Security+ Concepts

Days 8-14: Master foundational security principles with CompTIA Security+ concepts

Overview

The second week of the 90 Days of Cybersecurity challenge focuses on building essential security knowledge aligned with CompTIA Security+ certification (SY0-701). This week builds upon your networking foundation and introduces core cybersecurity concepts, threats, vulnerabilities, and security controls.

Learning Path

1. Day 8: Threats, Attacks & Vulnerabilities

   Understand different types of cyber threats, attack vectors, and common vulnerabilities.

2. Day 9: Architecture & Design

   Learn about secure network architecture, cloud security, and infrastructure design.

3. Day 10: Implementation

   Explore implementing secure systems, protocols, and security controls.

4. Day 11: Operations & Incident Response

   Study security operations, monitoring, and incident response procedures.

5. Day 12: Governance, Risk & Compliance

   Understand security policies, frameworks, regulations, and risk management.

6. Day 13: Cryptography & PKI

   Master encryption, hashing, digital signatures, and public key infrastructure.

7. Day 14: Review & Practice

   Consolidate your learning with practice questions and scenario-based exercises.

Course Options

Recommended: Professor Messer

Professor Messer’s Security+ (SY0-701) Course

Strongly Recommended - The most comprehensive and well-structured free resource for Security+ preparation.

Professor Messer's SY0-701 Playlist

Complete Security+ SY0-701 video series covering all exam objectives with clear explanations and real-world examples.

Why Choose This Course:

• Covers 100% of Security+ SY0-701 exam objectives
• Clear, concise explanations without fluff
• Free course notes available
• Regular updates to match current exam version
• Trusted by thousands of certification candidates

Alternative: Pete Zerger

Pete Zerger’s Security+ (SY0-701) Course

An excellent alternative approach with a different teaching style.

Pete Zerger's SY0-701 Playlist

Complete Security+ course with practical demonstrations and detailed explanations.

Why Choose This Course:

• In-depth coverage with practical demos
• Different teaching style may resonate better
• Includes lab demonstrations
• Great for visual learners

Study Tips

Practice Questions are Critical: Security+ exams are scenario-based. After watching videos, complete practice questions to test your understanding. Focus on:

• Understanding WHY an answer is correct, not just memorizing
• Scenario-based questions that test practical application
• Performance-based questions (PBQs) simulation

Complete related practice questions and exercises daily. Consider these resources:

• Professor Messer’s free Security+ practice exams
• CompTIA CertMaster Practice
• Jason Dion’s practice tests (paid)
• Exam Compass free practice questions

Key Topics to Master

By the end of Day 14, you should be comfortable with:

Security Fundamentals

• CIA Triad: Confidentiality, Integrity, and Availability
• Attack Types: Phishing, malware, social engineering, DDoS
• Threat Actors: APTs, insider threats, hacktivists
• Vulnerability Management: Scanning, assessment, and remediation

Security Controls & Technologies

• Access Control: Authentication, authorization, and accounting (AAA)
• Cryptography: Symmetric, asymmetric encryption, and hashing
• Network Security: Firewalls, IDS/IPS, VPNs, and segmentation
• Security Tools: SIEM, EDR, vulnerability scanners

Security Operations

• Incident Response: Detection, analysis, containment, recovery
• Monitoring & Logging: Security event analysis and correlation
• Risk Management: Assessment, mitigation, and acceptance
• Compliance: GDPR, HIPAA, PCI-DSS, and other frameworks

Additional Practice

CompTIA Security+ Certification

Official certification information and exam objectives (SY0-701)

Security+ Exam Objectives

Download the official exam objectives document

Professor Messer Practice Exams

Free practice questions and study resources

Cybrary Security+ Course

Additional free training content and labs

Real-World Application

Security is Not Just Theory: As you learn these concepts, think about how they apply to real-world scenarios. Consider:

• How would you secure a small business network?
• What steps would you take during a security incident?
• How do compliance requirements affect security implementations?

Next Steps

After completing Security+ concepts, you’ll move on to Linux Tutorials (Days 15-28), where you’ll gain hands-on experience with the operating system that powers most security tools and infrastructure.