CompTIA Security SY0-601 Exam: The Syllabus in Brief

Part I
Attacks, Threats, and Vulnerabilities

This part covers the following official Security+ SYO-601 exam objectives for Domain 1.0, “Attacks, Threats, and Vulnerabilities”:
- 1.1 Compare and contrast different types of social engineering techniques.
- 1.2 Given a scenario, analyze potential indicators to determine the type of attack.
- 1.3 Given a scenario, analyze potential indicators associated with application attacks.
- 1.4 Given a scenario, analyze potential indicators associated with network attacks.
- 1.5 Explain different threat actors, vectors, and intelligence sources.
- 1.6 Explain the security concerns associated with various types of vulnerabilities.
- 1.7 Summarize the techniques used in security assessments.
- 1.8 Explain the techniques used in penetration testing.

The requirement to adequately assess the security posture of an enterprise environment and to be able to recommend and implement appropriate security solutions involves many complexities and requirements. Today’s networks and computer systems are complex and distributed across varying environments. To be able to assess these environments and make the best decisions about securing them, you must understand the risk associated with them—including attacks, threats, and vulnerabilities across the technology landscape. 

Part II
Architecture and Design

This part covers the following official Security+ SYO-601 exam objectives for Domain 2.0, “Architecture and Design”:
- 2.1 Explain the importance of security concepts in an enterprise environment.
- 2.2 Summarize virtualization and cloud computing concepts.
- 2.3 Summarize secure application development, deployment, and automation concepts.
- 2.4 Summarize authentication and authorization design concepts.
- 2.5 Given a scenario, implement cybersecurity resilience.
- 2.6 Explain the security implications of embedded and specialized systems.
- 2.7 Explain the importance of physical security controls.
- 2.8 Summarize the basics of cryptographic concepts.

To properly secure computers, networks, and applications, you must understand the principles of secure design. This part of the book covers important security and system concepts, implementation of cybersecurity resilience, and secure application development and deployment, along with the security implications of embedded systems, virtualization, and cloud environments.
Planning a secure architecture and design is critical to ensure that proper controls are in place to meet organization goals and reduce risk. Secure architecture and systems design are based on frameworks, best practices, and guides. Secure design is holistic, encompassing physical security controls, logical controls, and additional internal and external systems. This part covers how architecture and design fit into an organization’s security posture.

Part III
Implementation

This part covers the following official Security+ SYO-601 exam objectives for Domain 3.0, “Implementation”:
- 3.1 Given a scenario, implement secure protocols.
- 3.2 Given a scenario, implement host or application security solutions.
- 3.3 Given a scenario, implement secure network designs.
- 3.4 Given a scenario, install and configure wireless security settings.
- 3.5 Given a scenario, implement secure mobile solutions.
- 3.6 Given a scenario, apply cybersecurity solutions to the cloud.
- 3.7 Given a scenario, implement identity and account management controls.
- 3.8 Given a scenario, implement authentication and authorization solutions.
- 3.9 Given a scenario, implement public key infrastructure.

To properly secure a network, you must understand the principles of secure design. This part covers secure protocols, application security, network design, wireless, mobile, cloud, identity, authentication, authorization, and public key infrastructure.
Implementing a secure architecture and design is critical to ensuring that proper controls are in place to meet organizational goals and reduce risk. This part of the book explains how architecture, design, and implementation fit into an organization’s security posture.

Part IV
Operations and Incident Response

This part covers the following official Security+ SY0-601 exam objectives for Domain 4.0, “Operations and Incident Response”:
- 4.1 Given a scenario, use the appropriate tool to assess organizational security.
- 4.2 Summarize the importance of policies, processes, and procedures for incident response.
- 4.3 Given an incident, utilize appropriate data sources to support an investigation.
- 4.4 Given an incident, apply mitigation techniques or controls to secure an environment.
- 4.5 Explain the key aspects of digital forensics.

This part covers assessment of organizational security as well as incident response based on policies and procedures and also gets into more specifics about the tools and data sources used as part of an incident response program. Incident response covers a life cycle of responsibilities from identification to investigation and mitigation. After an incident, forensics and restoration can take place.

Part V
Governance, Risk, and Compliance

This part covers the following official Security+ SY0-601 exam objectives for Domain 5.0, “Governance, Risk, and Compliance”:
- 5.1 Compare and contrast various types of controls.
- 5.2 Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture.
- 5.3 Explain the importance of policies to organizational security.
- 5.4 Summarize risk management processes and concepts.
- 5.5 Explain privacy and sensitive data concepts in relation to security.

Avoiding risk is often difficult, and sometimes it is even impossible. Thus, effective risk management strategies must be applied to mitigate (reduce) the likelihood and impact of “bad risks” or to enhance (improve) the likelihood and results of “good risks.” A good risk might be the chance of a windfall profit or some other beneficial outcome. Most risks that the exam addresses, however, are of the bad risk type. In these cases, an attacker seeks unauthorized access to data or services. This part covers important concepts related to risk management.

Managing risk requires strong governance with an understanding of the goals of the organization, an understanding of the critical functions performed within the organization, and a comprehensive assessment of the risk the organization faces. From this understanding, an organization can develop appropriate policies, plans, and procedures related to organizational security that are commensurate with the overall goals and acceptable risk tolerance and threshold of the organization.