CompTIA Security+ (SY0-701) Cert Prep: 3 Security Architecture

Prepare for the third domain of the CompTIA Security+ (SY0-701) certification exam: Security Architecture.

Introduction

• Security architecture
• Study resources

1. Cloud Computing

• What is the cloud?
• Cloud computing roles
• Drivers for cloud computing
• Multitenant computing
• Cloud considerations
• Security service providers

2. Virtualization

• Virtualization
• Desktop and application virtualization

3. Cloud Building Blocks

• Cloud compute resources
• Cloud storage
• Cloud networking
• Cloud databases
• Cloud orchestration
• Containers
• SOA and microservices

4. Cloud Activities

• Cloud activities and the cloud reference architecture
• Cloud deployment models
• Cloud service categories
• Security and privacy concerns in the cloud
• Data sovereignty
• Operational concerns in the cloud

5. Cloud Security Controls

• Cloud firewall considerations
• Cloud application security
• Cloud provider security controls

6. TCP/IP Networking

• Introducing TCP/IP
• IP addresses and DHCP
• Domain Name System (DNS)
• Network ports
• ICMP

7. Secure Network Design

• Security zones
• VLANs and network segmentation
• Security device placement
• Software-defined networking (SDN)

8. Network Security Devices

• Routers, switches, and bridges
• Firewalls
• Web application firewalls
• Proxy servers
• Load balancers
• VPNs and VPN concentrators
• Network intrusion detection and prevention
• Protocol analyzers
• Unified threat management
• Failure modes

9. Network Security Techniques

• Restricting network access
• Network access control
• Router configuration security
• Switch configuration security
• Maintaining network availability
• Network monitoring
• SNMP
• Isolating sensitive systems
• Zero trust networking
• Secure access service edge (SASE)

10. Embedded Systems Security

• Industrial control systems
• Internet of Things
• Securing smart devices
• Secure networking for smart devices
• Embedded systems

11. Data Protection

• Understanding data security
• Data types
• Data anonymization
• Data obfuscation
• Information classification

12. Resilience and Recovery

• Business continuity planning
• Business continuity controls
• High availability and fault tolerance
• Disaster recovery
• Backups
• Restoring backups
• Disaster recovery sites
• Testing BC/DR plans
• Capacity planning

Conclusion

• Continuing your studies