CompTIA Security+

1.0 Network Security
1.1 Implement security configuration parameters on network devices.
1.2 Given a scenario, use secure network administration principles.
1.3 Explain network design elements and components.
1.4 Given a scenario, implement common protocols and services.
1.5 Given a scenario, troubleshoot security issues related to wireless networking.

2.0 Compliance and Operational Security
2.1 Explain the importance of risk related concepts
2.2 Summarize the security implications of integrating systems and data.
2.3 Given a scenario, implement appropriate risk mitigation strategies.
2.4 Given a scenario, implement basic forensic procedures.
2.5 Summarize common incident response procedures.
2.6 Explain the importance of security related awareness and training.
2.7 Compare and contrast physical security and environmental controls.
2.8 Summarize risk management best practices.
2.9 Given a scenario, select the appropriate control to meet the goals of security.

3.0 Threats and Vulnerabilities
3.1 Explain types of malware.
3.2 Summarize various types of attacks.
3.3 Summarize social engineering attacks.
3.4 Explain types of wireless attacks.
3.5 Explain types of application attacks.
3.6 Analyze a scenario and select the appropriate type of mitigation.
3.7 Given a scenario, use tools and techniques to discover vulnerabilities.
3.8 Explain the proper use of penetration testing versus vulnerability scanning.

4.0 Application, Data and Host Security
4.1 Explain the importance of application security controls and techniques.
4.2 Summarize mobile security concepts and technologies.
4.3 Given a scenario, select appropriate solutions to establish host security.
4.4 Implement the appropriate controls to ensure data security.
4.5 Compare alternative methods to mitigate security risks in static environments.

5.0 Access Control and Identity Management
5.1 Compare the function and purpose of authentication services.
5.2 Select the appropriate authentication, authorization or access control.
5.3 Install and configure security controls when performing account management, based on best practices.

6.0 Cryptography
6.1 Given a scenario, utilize general cryptography concepts.
6.2 Given a scenario, use appropriate cryptographic methods.
6.3 Given a scenario, use appropriate PKI, certificate management and components.
4.0 CompTIA Security+ 401 Syllabus