Study guide

Security+ study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Internal and External Audits and Evidence
  2. Penetration Test Types and Rules of Engageme
  3. Personnel and Physical Security Program Cont
  4. Security Awareness, Training, and Phishing M
  5. Backups, RTO, RPO, BCP, DR, and Resilience
  6. Data Classification and Handling — Free Study Guide 2026
  7. DLP, Privacy, and the Data Lifecycle — Free Study Guide 2026
  8. Encryption at Rest, in Transit, in Use, and
  9. Disk, Memory, Network, and Log Artifacts
  10. Evidence Handling and Chain of Custody — Free Study Guide 2026
  11. Forensic Reporting and Anti-Forensics Traps
  12. Order of Volatility and Acquisition Choices
  13. Final 7-Day Review Plan — Free CompTIA Security+ Guide 2026
  14. Firewall, IAM, Log, and Risk PBQ Mini-Labs
  15. Ports, Protocols, and Acronyms High-Yield Ta
  16. Mixed Exam Strategy and Missed-Question Reme
  17. PBQ Workflow and Timing — Free CompTIA Security+ Guide 2026
  18. Change Management and Business Impact — Free Study Guide 2026
  19. CIA and Non-Repudiation — Free CompTIA Security+ Guide 2026
  20. Control Types and Categories with Scenario C
  21. Security Principles: Least Privilege, Defens
  22. Exceptions, Acceptance, Ownership, and Repor
  23. Governance Documents: Policy, Standard, Proc
  24. Quantitative/Qualitative Risk and BIA — Free Study Guide 2026
  25. Risk Register and Risk Treatment — Free Study Guide 2026
  26. Account Attacks and IAM Monitoring — Free Study Guide 2026
  27. Federation, SSO, SAML, OIDC, and OAuth — Free Study Guide 2026
  28. PAM, JIT, JEA, and Service Accounts — Free Study Guide 2026
  29. Provisioning, Deprovisioning, and Access Rev
  30. AAA and IAM Concepts — Free CompTIA Security+ Guide 2026
  31. Authentication Factors and MFA Traps — Free Study Guide 2026
  32. Authorization Models: RBAC, ABAC, MAC, DAC,
  33. Cryptography, Hashes, Signatures, PKI, and C
  34. Communication, Escalation, Legal, and Regula
  35. Containment, Eradication, and Recovery Decis
  36. IR Phases and Roles — Free CompTIA Security+ Guide 2026
  37. Post-Incident Lessons Learned and Metrics
  38. Current Exam Facts and How Security+ Tests J
  39. Domain Weighting and an 8-12 Week Study Plan
  40. Practice Questions, PBQs, and the Missed-Que
  41. Detection Use Cases and False-Positive Handl
  42. Log Sources and Telemetry — Free CompTIA Security+ Guide 2026
  43. SIEM Correlation and Alert Triage — Free Study Guide 2026
  44. SOAR, Playbooks, and Automation — Free Study Guide 2026
  45. Firewalls, WAF, IDS, IPS, and Proxies — Free Study Guide 2026
  46. Segmentation, VLANs, DMZ, and Microsegmentat
  47. VPN, Remote Access, and NAC — Free Study Guide 2026
  48. Wireless Security and Enterprise Network Des
  49. Architecture Models and Trust Boundaries
  50. Cloud Shared Responsibility and Service Mode
  51. Secure Design Review Scenarios — Free Study Guide 2026
  52. Zero Trust, SASE, and SSE Concepts — Free Study Guide 2026
  53. Cloud, Container, and Virtualization Operati
  54. Embedded, IoT, OT, and Physical Device Secur
  55. Endpoint and Server Hardening — Free Study Guide 2026
  56. Mobile, BYOD, and MDM — Free CompTIA Security+ Guide 2026
  57. Compliance Reporting and Consequences — Free Study Guide 2026
  58. Due Diligence, Questionnaires, and Monitorin
  59. Privacy Concepts and Data Rights — Free Study Guide 2026
  60. Vendor Risk Lifecycle and Agreements — Free Study Guide 2026
  61. Attack Vectors and Attack Surface — Free Study Guide 2026
  62. Social Engineering Types and Clues — Free Study Guide 2026
  63. Supply Chain and Insider Threat Scenarios
  64. Threat Actors and Motivations — Free Study Guide 2026
  65. Application, API, and Cloud Attacks with Mit
  66. Credential and Password Attacks — Free Study Guide 2026
  67. Malware Behaviors and Indicators — Free Study Guide 2026
  68. Network and Wireless Attacks — Free Study Guide 2026
  69. Remediation, Compensating Controls, and Risk
  70. Secure Coding and Application Mitigations
  71. Vulnerability Scanning and Prioritization
  72. Vulnerability Types and Misconfiguration
  73. Asset Inventory and Data Classification in O
  74. Automation, Orchestration, SCAP, and Securit
  75. Patch, Change, and Configuration Management
  76. Vulnerability Lifecycle and CVSS/Risk Priori