Objective Map

This table maps each SY0-801 objective to the chapter in this guide that covers it. The objective descriptions are summarized; refer to the official CompTIA objectives document for the full wording and list of examples.

Objective Summary Chapter

1.1 Security concepts and controls (defense in depth, CIA, AAA, Zero Trust, control categories and types)

1.2 Impact of change management processes on security (scenario) 2

1.3 Importance of appropriate cryptographic solutions 3

2.1 Characteristics of threats and vulnerabilities 4

2.2 Common threat actors and motivations 5

2.3 Threat vectors and sources 6

2.4 Types of vulnerabilities and attack surfaces 7

2.5 Indicators of malicious activity (scenario) 8

2.6 Threats and vulnerabilities associated with AI usage 9

3.1 Security implications of architecture models 10

3.2 Managing security architecture to protect infrastructure (scenario) 11

3.3 Concepts and strategies to protect data 12

3.4 Resilience and recovery in security architecture 13

4.1 Mitigating controls, techniques, and solutions (scenario) 14

4.2 Hardware, software, and data asset management 15

4.3 Vulnerability management tasks (scenario) 16

4.4 Security alerting and monitoring concepts and tools 17

4.5 Identity and access management (scenario) 18

4.6 Automation and orchestration, including AI (scenario) 19

4.7 Incident response activities 20

4.8 Data, artifacts, and sources for investigations (scenario) 21

5.1 Governance, risk, and compliance artifacts 22

5.2 Risk management processes 23

5.3 Third-party risk assessment and management 24

5.4 Elements of effective security compliance 25

5.5 Audit and assessment activities 26

5.6 Security awareness concepts (scenario) 27

Hardware and Software to Practice With

CompTIA publishes a sample list of equipment and software that is useful for exam preparation. You do not need all of it, but hands-on practice with even a few items will make many concepts concrete. A practical home lab for Security+ might include:

• Virtual machines running Windows and Linux, including a penetration testing distribution such as Kali Linux.
• A virtual firewall or router (many open-source firewall distributions run well in a VM).
• A packet capture tool such as Wireshark or tcpdump.
• A vulnerability scanner with a free or community edition.
• A SIEM or log management tool with a free tier, plus sample logs to analyze.
• A network mapper such as Nmap.
• Access to a cloud environment using a free-tier account, to practice identity and access management, storage permissions, and security groups.
• A code editor and sample code to practice reading for vulnerabilities such as hardcoded secrets and missing input validation.

Common trap

Only scan, test, or attack systems that you own or have written permission to test. Running scanning or exploitation tools against systems without authorization is illegal in many jurisdictions, regardless of your intent.