Cheat sheet
CompTIA Security+ Cheat Sheet
Cheat sheet CompTIA Security+ Cheat Sheet Practice Questions Study Guide Print / Save PDF
General Concepts 12% of exam Security Basics Controls Identity CIA vs AAA
Threats + Mitigations 22% of exam Threat Actors Attacks Hash vs Encryption Risk vs Vulnerability
Security Architecture 18% of exam Architecture Crypto Picker IDS vs IPS BCP vs DR
Security Operations 28% of exam Operations Incident Response IR Picker Control Picker
Program Oversight 20% of exam Governance Policy Stack GRC Picker Risk Formula
Quick Facts Exam SY0-701 Questions Max 90 Time 90 min Pass 750/900 Level Core security Format MCQ + PBQ Skill Pick control
CIA + AAA CO CIA protects data | AAA controls users C: secrecy I: accuracy A: uptime AAA: access
Authentication vs Authorization CO
Authentication Who you are Login MFA
Authorization What you do Permissions Roles Identity vs access
Security Basics CO CIA Confidentiality integrity availability AAA Authn authz accounting Zero Trust Verify every request Least privilege Minimum access Defense depth Layered controls Nonrepudiation Cannot deny action
Controls CO Preventive Stop event Detective Find event Corrective Fix event Deterrent Discourage action Compensating Alternate control Directive Require behavior
Identity CO MFA Multiple factors SSO One login Federation Trusted IdPs SAML Enterprise assertions OIDC Identity layer PAM Privileged access
Risk vs Vulnerability TH
Risk Likelihood x impact Business loss Prioritized
Vulnerability Weakness Exploit path Patchable Loss vs weakness
Threat Actors TH Insider Trusted access Nation-state Advanced resources Script kiddie Low skill Hacktivist Ideology motive Organized crime Financial motive APT Persistent campaign
Attacks TH Phishing Broad lure Spear phishing Targeted lure Whaling Executive target SQLi Database injection XSS Browser script DDoS Availability attack MitM Intercept traffic Ransomware Encrypts data
Hash vs Encryption AR
Hash One-way Integrity Passwords
Encryption Reversible Confidentiality Data secrecy Verify vs hide
Crypto Picker AR Need speed → Symmetric Need exchange → Asymmetric Need integrity → Hash Need identity → Signature Store password → Salted hash Protect keys → HSM
Architecture AR DMZ Public buffer Segmentation Limit blast Microsegmentation Workload isolation SASE Cloud security edge CASB Cloud app broker WAF Web app filter NAC Endpoint admission HSM Key protection
IDS vs IPS AR
IDS Detects Alerts Passive
IPS Blocks Inline Active Alert vs block
Crypto AR Hash Integrity digest Salt Unique randomness Symmetric One key Asymmetric Key pair Signature Integrity + identity PKI Certificate trust
IR Order OP Prep -> Detect -> Contain -> Eradicate Recover follows Lessons last Contain first Preserve evidence
Control Picker OP Stop attack → Preventive Find attack → Detective Fix impact → Corrective Scare actor → Deterrent Replace gap → Compensating Force behavior → Directive
Operations OP EDR Endpoint detection SIEM Log correlation SOAR Automated playbooks DLP Data loss prevention MDM Mobile management Patching Fix vulnerability Baseline Approved config Hardening Reduce attack surface
IR Picker OP Before incident → Preparation Alert fires → Detection Stop spread → Containment Remove malware → Eradication Restore systems → Recovery After action → Lessons
Incident Response OP Prepare Plans + tools Detect Identify incident Contain Limit spread Eradicate Remove cause Recover Restore service Lessons Improve process
Risk Formula GO Risk = likelihood x impact Asset value Threat source Vulnerability Control gap
BCP vs DR GO
BCP Keep operating Business process Continuity
DR Restore IT Systems recovery Backups Business vs systems
Governance GO Policy Management intent Standard Mandatory rule Procedure Step sequence Baseline Minimum config Risk register Tracked risks BIA Impact analysis SLA Service target MOU Shared understanding
Common Traps
Auth mixup Authn proves identity ≠ Authz grants access
Hash confusion Hash verifies ≠ Encryption hides
IDS confusion IDS alerts ≠ IPS blocks
BCP confusion BCP keeps business ≠ DR restores systems
Risk confusion Risk is loss ≠ Vulnerability is weakness
Last Minute 1 . Weights: 12 / 22 / 18 / 28 / 20 2 . CIA = data goals 3 . AAA = access flow 4 . Hash = integrity 5 . Encryption = confidentiality 6 . IDS alerts; IPS blocks 7 . BCP = business continuity 8 . DR = system recovery 9 . Risk = likelihood x impact 10 . IR: contain before eradicate
CompTIA Security+ Practice Questions 325 questions Study Guide 76 topics Cheat Sheet 68 facts Flashcards 50 cards Shorts 4 short s Videos 4 videos Blogs 5 blogs Free CE Radio On air Radio Now playing
Third-party resources · We may earn a commission from purchases.
CompTIA Security+ Get Certified Get Ahead: SY0-701 Study Guide By Shelley, Joe, Gibson, Darril $36.84 · Buy on Amazon Security+ course on Alison Learning path on Pluralsight Take courses on Udemy
Same family resources Explore More CompTIA Certifications Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
CompTIA A+ Cheat Sheet 62 facts Practice Questions 298 questions Study Guide 45 topics Flashcards 50 cards Shorts 2 short s Videos 1 video Blogs 4 blogs Free CE
CompTIA Network+ Cheat Sheet 143 facts Practice Questions 200 questions Study Guide 76 topics Flashcards 50 cards Shorts 2 short s Videos 1 video Blogs 2 blogs Free CE
CompTIA CySA+ Cheat Sheet 112 facts Practice Questions 400 questions Study Guide 29 topics Flashcards 50 cards Shorts 1 short Blogs 1 blog Free CE
CompTIA Cloud+ Practice Questions 250 questions Study Guide 50 topics Shorts 1 short Blogs 1 blog Free CE
CompTIA PenTest+ Practice Questions 200 questions Study Guide 56 topics Videos 1 video Blogs 1 blog Free CE
CompTIA Tech+ Practice Questions 245 questions Study Guide 39 topics Shorts 4 short s Free CE
More From This Family Videos and articles for deeper review. Video FREE Cisco CCST Cybersecurity (100-160) Exam Guide 2026: Pass First Try This exam Video FREE Fortinet NSE 4 FortiOS Exam Guide 2026: 50-55 Questions, FortiOS 7.6 This exam Video ISC2 CC vs CompTIA Security+: Which First in 2026? This exam Video Security+ SY0-701 Domain Weights & Percentages (2026) This exam Article FREE Cisco CCST Cybersecurity (100-160) Exam Guide 2026: Pass First Try 20 min read Article FREE Fortinet NSE 4 FortiOS Exam Guide 2026: 50-55 Questions, FortiOS 7.6 21 min read Article Is CompTIA Security+ Worth It in 2026? Jobs, Salary, DoD 8140 15 min read Article ISC2 CC vs CompTIA Security+: Which First in 2026? 13 min read
Independent exam preparation notice OpenExamPrep is an independent education provider, not affiliated with or endorsed by the exam sponsors named on this site. Exam and certification names identify what our resources help you study for; they do not imply sponsorship, approval, or review of our materials. Unless a resource expressly identifies authorized public material, our practice questions are independently developed simulations, not actual, recalled, or sponsor-provided exam items. We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor. Updated 2026-05-13 . Official exam sources checked SY0-701 objectives . This is a study aid only and is not for use during the exam. CompTIA Security+ Certification Security+ SY0-701 Exam Objectives