This page is a map, not a textbook. Every concept is explained once, in the topic folders (basics, defensive/, offensive/). Use this page to see which pages cover each exam objective, and what to focus on for the exam.
Objective numbers follow the SY0-701 outline. CompTIA revises objectives between exam versions, so confirm against the current official exam objectives PDF before relying on this map.
Domain 1 — General Security Concepts
| Objective | Topic pages |
|---|---|
| 1.1 Security controls (categories and types) | Security Controls |
| 1.2 Fundamental concepts: CIA, non-repudiation, AAA, gap analysis, zero trust | CIA Triad, Security Concepts, Identity and Access Management, Security Architecture Principles |
| 1.3 Change management | Change Management |
| 1.4 Cryptographic solutions | Cryptography Fundamentals, Cryptographic Solutions, Public Key Infrastructure |
Exam focus: control categories (technical, managerial, operational, physical) versus control types (preventive, deterrent, detective, corrective, compensating, directive); which cryptographic tool fits which data state (at rest, in transit, in use).
Domain 2 — Threats, Vulnerabilities, and Mitigations
| Objective | Topic pages |
|---|---|
| 2.1 Threat actors and motivations | Threats and Threat Actors |
| 2.2 Threat vectors and attack surfaces | Attack Surfaces and Threat Vectors, Social Engineering |
| 2.3 Vulnerability types | Vulnerabilities and Risk, OWASP Top 10 |
| 2.4 Indicators of malicious activity (malware, network, application, physical, password attacks) | Malware, Network Attacks, Application Attacks, Wireless Attacks, Cryptography Attacks |
| 2.5 Mitigation techniques | System Hardening, Network Segmentation, Endpoint Security, Vulnerability and Patch Management |
Exam focus: match an attack description to its name (a scenario question), and match a mitigation to the attack it stops.
Domain 3 — Security Architecture
| Objective | Topic pages |
|---|---|
| 3.1 Architecture models (cloud, on-premises, segmentation) | Cloud Security, Security Architecture Principles |
| 3.2 Securing enterprise infrastructure | Firewalls and IDS/IPS, Network Segmentation, VPNs and Tunneling, Security Technologies, Networking Fundamentals |
| 3.3 Data protection | Asset Classification, Data Lifecycle, Cryptographic Solutions |
| 3.4 Resilience and recovery | Backup and Disaster Recovery, Business Continuity |
Domain 4 — Security Operations
| Objective | Topic pages |
|---|---|
| 4.1 Common security techniques (baselines, hardening, wireless, mobile) | System Hardening, Wireless Network Security, Endpoint Security |
| 4.2 Asset management | Asset Classification, Data Maintenance |
| 4.3 Vulnerability management | Vulnerability and Patch Management, Vulnerability Scanning with CVE and Exploit Databases |
| 4.4 Alerting and monitoring | SIEM and Log Management, Security Operations Center, Wireshark, tcpdump |
| 4.5 Enterprise capabilities (firewall, IDS/IPS, filtering, DMARC/DKIM/SPF, NAC, EDR, UBA) | Firewalls and IDS/IPS, Security Technologies, Email Security, Endpoint Security |
| 4.6 Identity and access management | Identity and Access Management |
| 4.8 Incident response | Incident Response Process, Digital Forensics |
| 4.9 Data sources for investigation | SIEM and Log Management, Digital Forensics |
Exam focus: the order of the incident-response phases, the order of volatility, and which log or tool answers which investigative question.
Domain 5 — Security Program Management and Oversight
| Objective | Topic pages |
|---|---|
| 5.1 Security governance (policies, standards, procedures) | Security Policy, Security Frameworks and Standards |
| 5.2 Risk management | Risk Management, Risk Identification, Risk Assessment, Risk Response, Risk Monitoring |
| 5.3 Third-party risk | Security Requirements |
| 5.4 Compliance | GDPR, EU Cyber Resilience Act, OECD Privacy Principles |
| 5.5 Audits and assessments | Risk Monitoring |
| 5.6 Security awareness | Social Engineering |
Exam focus: the four risk responses (transfer, avoid, mitigate, accept), and the difference between policies, standards, procedures, and guidelines.
Gaps to fill
Topics in the objectives that do not yet have a dedicated page: penetration-testing and audit types (5.5), a full security-awareness programme page (5.6), automation and orchestration (4.7), and mobile device management in depth.
Related
- Hands-on practice: Defensive Security intro (TryHackMe)