Training Content

54 Lessons

CompTIA Security+

By neo_admin Categories: Security

About Course

The CompTIA Security+ certification validates foundational skills in cybersecurity, focusing on threats, risk management, secure design, operations, and governance. This syllabus is designed to cover all five exam domains, mapped into structured learning modules with key topics, practical labs, and assessments.

Explain and apply foundational cybersecurity concepts.
Identify and mitigate common threats and vulnerabilities.
Design secure systems and networks with resilience.
Operate and respond effectively in security operations environments.
Manage compliance, risk, and organizational security programs.
Confidently attempt the CompTIA Security+ SY0-701 exam.

Basic Computer Knowledge – familiarity with operating systems (Windows, Linux, or macOS).
Networking Fundamentals – understanding of TCP/IP, routing, switching, and common protocols.
General IT Experience (Recommended) – about 1–2 years of work in IT or networking (not mandatory but helpful).
Prior Certifications (Optional) – CompTIA A+ and Network+ are recommended but not required.
Understanding of Basic Security Concepts – like passwords, malware, firewalls, and antivirus.
Hands-on Practice Environment – access to a PC/laptop and virtual labs for exercises.
Willingness to Learn – no advanced prerequisites; designed for entry-level cybersecurity learners.

IT Support Specialists
Network Administrators
System Administrators
Security Consultants/Analysts (entry-level)
Help Desk Technicians
Students & Graduates in IT/Computer Science
Career Changers
Military & Government Personnel
Compliance & Risk Management Staff
Anyone preparing for higher-level certifications

Course Content

Module 1: General Security Concepts

CIA Triad: Confidentiality, Integrity, Availability
Authentication, Authorization, Accounting (AAA)
Security controls: preventive, detective, corrective, compensating, physical
Zero Trust architecture and risk-based approaches
Change management, security documentation, governance basics
Labs & Activities:
Map security controls to real-world scenarios
Create a Zero Trust model for a sample enterprise
Group exercise: Apply risk assessment frameworks (basic gap analysis)

Module 2: Threats, Vulnerabilities & Mitigations

Threat types: malware, ransomware, phishing, insider threats, supply chain attacks
Vulnerability categories: misconfigurations, weak credentials, unpatched systems
Social engineering techniques & countermeasures
Threat intelligence sources (OSINT, threat feeds, MITRE ATT&CK)
Mitigation strategies: patch management, user awareness, endpoint protection
Labs & Activities:
Simulate a phishing email and analyze indicators of compromise
Conduct a vulnerability scan with open-source tools
Threat modeling activity using MITRE ATT&CK

Module 3: Security Architecture

Secure network design: segmentation, DMZs, VLANs, defense-in-depth
Identity & access management (IAM): SSO, MFA, federation, RBAC/ABAC
Cloud security models: IaaS, PaaS, SaaS, CASB, SASE, Zero Trust cloud integration
Supply chain security considerations
Secure systems design: redundancy, fault tolerance, resilience
Labs & Activities:
Design a secure enterprise network with segmentation & DMZs
Configure MFA for cloud services (e.g., Microsoft 365, AWS)
Case study: Assessing risks in third-party vendor integrations

Module 4: Security Operations

Security monitoring tools: SIEM, SOAR, IDS/IPS, log management
Incident response process: Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned
Digital forensics fundamentals: evidence handling, chain of custody, volatile memory capture
Endpoint detection & response (EDR/XDR)
Security automation & orchestration in hybrid environments
Business continuity and disaster recovery (BCP/DRP)
Labs & Activities:
Simulate an incident response drill (containment → recovery)
Analyze logs using a SIEM platform (Splunk/ELK demo)
Perform basic forensic analysis on a compromised VM

Module 5: Security Program Management & Oversight

Governance, risk, and compliance (GRC) frameworks: NIST, ISO 27001, COBIT
Legal & regulatory compliance: GDPR, HIPAA, PCI-DSS, SOX
Security roles and responsibilities (CISO, SOC analyst, auditor, etc.)
Policy development: acceptable use, BYOD, incident handling policies
Third-party risk management: SLAs, MOUs, BPAs
Auditing, reporting, and continuous improvement
Labs & Activities:
Draft an organization’s security policy (acceptable use or password policy)
Perform a mock compliance audit against NIST CSF
Risk register exercise: identify, assess, and prioritize risks

Module 6: Review & Exam Preparation

A course by

neo_admin

Student Ratings & Reviews

No Review Yet

No Data Available in this Section

Training Information

Price

$2,999.00

Course Level:

All Levels

Lessons:

Lessons:Total Enrolled:

Last Update:

September 8, 2025

CompTIA Security+

Training Content

About Course

What Will You Learn?

Requirements

Audience

Course Content

Module 1: General Security Concepts

CIA Triad: Confidentiality, Integrity, Availability

Authentication, Authorization, Accounting (AAA)

Security controls: preventive, detective, corrective, compensating, physical

Zero Trust architecture and risk-based approaches

Change management, security documentation, governance basics

Labs & Activities:

Map security controls to real-world scenarios

Create a Zero Trust model for a sample enterprise

Group exercise: Apply risk assessment frameworks (basic gap analysis)

Module 2: Threats, Vulnerabilities & Mitigations

Threat types: malware, ransomware, phishing, insider threats, supply chain attacks

Vulnerability categories: misconfigurations, weak credentials, unpatched systems

Social engineering techniques & countermeasures

Threat intelligence sources (OSINT, threat feeds, MITRE ATT&CK)

Mitigation strategies: patch management, user awareness, endpoint protection

Labs & Activities:

Simulate a phishing email and analyze indicators of compromise

Conduct a vulnerability scan with open-source tools

Threat modeling activity using MITRE ATT&CK

Module 3: Security Architecture

Secure network design: segmentation, DMZs, VLANs, defense-in-depth

Identity & access management (IAM): SSO, MFA, federation, RBAC/ABAC

Cloud security models: IaaS, PaaS, SaaS, CASB, SASE, Zero Trust cloud integration

Supply chain security considerations

Secure systems design: redundancy, fault tolerance, resilience

Labs & Activities:

Design a secure enterprise network with segmentation & DMZs

Configure MFA for cloud services (e.g., Microsoft 365, AWS)

Case study: Assessing risks in third-party vendor integrations

Module 4: Security Operations

Security monitoring tools: SIEM, SOAR, IDS/IPS, log management

Incident response process: Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned

Digital forensics fundamentals: evidence handling, chain of custody, volatile memory capture

Endpoint detection & response (EDR/XDR)

Security automation & orchestration in hybrid environments

Business continuity and disaster recovery (BCP/DRP)

Labs & Activities:

Simulate an incident response drill (containment → recovery)

Analyze logs using a SIEM platform (Splunk/ELK demo)

Perform basic forensic analysis on a compromised VM

Module 5: Security Program Management & Oversight

Governance, risk, and compliance (GRC) frameworks: NIST, ISO 27001, COBIT

Legal & regulatory compliance: GDPR, HIPAA, PCI-DSS, SOX

Security roles and responsibilities (CISO, SOC analyst, auditor, etc.)

Policy development: acceptable use, BYOD, incident handling policies

Third-party risk management: SLAs, MOUs, BPAs

Auditing, reporting, and continuous improvement

Labs & Activities:

Draft an organization’s security policy (acceptable use or password policy)

Perform a mock compliance audit against NIST CSF

Risk register exercise: identify, assess, and prioritize risks

Module 6: Review & Exam Preparation

Domain-by-domain knowledge review

Performance-based simulations (PBQs):

Firewall rule configuration

Incident response decision-making

IAM implementation scenario

Mock exams with timed practice

Exam-taking strategies: time management, PBQ handling, question elimination

A course by

Student Ratings & Reviews

Training Information

Share The Course

Related Training Courses

Windows System Engineering

AWS Cloud Practitioner

Cloud Security Engineer