Security+ study guide
Security+ · Work through your exam, one topic at a time.
CompTIA Security+ is a globally recognized cybersecurity certification that helps you build and validate the practical cybersecurity skills needed to perform core security functions and pursue a career in cybersecurity. CompTIA aligns it with roles such as security analyst, security engineer, and systems administrator, so it fits both people moving into a security role and practitioners who want their foundational knowledge formally validated. Two versions are in play. Security+ V7 is available today and CompTIA describes it as a strong option if you are ready to certify now. The Security+ study guide has 5 sections and about 1,651 words.
01General Security Concepts
Questions in this domain reward vocabulary precision more than depth. Anchor every answer to the CIA triad (confidentiality, integrity, availability), then to authentication, authorization, accounting, and non-repudiation.
324 words, about 2 min02Threats, Vulnerabilities, and Mitigations
Threat-actor classification (nation-state/APT, organized crime, hacktivist, insider, unskilled attacker, shadow IT) frames both the risk narrative and the correct mitigation. Nation-states favor stealth and long dwell time; organized crime monetizes ransomware; insiders hold legitimate access and bypass perimeter controls entirely.
334 words, about 2 min03Security Architecture
Learn IaaS, PaaS, SaaS plus deployment models (public, private, hybrid, community). In the shared responsibility model the provider secures the physical layer and the service's own infrastructure, while the customer always owns data, identities, and configuration.
339 words, about 2 min04Security Operations
Change management with approval and rollback paths, accurate asset inventory, and hardened configuration baselines (CIS Benchmarks, STIGs) underpin everything else. Vulnerability management is a cycle: discover, prioritize by CVSS plus exploitability plus asset criticality, remediate or mitigate, verify, and report.
324 words, about 2 min05Security Program Management and Oversight
Governance sets direction. Policies state mandatory high-level intent; standards are specific mandatory requirements; procedures are step-by-step instructions; guidelines are recommendations.
330 words, about 2 min