?
What is risk mitigation?
What is Spyware?
What is the shared responsibility model in cloud security?
Why is mobile encryption important?
What are secure zones in a facility?
What is a Business Impact Analysis (BIA)?
What is a Rootkit?
What is a secure baseline configuration?
What is BYOD?
What is containment in incident response?
What is cross-site scripting (XSS)?
What is HMAC?
What is Mandatory Access Control (MAC)?
What is a data center layout consideration for security?
What is a digital signature?
What is a Logic Bomb?
What is IaaS?
What is identity federation?
What is static code analysis?
What is system hardening?
What is the difference between RTO and RPO?
What is threat intelligence?
What are indicators of compromise (IoCs)?
What is an acceptable use policy?
What is asset tagging?
What is a digital certificate?
What is dynamic analysis?
What is Infrastructure as a Service (IaaS)?
What is SaaS?
What is Single Sign-On (SSO)?
What is Social Engineering?