Cybersecurity Foundations · CompTIA Security+

Cybersecurity Foundations

Security Knowledge
You Can Build On.

Learn how the pieces of cybersecurity fit together. Understand the controls, threats, systems, and people behind secure decisions, then bring that understanding into your Security+ preparation.

Try The Learning PreviewExplore The Full Curriculum

Course Access And All Access OptionsOnline · Self Paced · Connected Study Tools

Two colleagues discussing code on a large monitor.
CompTIA Security+ Certification
Learn With ContextUnderstand The Reason
Behind The Response.

From protecting an account to explaining a security risk, the foundations stay with you.

Three colleagues discussing a security topic beside a code display.
Learn. Connect. Apply.
28Complete Lessons
1,512Flashcards
1,344Practice Questions And Activities
120Days Of Individual Access

Cybersecurity Foundations gives you a structured place to begin and a useful place to return. Clear lessons establish the concepts. Flashcards keep important distinctions close. Practice helps you explain why one response fits a situation better than another.

01 A Foundation With Practical Value

Move Beyond Knowing A Term.
Know What To Do With It.

Security concepts become useful when you can connect them to a real need: protecting information, limiting access, keeping a service available, or responding to suspicious activity.

This course starts with the controls and principles that make those decisions easier to understand. You compare the roles of people, policy, technology, and physical safeguards. You examine how change affects an environment and how cryptography supports trust. Those foundations give later topics a place to fit, rather than asking you to remember each idea in isolation.

As you move through the course, the perspective widens. Threats connect to exposed systems. Architecture affects the choices available to operations teams. Monitoring supports investigations. Governance and risk help explain why a security action matters to the organization. The result is a broad learning path that supports exam preparation while keeping the work behind the exam in view.

What Makes The Learning Useful

Being able to explain the reason for a safeguard is more valuable than recognizing its name alone.

A team discussing work around a table with laptops.
Security Starts With Understanding.
One Situation. Several Connected Questions.

A Customer Portal Needs Stronger Protection.

A security decision rarely ends with a single tool. Use the course to connect the questions around it.

  1. Protect

    Who Should Have Access?

    Connect authentication, authorization, least privilege, and account management to the information being protected.

  2. Recognize

    What Would Unusual Activity Look Like?

    Relate threat patterns, monitoring, alerts, and evidence sources to the environment.

  3. Respond

    What Should Happen Next?

    Consider incident handling, recovery, communication, and the authority needed to act.

  4. Improve

    How Will The Organization Learn?

    Bring risk, documentation, control review, and awareness back into the process.

02 Your Course At A Glance

Five Areas.
One Connected Foundation.

The 28 lesson sequence follows the five Security+ areas. Each one adds a different perspective, from the purpose of a control to the way an organization manages its security program.

A professional at a workstation with computer monitors.01

General Security Concepts

Controls, change, security principles, and cryptography establish the language of the course.

4 Lessons · 12% Exam WeightExplore This Area
A team working at computer workstations.02

Threats, Vulnerabilities, And Mitigations

Understand how threats reach an environment, how exposure develops, and what reduces the risk.

5 Lessons · 22% Exam WeightExplore This Area
Two professionals reviewing a computer screen together.03

Security Architecture

Connect infrastructure, information protection, and resilience to the way systems are designed.

4 Lessons · 18% Exam WeightExplore This Area
A team discussing ideas around a shared table.04

Security Operations

Bring access, monitoring, automation, investigations, and incident response into daily security work.

9 Lessons · 28% Exam WeightExplore This Area
Two professionals comparing documents in an office.05

Security Program Management And Oversight

Relate the technical work to governance, risk, suppliers, compliance, assessment, and awareness.

6 Lessons · 20% Exam WeightExplore This Area

You can follow the sequence from the beginning, explore a familiar area, or use the full curriculum to find a topic that needs more review.

03 A Topic You Can Try Now

Learn It. Recall It.
Apply It.

Try the same security idea in three different ways. Start with the lesson explanation, turn over the flashcard, then choose an answer and read the reasoning. Explore the topic before deciding how you want to study.

CompTIA Security+
CERTIFY ACADEMY · LESSONCybersecurity FoundationsCompTIA Security+ Preparation
Lesson 1

Types of Security Controls

33Topics Inside

Module 1 builds the understanding needed to recognize how security controls operate in real environments and why they matter to daily security decisions. It explains the purpose of controls as safeguards that reduce risk, protect assets and support accountable outcomes. The chapter flow compares technical controls with managerial controls, operational controls and physical controls so each safeguard can be understood by its role in the environment. It also connects those categories to preventive through directive control types, including deterrent, detective, corrective and compensating controls.

Explore All 28 Lessons
You Will Explore
  • Explain how controls reduce risk and support accountable outcomes.
  • Compare control categories by implementation and ownership.
  • Distinguish control functions by their security purpose.
Why Three Ways?

Reading develops understanding. Recall shows what you can bring back without the explanation in front of you. Practice asks you to use the idea in a situation. Moving between the three makes your next review more focused.

04 Your Starting Point

Bring Your Experience.
Build From Where You Are.

You do not have to arrive with the same background as another learner. The broad course structure gives you several ways to make the material relevant to your next step.

Hover, focus, or tap a card to explore the learning approach.

A professional explaining a topic to colleagues.
Starting A Security Path

Make The Fundamentals Feel Familiar.

Build the vocabulary and connections that help you follow security conversations with more confidence.

Colleagues collaborating at a laptop.
Bringing IT Experience

Connect Familiar Systems To Security.

Put the networks, accounts, and services you already know into a broader security context.

A smiling professional in a modern workplace.
Preparing For A Credential

Give Your Review A Clear Structure.

Use a complete course sequence to organize your Security+ preparation and revisit weaker areas.

A Course You Can Return To

Learning Fits Better
When The Next Step Is Clear.

The course gives you more than a collection of pages. Use its structure to turn a broad subject into a series of study sessions you can follow, revisit, and adapt.

A professional seated at a desk in a bright office.
Make The Time Yours.
A Focused Session

Begin With One Topic.

Choose a lesson and follow the explanation far enough to understand the distinction being made. Write down the idea in your own words, then use a flashcard or a practice question to see what you can explain without the page.

A clear session goal makes the next return easier. You know where you stopped and what deserves another look.

A More Useful Second Pass

Bring A Question Back To The Lesson.

When an answer is unclear, return with a specific question. What does the control protect? Which detail changes the response? What evidence would help you decide?

The same lesson can become more useful on a second visit because you now know the part you want to understand better.

An instructor presenting a topic to colleagues.
Give The Difficult Topic Time.

05 The Complete Course Library

See The Depth
Before You Begin.

Explore all 28 lessons, their learning points, and the detailed sections inside. The detailed outline includes 112 sections, their chapter topics, and section quizzes. Search across titles and topics, or narrow the view to an area of the course.

28Lessons To ExploreComplete Outline Below
28 Of 28 Lessons
01

General Security Concepts

4 Lessons
01
Types Of Security Controls4 Sections · Lessons, Flashcards, And Practice

Distinguish managerial, operational, technical, and physical controls and explain the protective function each control performs.

What You Will Learn

  • Explain how controls reduce risk and support accountable outcomes.
  • Compare control categories by implementation and ownership.
  • Distinguish control functions by their security purpose.
  • Connect each safeguard to an asset and its risk.
  • Classify controls using scenario evidence rather than keywords.
Open LessonFlashcardsPractice
01Security Control Foundations
  1. Purpose of Security Controls
  2. Security Control Categories
  3. Technical Controls
  4. Managerial Controls
  5. Operational Controls
  6. Physical Controls
  7. How Controls Protect Assets
  8. Layering Controls Across the Environment
  9. Scenario-Based Quiz
02Managerial and Operational Controls
  1. Policies and Procedures
  2. Security Planning and Oversight
  3. Governance and Accountability
  4. Personnel-Focused Security Controls
  5. Day-to-Day Operational Processes
  6. Monitoring and Account Reviews
  7. Incident Response Procedures
  8. Applying Human-Driven Controls
  9. Scenario-Based Quiz
03Technical and Physical Controls
  1. Automated Security Enforcement
  2. Multi-Factor Authentication
  3. Firewalls and Access Technologies
  4. Encryption and Secure Data Handling
  5. System Hardening and Secure Configuration
  6. Facility and Asset Protection
  7. Locks, Cameras, Guards, and Barriers
  8. Matching Technical and Physical Controls to Risk
  9. Scenario-Based Quiz
04Security Control Types and Response Logic
  1. Preventive Controls
  2. Deterrent Controls
  3. Detective Controls
  4. Corrective Controls
  5. Compensating Controls
  6. Directive Controls
  7. Selecting Controls by Timing and Purpose
  8. Applying Controls in Real-World Scenarios
  9. Scenario-Based Quiz
02
Fundamental Security Concepts4 Sections · Lessons, Flashcards, And Practice

Apply confidentiality, integrity, availability, authentication, authorization, accounting, zero trust, and other foundational principles to security decisions.

What You Will Learn

  • Apply confidentiality and integrity alongside availability.
  • Distinguish authentication from authorization and accounting.
  • Recognize the roles of non-repudiation and privacy.
  • Apply least privilege with Zero Trust and defense in depth.
  • Select security concepts using scenario evidence.
Open LessonFlashcardsPractice
01Core Security Principles and Authentication
  1. Confidentiality, Integrity, and Availability
  2. Confidentiality and Data Protection
  3. Integrity and Data Trust
  4. Availability and Service Continuity
  5. Non-Repudiation
  6. Authenticating People
  7. Authenticating Systems
  8. Authentication Models
  9. Scenario-Based Quiz
02Access Control and Gap Analysis
  1. Attribute-Based Access Control
  2. Discretionary Access Control
  3. Access Decisions After Authentication
  4. Gap Analysis Purpose
  5. Establishing the Current Baseline
  6. Defining the Target State
  7. Conducting the Gap Analysis
  8. Prioritizing Security Improvements
  9. Scenario-Based Quiz
03Zero Trust and Policy-Driven Security
  1. Zero Trust Fundamentals
  2. Never Trust, Always Verify
  3. Least Privilege Access
  4. Microsegmentation
  5. Adaptive Identity
  6. Threat Scope Reduction
  7. Policy Engine
  8. Subject and System Access Requests
  9. Scenario-Based Quiz
04Physical Security and Deception Technologies
  1. Physical Security Foundations
  2. Bollards, Fencing, and Perimeter Barriers
  3. Access Control Vestibules
  4. Video Surveillance and Security Guards
  5. Physical Security Sensors
  6. Deception and Disruption Technology
  7. Honeypots and Honeynets
  8. Honeyfiles and Honeytokens
  9. Scenario-Based Quiz
03
Change Management Processes4 Sections · Lessons, Flashcards, And Practice

Connect approval, ownership, impact analysis, testing, documentation, rollback, and communication to secure organizational change.

What You Will Learn

  • Explain how formal change management reduces risk.
  • Identify change requests and approval requirements.
  • Connect testing and rollback planning to safer implementation.
  • Distinguish standard changes from normal and emergency changes.
  • Select the appropriate change action from scenario evidence.
Open LessonFlashcardsPractice
01Change Management Foundations
  1. Purpose of Change Management
  2. Business Processes
  3. Ownership and Accountability
  4. Impact Analysis
  5. Security Requirements for Change
  6. Test Results and Validation
  7. Change Approval and Documentation
  8. Change Management Risk Reduction
  9. Scenario-Based Quiz
02Change Planning and Implementation Controls
  1. Maintenance Windows
  2. Standard Operating Procedures
  3. Allow Lists
  4. Deny Lists
  5. Restricted Activities
  6. Downtime Planning
  7. Service Restart
  8. Application Restart
  9. Scenario-Based Quiz
03Technical Impacts and Environment Dependencies
  1. Legacy Applications
  2. Application and System Dependencies
  3. Network and System Diagrams
  4. Architecture Diagrams
  5. Data Flow Diagrams
  6. Security Control Dependencies
  7. Compatibility and Regression Risk
  8. Backout Planning
  9. Scenario-Based Quiz
04Documentation, Policy Updates, and Version Control
  1. Policies and Procedures
  2. Updating Policies and Procedures
  3. Regulatory and Compliance Updates
  4. Lessons Learned After Security Events
  5. Version Control Fundamentals
  6. Major, Minor, and Patch Versions
  7. Change Records and Audit Trails
  8. Continuous Improvement Through Controlled Change
  9. Scenario-Based Quiz
04
Cryptographic Solutions4 Sections · Lessons, Flashcards, And Practice

Compare hashing, encryption, PKI, certificates, key management, digital signatures, and cryptographic implementation choices.

What You Will Learn

  • Explain encryption for stored and transmitted data.
  • Distinguish hashing from reversible encryption.
  • Connect digital signatures to integrity and identity.
  • Explain how certificates and keys support trust.
  • Select cryptographic safeguards for the stated security goal.
Open LessonFlashcardsPractice
01Public Key Infrastructure and Encryption Foundations
  1. Public Key Infrastructure
  2. Public and Private Keys
  3. Key Escrow
  4. Encryption Purpose
  5. Full-Disk Encryption
  6. Partition Encryption
  7. Volume Encryption
  8. Database Encryption
  9. Scenario-Based Quiz
02Encryption Types, Algorithms, and Key Exchange
  1. Transport and Communication Encryption
  2. Asymmetric Encryption
  3. Asymmetric Encryption Characteristics
  4. Symmetric Encryption
  5. Symmetric Encryption Characteristics
  6. Key Exchange
  7. Diffie-Hellman Key Exchange
  8. Encryption Algorithms and Key Length
  9. Scenario-Based Quiz
03Cryptographic Tools and Data Protection Techniques
  1. Cryptographic Tools
  2. Trusted Platform Module
  3. Key Management System
  4. Hardware Security Module
  5. Obfuscation
  6. Steganography
  7. Tokenization
  8. Data Masking
  9. Scenario-Based Quiz
04Hashing, Digital Signatures, and Certificate Trust
  1. Hashing
  2. Salting
  3. Key Stretching
  4. Digital Signatures
  5. Open Public Ledger
  6. Certificates
  7. Certificate Authority
  8. Certificate Revocation and Certificate Types
  9. Scenario-Based Quiz
02

Threats, Vulnerabilities, And Mitigations

5 Lessons
05
Common Threat Actors And Motivations4 Sections · Lessons, Flashcards, And Practice

Analyze nation-states, cybercriminals, insiders, hacktivists, competitors, and other actors through skills, access, intent, and motivation.

What You Will Learn

  • Compare threat actors by motive and capability.
  • Distinguish state actors from criminal and insider threats.
  • Explain how motivation influences tactics and persistence.
  • Recognize financial and ideological motives in scenarios.
  • Use actor analysis to prioritize security controls.
Open LessonFlashcardsPractice
01Threat Actor Types and Profiles
  1. Threat Actor Overview
  2. Nation-State Actors
  3. Organized Crime
  4. Hacktivists
  5. Unskilled Attackers
  6. Insider Threats
  7. Internal Actors
  8. External Actors
  9. Scenario-Based Quiz
02Actor Access, Resources, and Capability
  1. Shadow IT
  2. Legitimate Access Abuse
  3. Unauthorized External Access
  4. Resources and Funding
  5. Well-Funded Actors
  6. Limited-Funding Actors
  7. Level of Sophistication and Capability
  8. High- and Low-Sophistication Actors
  9. Scenario-Based Quiz
03Data, Financial, and Disruption Motivations
  1. Understanding Threat Actor Motivations
  2. Data Exfiltration
  3. Financial Gain
  4. Blackmail
  5. Service Disruption
  6. Disruption and Chaos
  7. Revenge
  8. Motivation-to-Impact Mapping
  9. Scenario-Based Quiz
04Ideological, Espionage, and Strategic Motivations
  1. Espionage
  2. Philosophical and Political Beliefs
  3. Ethical Motivations
  4. War
  5. Cyber Sabotage
  6. Critical Infrastructure Targeting
  7. Predicting Actor Behavior
  8. Applying Threat Actor Analysis
  9. Scenario-Based Quiz
06
Common Threat Vectors And Attack Surfaces4 Sections · Lessons, Flashcards, And Practice

Trace phishing, social engineering, wireless, cloud, supply-chain, removable-media, and application attack paths.

What You Will Learn

  • Distinguish threat vectors from the attack surface.
  • Compare communication channels and external attack paths.
  • Connect behavior and configuration to reachable risk.
  • Identify the assets and identities each vector can affect.
  • Select controls for the most likely exposure path.
Open LessonFlashcardsPractice
01Communication and Content-Based Threat Vectors
  1. Messaging-Based Threat Overview
  2. Email
  3. Short Message Service (SMS)
  4. Instant Messaging
  5. Image-Based Attacks
  6. File-Based Attacks
  7. Voice Calls
  8. Removable Devices
  9. Scenario-Based Quiz
02Software and Network Attack Surfaces
  1. Client-Based Vulnerable Software
  2. Agentless Vulnerable Software
  3. Unsupported Systems and Applications
  4. Unsecured Wireless Networks
  5. Unsecured Wired Networks
  6. Unsecured Bluetooth Connections
  7. Open Service Ports
  8. Default Credentials
  9. Scenario-Based Quiz
03Third-Party and Supply Chain Attack Surfaces
  1. Managed Service Providers
  2. Vendors
  3. Suppliers
  4. Third-Party Solution Integration
  5. Service Provider Compromise
  6. Supplier Security Failures
  7. Supply Chain Attack Propagation
  8. Reducing Third-Party Attack Surfaces
  9. Scenario-Based Quiz
04Human Vectors and Social Engineering Attacks
  1. Human Vectors and Social Engineering
  2. Phishing
  3. Vishing
  4. Smishing
  5. Misinformation and Disinformation
  6. Impersonation and Business Email Compromise
  7. Pretexting and Watering Hole Attacks
  8. Brand Impersonation and Typosquatting
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Cryptographic Misconfiguration
  • Encryption and Key Management Weaknesses
  • Sideloading
  • Jailbreaking
  • Mobile Device Security Exposure
  • Zero-Day Vulnerabilities
  • Patch Availability and Defensive Timing
  • Prioritizing High-Risk Vulnerabilities
07
Various Types Of Vulnerabilities4 Sections · Lessons, Flashcards, And Practice

Examine application, operating system, hardware, virtualization, cloud, mobile, and configuration weaknesses.

What You Will Learn

  • Explain how weaknesses create opportunities for compromise.
  • Compare software flaws with configuration and credential weaknesses.
  • Connect insecure defaults and missing patches to risk.
  • Identify the assets and exposure affected by each weakness.
  • Prioritize vulnerabilities using scenario evidence.
Open LessonFlashcardsPractice
01Software and Application Vulnerabilities
  1. Software Vulnerability Foundations
  2. Memory Injection
  3. Buffer Overflow
  4. Race Conditions
  5. Time-of-Check and Time-of-Use
  6. Malicious Updates
  7. Structured Query Language Injection
  8. Cross-Site Scripting
  9. Scenario-Based Quiz
02Hardware, Firmware, and Legacy Vulnerabilities
  1. Hardware Vulnerability Foundations
  2. Firmware Vulnerabilities
  3. End-of-Life Hardware
  4. Legacy Systems
  5. Unsupported Software
  6. Missing Security Updates
  7. Hardware-Based Persistence
  8. Reducing Legacy System Risk
  9. Scenario-Based Quiz
03Virtualization, Cloud, and Supply Chain Vulnerabilities
  1. Virtualization Vulnerability Foundations
  2. Virtual Machine Escape
  3. Resource Reuse
  4. Cloud-Specific Security Weaknesses
  5. Supply Chain Security
  6. Service Provider Risk
  7. Hardware Provider Risk
  8. Software Provider Risk
  9. Scenario-Based Quiz
04Cryptographic, Mobile, and Zero-Day Vulnerabilities
  1. Cryptographic Misconfiguration
  2. Encryption and Key Management Weaknesses
  3. Sideloading
  4. Jailbreaking
  5. Mobile Device Security Exposure
  6. Zero-Day Vulnerabilities
  7. Patch Availability and Defensive Timing
  8. Prioritizing High-Risk Vulnerabilities
  9. Scenario-Based Quiz
08
Indicators Of Malicious Activity4 Sections · Lessons, Flashcards, And Practice

Connect anomalous account behavior, network signals, host changes, and unusual data movement to potential compromise.

What You Will Learn

  • Explain how indicators support detection and investigation.
  • Recognize suspicious activity across hosts and networks.
  • Distinguish malware symptoms from credential and service abuse.
  • Connect indicators with relevant evidence sources.
  • Prioritize the next investigative step from available evidence.
Open LessonFlashcardsPractice
01Malware and Host-Based Indicators
  1. Indicators of Malicious Activity
  2. Malware
  3. Trojan
  4. Worm
  5. Virus
  6. Logic Bomb
  7. Rootkit
  8. Bloatware
  9. Scenario-Based Quiz
02Network and Wireless Attack Indicators
  1. Physical Attacks and Brute Force
  2. RFID Cloning
  3. Distributed Denial-of-Service
  4. Reflected Attacks
  5. Domain Name System Attacks
  6. DNS Spoofing
  7. Evil Twin
  8. Wi-Fi Spoofing
  9. Scenario-Based Quiz
03Code, Session, and Protocol Attack Indicators
  1. On-Path Attacks
  2. Malicious Code
  3. Buffer Overflow
  4. Replay Attack
  5. Forgery
  6. Downgrade Attacks
  7. Collision Attacks
  8. Password Spraying
  9. Scenario-Based Quiz
04Behavioral, Log, and Threat Intelligence Indicators
  1. Account Lockout
  2. Concurrent Session Usage
  3. Blocked Content
  4. Impossible Travel
  5. Resource Consumption
  6. Resource Inaccessibility
  7. Out-of-Cycle Logging
  8. Published Indicators and Missing Logs
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Indicator Review
  • Evidence Correlation
  • False Positive Review
  • Host Evidence
  • Network Evidence
  • Account Evidence
  • Containment Decision
  • Escalation and Documentation
09
Mitigation Techniques to Secure The Enterprise4 Sections · Lessons, Flashcards, And Practice

Select segmentation, hardening, least privilege, patching, isolation, monitoring, and other risk-appropriate mitigations.

What You Will Learn

  • Explain how mitigation reduces exposure and impact.
  • Compare mitigation techniques by their protective purpose.
  • Select compensating safeguards when the preferred fix is unavailable.
  • Connect mitigation to the affected asset and weakness.
  • Choose practical actions using scenario evidence.
Open LessonFlashcardsPractice
01Network Segmentation and Access Control
  1. Segmentation
  2. Segmenting Systems by Business Function
  3. Access Control
  4. Access Control Lists
  5. Permissions
  6. Least Privilege
  7. Policy-Based Access Decisions
  8. Reducing Unauthorized Access
  9. Scenario-Based Quiz
02Application Control and Enterprise Maintenance
  1. Application Allow List
  2. Isolation
  3. Patching
  4. Patch Prioritization
  5. Configuration Enforcement
  6. Standardized Security Settings
  7. Decommissioning
  8. Reducing Enterprise Attack Surface
  9. Scenario-Based Quiz
03Encryption, Monitoring, and Defensive Visibility
  1. Encryption
  2. Data at Rest Protection
  3. Data in Transit Protection
  4. Monitoring
  5. Detecting Unusual Activity
  6. Identifying Security Incidents
  7. Monitoring for Threat Impact
  8. Applying Defensive Visibility Across the Enterprise
  9. Scenario-Based Quiz
04Endpoint Protection and System Hardening
  1. System Hardening
  2. Installation of Endpoint Protection
  3. Host-Based Firewall
  4. Host-Based Intrusion Prevention System
  5. Disabling Ports and Protocols
  6. Default Password Changes
  7. Removal of Unnecessary Software
  8. Hardening Hosts Against Attack
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Secure Hardening
  • Service Reduction
  • Baseline Configuration
  • Firewall Rule Review
  • Application Control
  • Admin Interface Protection
  • Backup Protection
  • Cloud Security Groups
  • Patch Management
  • Vulnerability Prioritization
  • Logging
  • Alert Tuning
  • Compensating Safeguards
  • Change Control
  • Verification
  • Risk-Based Selection
  • Asset Criticality
  • Threat Matching
  • Business Impact
  • Control Layering
  • Exception Management
  • Residual Risk
  • Scenario Application
03

Security Architecture

4 Lessons
10
Security Implications Of Different Architecture Models4 Sections · Lessons, Flashcards, And Practice

Evaluate cloud, virtualization, containers, serverless, IoT, industrial, embedded, and hybrid architecture considerations.

What You Will Learn

  • Explain how architecture changes security responsibility.
  • Compare architecture models by risk and ownership.
  • Connect architecture to identity and data protection.
  • Identify shared responsibility and trust boundaries.
  • Select controls that fit the operational environment.
Open LessonFlashcardsPractice
01Architecture and Cloud Deployment Models
  1. Architecture and Infrastructure Concepts
  2. Cloud Architecture
  3. Shared Responsibility Model
  4. Responsibility Matrix
  5. Hybrid Considerations
  6. Cloud Service Dependencies
  7. Cloud-Based Security Tradeoffs
  8. Architecture Risk Evaluation
  9. Scenario-Based Quiz
02Modern Infrastructure and Application Architecture
  1. Infrastructure as Code
  2. IaC Security Risks
  3. Serverless Architecture
  4. Serverless Security Responsibilities
  5. Microservices Architecture
  6. Microservice APIs and Access Control
  7. Modular Service Dependencies
  8. Securing Modern Application Architecture
  9. Scenario-Based Quiz
03Network and Enterprise Architecture Models
  1. Network Infrastructure
  2. Logical Segmentation
  3. Segmentation and Lateral Movement Control
  4. Software-Defined Networking
  5. SDN Control Plane Considerations
  6. On-Premises Architecture
  7. Centralized Architecture
  8. Decentralized Architecture
  9. Scenario-Based Quiz
04Virtualization, IoT, and Operational Technology Architecture
  1. Virtualization
  2. Virtual Machine Escape Risk
  3. Internet of Things
  4. IoT Processing and Security Limitations
  5. Industrial Control Systems and SCADA
  6. ICS/SCADA Availability and Safety
  7. Real-Time Operating Systems
  8. Security Implications of Time-Sensitive Systems
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Infrastructure as Code Security Risks
11
Security Principles to Secure Enterprise Infrastructure4 Sections · Lessons, Flashcards, And Practice

Use secure design principles, network zones, segmentation, protocols, infrastructure controls, and resilience patterns.

What You Will Learn

  • Explain how security principles guide infrastructure decisions.
  • Apply least privilege and layered protection.
  • Connect secure design with identity and administration.
  • Recognize designs that enable exposure or lateral movement.
  • Reduce risk while supporting business operations.
Open LessonFlashcardsPractice
01Infrastructure Placement and Security Architecture
  1. Device Placement
  2. Security Zones
  3. Attack Surface
  4. Connectivity
  5. Failure Modes
  6. Device Attributes
  7. Inline Security Devices
  8. Tap and Monitor Deployments
  9. Scenario-Based Quiz
02Access Gateways and Network Security Devices
  1. Jump Server
  2. Proxy Server
  3. Intrusion Prevention System
  4. Intrusion Detection System
  5. Load Balancer
  6. Network-Based Sensors
  7. Host-Based Sensors
  8. Securing Traffic Through Infrastructure Devices
  9. Scenario-Based Quiz
03Network Access Control and Firewall Technologies
  1. 802.1X
  2. Extensible Authentication Protocol
  3. Firewall Types
  4. Stateful Firewalls
  5. Web Application Firewall
  6. Next-Generation Firewalls
  7. Layer 4 Firewalls
  8. Layer 7 Firewalls
  9. Scenario-Based Quiz
04Secure Communication and Control Selection
  1. Secure Communication and Access
  2. Remote Access
  3. Tunneling
  4. Internet Protocol Security
  5. Software-Defined Wide Area Network
  6. Selecting Effective Controls
  7. Matching Controls to Enterprise Risk
  8. Applying Infrastructure Security Principles
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Sensitive Data
  • Confidential Data
  • Public Data
  • Restricted Data
  • Private Data
  • Critical Data
  • Comparing Classification Labels
12
Concepts And Strategies to Protect Data4 Sections · Lessons, Flashcards, And Practice

Classify data and select encryption, DLP, retention, masking, tokenization, sovereignty, and lifecycle safeguards.

What You Will Learn

  • Use data states and classification to guide protection.
  • Compare safeguards by their data protection purpose.
  • Connect data protection to security and privacy needs.
  • Identify data ownership and exposure in scenarios.
  • Match safeguards to the data type and business risk.
Open LessonFlashcardsPractice
01Data Types and Regulatory Context
  1. Concepts and Strategies to Protect Data
  2. Data Types and Risk
  3. Regulated Data
  4. Personally Identifiable Information
  5. Protected Health Information
  6. Trade Secrets
  7. Intellectual Property
  8. Legal and Financial Information
  9. Scenario-Based Quiz
02Data Readability and Classification Foundations
  1. Human-Readable Data
  2. Non-Human-Readable Data
  3. Data Classification Purpose
  4. Classification Levels
  5. Data Sensitivity and Handling Requirements
  6. Access Controls by Classification
  7. Encryption and Monitoring Requirements
  8. Applying Classification to Data Protection
  9. Scenario-Based Quiz
03Data Classification Levels
  1. Sensitive Data
  2. Confidential Data
  3. Public Data
  4. Restricted Data
  5. Private Data
  6. Critical Data
  7. Comparing Classification Labels
  8. Prioritizing Critical and Regulated Data
  9. Scenario-Based Quiz
04Protection Strategy and Data Handling Controls
  1. Aligning Protection to Data Type
  2. Protecting Regulated Data
  3. Securing Sensitive and Confidential Data
  4. Restricting Private and Restricted Data
  5. Protecting Critical Business Data
  6. Preventing Unauthorized Disclosure
  7. Monitoring Data Access and Sharing
  8. Applying Data Protection Strategies
  9. Scenario-Based Quiz
13
Resilience And Recovery In Security Architecture4 Sections · Lessons, Flashcards, And Practice

Plan redundancy, backups, high availability, recovery sites, continuity, restoration, and recovery testing.

What You Will Learn

  • Distinguish resilience from recovery.
  • Compare backups with redundancy and continuity planning.
  • Connect recovery targets to business priorities and dependencies.
  • Recognize designs that maintain service during disruption.
  • Match recovery strategies to operational requirements.
Open LessonFlashcardsPractice
01Availability and Redundancy Foundations
  1. Resilience and Recovery Architecture
  2. High Availability
  3. Redundancy
  4. Failover
  5. Load Balancing
  6. Workload Distribution
  7. Clustering
  8. Reducing Single Points of Failure
  9. Scenario-Based Quiz
02Recovery Site Strategies
  1. Disaster Recovery Site Planning
  2. Hot Site
  3. Hot Site Replication
  4. Cold Site
  5. Cold Site Activation
  6. Warm Site
  7. Warm Site Tradeoffs
  8. Selecting Recovery Site Options
  9. Scenario-Based Quiz
03Geographic and Platform Resilience
  1. Geographic Dispersion
  2. Regional Disaster Risk Reduction
  3. Platform Diversity
  4. Hardware and Software Diversity
  5. Multi-Cloud Systems
  6. Cloud Provider Dependency Reduction
  7. Replication Across Environments
  8. Architecture Diversity for Fault Tolerance
  9. Scenario-Based Quiz
04Continuity of Operations and Recovery Planning
  1. Continuity of Operations Planning
  2. Critical Function Identification
  3. Personnel and Process Continuity
  4. Communication During Disruption
  5. Resource and Dependency Planning
  6. Recovery Activation Decisions
  7. Maintaining Operations During a Disaster
  8. Applying Resilience and Recovery Controls
  9. Scenario-Based Quiz
04

Security Operations

9 Lessons
14
Common Security Techniques to Computing Resources4 Sections · Lessons, Flashcards, And Practice

Secure endpoints, servers, mobile devices, wireless, applications, and specialized systems through baseline controls.

What You Will Learn

  • Match security techniques to the computing resource.
  • Compare hardening with maintenance and protection controls.
  • Apply safeguards across endpoints and hosted workloads.
  • Recognize unnecessary exposure from configuration gaps.
  • Select techniques that meet operational requirements.
Open LessonFlashcardsPractice
01Secure Baselines
  1. Purpose of Secure Baselines
  2. Standard Configuration Requirements
  3. Establishing Baselines
  4. Minimum Security Controls
  5. Deploying Baselines
  6. Automated Baseline Deployment
  7. Maintaining Baselines
  8. Detecting Configuration Drift
  9. Scenario-Based Quiz
02Device Hardening Foundations
  1. Device Hardening Purpose
  2. Reducing the Attack Surface
  3. Disabling Unnecessary Services and Ports
  4. Removing Unnecessary Software
  5. Least Privilege for User Accounts
  6. Strong Authentication Requirements
  7. Endpoint Security Tools
  8. Patching and Security Updates
  9. Scenario-Based Quiz
03Endpoint and Mobile Resource Security
  1. Mobile Device Security
  2. Encryption for Data at Rest and Transit
  3. Strong Mobile Authentication
  4. Trusted Application Sources
  5. Mobile Operating System and App Updates
  6. Workstation Security
  7. Antivirus and Anti-Malware Software
  8. Full-Disk Encryption for Workstations
  9. Scenario-Based Quiz
04Network Device Hardening
  1. Switch Security
  2. Changing Default Passwords
  3. VLAN Segmentation
  4. Port Security
  5. Router Security
  6. Firmware Updates
  7. Disabling Unused Interfaces
  8. Secure Administrative Access and Firewall Rules
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Virtualization Security
  • Container Security
  • Cloud Workload Configuration
  • Application Allow Lists
  • Secure Deployment
  • Image and Template Control
  • Management Plane Protection
  • Workload Drift Detection
  • Endpoint Technique Selection
  • Server Technique Selection
  • Mobile Device Controls
  • Embedded System Controls
  • Network Device Techniques
  • SaaS and Cloud Resources
  • Legacy System Constraints
  • Matching Technique to Resource
15
Security Implications Of Hardware Software And Data Asset Management4 Sections · Lessons, Flashcards, And Practice

Track assets from acquisition through disposal using inventory, classification, ownership, licensing, and secure handling.

What You Will Learn

  • Explain how inventory supports visibility and accountability.
  • Compare hardware management with software and data management.
  • Connect inaccurate records to security and response problems.
  • Recognize asset lifecycle events in scenarios.
  • Select actions that improve evidence and asset control.
Open LessonFlashcardsPractice
01Asset Acquisition and Accountability
  1. Asset Management Foundations
  2. Acquisition and Procurement Process
  3. Vendor and Product Evaluation
  4. Hardware, Software, and Data Intake
  5. Assignment of Assets
  6. Accounting for Asset Details
  7. Purchase Dates, Costs, and Documentation
  8. Security Implications of Asset Accountability
  9. Scenario-Based Quiz
02Ownership and Classification
  1. Asset Ownership
  2. Owner Responsibilities
  3. Lifecycle Accountability
  4. Classification Purpose
  5. Classifying Hardware Assets
  6. Classifying Software Assets
  7. Classifying Data Assets
  8. Applying Protection Based on Sensitivity
  9. Scenario-Based Quiz
03Monitoring, Tracking, and Inventory
  1. Monitoring and Asset Tracking
  2. Continuous Asset Visibility
  3. Detecting Unauthorized Access
  4. Identifying Abnormal Asset Behavior
  5. Inventory Management
  6. Hardware Inventory
  7. Software Inventory
  8. Tracking Assets Connected to the Network
  9. Scenario-Based Quiz
04Enumeration, Disposal, and Decommissioning
  1. Enumeration
  2. Identifying Assets by Category
  3. Quantifying Assets Across the Network
  4. Vulnerability and Risk Assessment Support
  5. Disposal Planning
  6. Secure Data Removal
  7. Decommissioning Hardware and Software
  8. Reducing Data Leakage After Retirement
  9. Scenario-Based Quiz
16
Vulnerability Management Activities4 Sections · Lessons, Flashcards, And Practice

Prioritize scanning, validation, remediation, exceptions, retesting, reporting, and risk-based vulnerability work.

What You Will Learn

  • Explain continuous vulnerability management.
  • Distinguish discovery from remediation and verification.
  • Prioritize findings using exposure and business impact.
  • Recognize when validation or risk acceptance is needed.
  • Select the next appropriate vulnerability management action.
Open LessonFlashcardsPractice
01Vulnerability Scanning and Discovery
  1. Vulnerability Management Activity Foundations
  2. Vulnerability Scan Purpose
  3. Systematic Security Weakness Review
  4. Known Vulnerability Identification
  5. Potential Vulnerability Discovery
  6. Insecure Software Configurations
  7. Outdated Software Versions
  8. Security Patch Assessment
  9. Scenario-Based Quiz
02Static and Dynamic Analysis
  1. Code Analysis Foundations
  2. Static Analysis
  3. Static Application Security Testing
  4. Source Code Vulnerability Review
  5. Secure Coding Standard Validation
  6. Dynamic Analysis
  7. Dynamic Application Security Testing
  8. Runtime Behavior and Exploitation Testing
  9. Scenario-Based Quiz
03Package Monitoring and Software Component Risk
  1. Package Monitoring Purpose
  2. Software Library Tracking
  3. Application Package Inventory
  4. Outdated Package Identification
  5. Known Component Vulnerabilities
  6. Software Dependency Risk
  7. Package Maintenance Status
  8. Reducing Third-Party Component Exposure
  9. Scenario-Based Quiz
04Threat Feeds and Remediation Prioritization
  1. Threat Feed Purpose
  2. Real-Time Threat Information
  3. Cyber Threat Source Monitoring
  4. Emerging Vulnerability Awareness
  5. Linking Threat Feeds to Vulnerability Scanners
  6. Prioritizing Active Threats
  7. Remediation Decision Support
  8. Applying Intelligence to Vulnerability Management
  9. Scenario-Based Quiz
17
Security Alerting And Monitoring Concepts4 Sections · Lessons, Flashcards, And Practice

Interpret logs, alerts, baselines, telemetry, SIEM correlation, tuning, and escalation requirements.

What You Will Learn

  • Explain how monitoring supports detection and response.
  • Distinguish correlation from triage and escalation.
  • Connect alert quality with context and useful action.
  • Recognize false positives and missing visibility.
  • Select monitoring actions that support investigation.
Open LessonFlashcardsPractice
01Monitoring Computing Resources
  1. Security Alerting and Monitoring Foundations
  2. Monitoring Computing Resources
  3. Detecting Threats Before Harm Occurs
  4. Monitoring System Behavior
  5. Monitoring Applications and Programs
  6. Monitoring Networks and Infrastructure
  7. Identifying Performance and Security Issues
  8. Reducing Attack Impact Through Monitoring
  9. Scenario-Based Quiz
02System Monitoring
  1. System Monitoring Purpose
  2. Servers and Workstations
  3. Network Devices
  4. Suspicious Activity Detection
  5. Unauthorized Change Detection
  6. Firewall and Antivirus Status
  7. Resource Usage and Service Uptime
  8. Authentication Failures and Unauthorized Access
  9. Scenario-Based Quiz
03Application Monitoring
  1. Application Monitoring Purpose
  2. Software Behavior Monitoring
  3. Unexpected Data Access
  4. Unusual Transaction Activity
  5. Login Attempts and API Calls
  6. Database Query Monitoring
  7. Sensitive Data and Customer-Facing Services
  8. Runtime Errors and Application Anomalies
  9. Scenario-Based Quiz
04Infrastructure Monitoring
  1. Infrastructure Monitoring Purpose
  2. Routers and Switches
  3. Virtual Machines and Storage
  4. Network Traffic Monitoring
  5. Bandwidth and Latency Issues
  6. Hardware Failure Detection
  7. Unusual Routing and Access Paths
  8. Infrastructure Anomalies and Attack Detection
  9. Scenario-Based Quiz
18
Enterprise Capabilities to Enhance Security4 Sections · Lessons, Flashcards, And Practice

Compare firewalls, IDS and IPS, EDR, DLP, NAC, email security, DNS filtering, deception, and other defensive capabilities.

What You Will Learn

  • Explain how firewall and access control capabilities protect enterprise networks.
  • Interpret allow and deny rules using traffic criteria.
  • Distinguish firewall rules from router and firewall access control lists.
  • Match common services to their ports and protocols.
  • Limit unnecessary traffic while preserving approved business services.
Open LessonFlashcardsPractice
01Firewall Foundations and Traffic Filtering
  1. Enterprise Security Capability Foundations
  2. Firewall Purpose
  3. Traffic Monitoring
  4. Incoming and Outgoing Traffic Filtering
  5. Security Policy Enforcement
  6. Firewall Placement Between Private Networks and the Internet
  7. Packet Inspection Basics
  8. Allow and Block Decisions
  9. Scenario-Based Quiz
02Firewall Rules and Policy Enforcement
  1. Firewall Rule Purpose
  2. Allow Rules
  3. Deny Rules
  4. Source IP Criteria
  5. Destination IP Criteria
  6. Port-Based Rules
  7. Rule Processing Order
  8. Default Deny Logic
  9. Scenario-Based Quiz
03Access Lists and Network Access Control
  1. Access Control List Purpose
  2. Router and Firewall ACL Use
  3. Network and Subnetwork Access Control
  4. Allowed and Denied Access Entries
  5. IP Address Filtering
  6. Port Number Filtering
  7. Protocol-Based Filtering
  8. Using ACLs to Limit Access
  9. Scenario-Based Quiz
04Ports, Protocols, and Service Control
  1. Ports and Protocols
  2. Ports as Data Connection Points
  3. Protocols as Communication Rules
  4. HTTP on Port 80
  5. HTTPS on Port 443
  6. Common Service Port Mapping
  7. Enabling Only Necessary Ports and Services
  8. Controlling Traffic Flow Across the Enterprise
  9. Scenario-Based Quiz
19
Identity And Access Management4 Sections · Lessons, Flashcards, And Practice

Apply identity proofing, provisioning, authentication, authorization, federation, access models, and account lifecycle controls.

What You Will Learn

  • Explain identity management for systems and data.
  • Distinguish identification from authentication and authorization.
  • Connect access design with least privilege.
  • Recognize account provisioning and removal needs.
  • Select controls for the access risk in a scenario.
Open LessonFlashcardsPractice
01Identity and Access Management Foundations
  1. Identity and Access Management Purpose
  2. User Identity in Enterprise Systems
  3. Access Management Responsibilities
  4. Authentication and Access Decisions
  5. People, Systems, and Resource Access
  6. Security Risks from Poor IAM
  7. Access Control Across Business Roles
  8. Applying IAM to Enterprise Security
  9. Scenario-Based Quiz
02Provisioning and De-Provisioning User Accounts
  1. User Account Provisioning
  2. Creating Access for New Users
  3. Assigning Initial Resource Access
  4. Role Changes and Access Updates
  5. User Account De-Provisioning
  6. Removing Access After Departure
  7. Preventing Orphaned Accounts
  8. Maintaining Security Through Account Lifecycle Control
  9. Scenario-Based Quiz
03Permission Assignments and Access Implications
  1. Permission Assignment Purpose
  2. Read, Write, and Delete Permissions
  3. Resource-Level Access Control
  4. Permission Alignment to Job Roles
  5. Least Privilege Access
  6. Excessive Permissions and Privilege Creep
  7. Permission Review and Auditing
  8. Security Implications of Incorrect Permissions
  9. Scenario-Based Quiz
04IAM Governance and Continuous Access Control
  1. Identity Lifecycle Governance
  2. Access Request Review
  3. Approval Workflows
  4. Access Recertification
  5. Monitoring Account Activity
  6. Detecting Unauthorized Access
  7. Correcting Access Misconfigurations
  8. Applying IAM Controls in Real-World Scenarios
  9. Scenario-Based Quiz
20
Automation And Orchestration In Secure Operations4 Sections · Lessons, Flashcards, And Practice

Use scripting, automation, orchestration, SOAR, infrastructure as code, and safe automated response.

What You Will Learn

  • Explain automation and orchestration in secure operations.
  • Distinguish automated tasks from coordinated workflows.
  • Connect automation with consistency and response quality.
  • Recognize when testing and human approval are required.
  • Select workflows for the operational scenario.
Open LessonFlashcardsPractice
01Automation and Scripting Foundations
  1. Automation and Orchestration in Secure Operations
  2. Use Cases of Automation and Scripting
  3. Repetitive Security Task Automation
  4. Reducing Human Error
  5. Workflow Consistency
  6. Automated Threat Detection Support
  7. Automated Response Support
  8. Applying Automation to Security Operations
  9. Scenario-Based Quiz
02Provisioning, Access, and Workflow Automation
  1. User Provisioning
  2. Resource Provisioning
  3. Security Group Management
  4. Ticket Creation
  5. Escalation
  6. Enabling and Disabling Services
  7. Enabling and Disabling Access
  8. Automating Policy-Based Operational Workflows
  9. Scenario-Based Quiz
03Integration, Baselines, and Infrastructure Automation
  1. Continuous Integration and Testing
  2. Security Testing in CI/CD Pipelines
  3. Integrations and APIs
  4. Security Tool Interoperability
  5. Enforcing Baselines
  6. Standard Infrastructure Configurations
  7. Configuration Drift Reduction
  8. Automating Secure Deployment Practices
  9. Scenario-Based Quiz
04Automation Benefits, Risks, and Supportability
  1. Employee Retention
  2. Reaction Time
  3. Complexity
  4. Documentation and Change Control
  5. Single Point of Failure
  6. Technical Debt
  7. Ongoing Supportability
  8. Balancing Automation Value and Risk
  9. Scenario-Based Quiz
21
Appropriate Incident Response Activities4 Sections · Lessons, Flashcards, And Practice

Follow preparation, detection, analysis, containment, eradication, recovery, lessons learned, and communication.

What You Will Learn

  • Explain the purpose of structured incident response.
  • Distinguish preparation from active response and recovery.
  • Connect response actions with evidence and business impact.
  • Recognize the correct containment or recovery step.
  • Select actions that fit the incident stage.
Open LessonFlashcardsPractice
01Incident Response Lifecycle
  1. Incident Response Process
  2. Preparation
  3. Detection
  4. Analysis
  5. Containment
  6. Eradication
  7. Recovery
  8. Lessons Learned
  9. Scenario-Based Quiz
02Readiness, Training, and Response Exercises
  1. Incident Response Training
  2. Response Roles and Responsibilities
  3. Communication Plans
  4. Tabletop Exercises
  5. Simulation Exercises
  6. Response Plan Validation
  7. Root Cause Analysis
  8. Continuous Incident Response Improvement
  9. Scenario-Based Quiz
03Threat Hunting and Digital Forensics
  1. Threat Hunting
  2. Proactive Threat Identification
  3. Digital Forensics
  4. Evidence Identification
  5. Evidence Collection
  6. Evidence Processing
  7. Evidence Analysis
  8. Investigation Support
  9. Scenario-Based Quiz
04Legal, Evidence, and Reporting Activities
  1. Legal Hold
  2. Chain of Custody
  3. Acquisition
  4. Preservation
  5. Reporting
  6. Internal Review
  7. Regulatory and Legal Evidence
  8. E-Discovery
  9. Scenario-Based Quiz
22
Data Sources to Support an Investigation4 Sections · Lessons, Flashcards, And Practice

Select logs, packet captures, endpoint artifacts, cloud records, metadata, and intelligence that support investigations.

What You Will Learn

  • Explain how data sources support investigations.
  • Compare host and network evidence with application records.
  • Select sources for specific investigative questions.
  • Assess evidence timing and reliability.
  • Choose data that supports the stated investigation need.
Open LessonFlashcardsPractice
01Log Sources and Investigation Foundations
  1. Data Sources for Investigations
  2. Log Purpose
  3. Event Reconstruction
  4. Firewall Logs
  5. Allowed and Denied Traffic
  6. Source and Destination Details
  7. Ports, IP Addresses, and Timestamps
  8. Suspicious Firewall Activity
  9. Scenario-Based Quiz
02Host and Application Investigation Sources
  1. Application Logs
  2. User Logins and Transactions
  3. Application Configuration Changes
  4. Abnormal Application Behavior
  5. Endpoint Logs
  6. Device-Level Security Events
  7. System Changes and User Activity
  8. Malware and Intrusion Indicators on Endpoints
  9. Scenario-Based Quiz
03Operating System, IDS, and Network Evidence
  1. OS-Specific Security Logs
  2. User Account Activity
  3. System Errors and Policy Changes
  4. Service and Resource Access Events
  5. IPS and IDS Logs
  6. Signature and Anomaly Alerts
  7. Network Logs
  8. Traffic Direction and Flow Analysis
  9. Scenario-Based Quiz
04Supporting Evidence and Investigation Analysis Tools
  1. Metadata
  2. Email Metadata and Communication Context
  3. Vulnerability Scan Results
  4. Known Weaknesses and Entry Points
  5. Automated Reports
  6. Security Dashboards
  7. Packet Captures
  8. Confirming Malicious Traffic and Data Exfiltration
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Operational Log Purpose
  • Event Reconstruction Process
  • Firewall Log Evidence
  • Allowed and Denied Traffic Decisions
  • Suspicious Firewall Activity Analysis
  • Scenario-Based Knowledge Check
  • Application Log Evidence
  • Endpoint Log Evidence
  • User Account Activity Logs
  • Network Log Evidence
  • Metadata Evidence Context
  • Automated Report Evidence
  • Security Dashboard Interpretation
  • Packet Capture Analysis
05

Security Program Management And Oversight

6 Lessons
23
Elements Of Effective Security Governance4 Sections · Lessons, Flashcards, And Practice

Connect policies, standards, procedures, roles, frameworks, oversight, and accountability to business objectives.

What You Will Learn

  • Explain how governance directs security decisions.
  • Distinguish policies from standards and procedures.
  • Connect governance with accountability and business priorities.
  • Recognize gaps in authority or oversight.
  • Select governance measures for the scenario.
Open LessonFlashcardsPractice
01Governance Foundations, Guidelines, and Policies
  1. Security Governance Purpose
  2. Guidelines in Security Governance
  3. Flexible Guidance and Decision Support
  4. Policies in Security Governance
  5. Policy Expectations and Requirements
  6. Aligning Policies with Business Goals
  7. Policy Enforcement and Review
  8. Applying Governance Documents
  9. Scenario-Based Quiz
02Acceptable Use and Information Security Policies
  1. Acceptable Use Policy Purpose
  2. Approved Use of IT Resources
  3. Email, Internet, and Software Use
  4. User Behavior and Safe Computing
  5. Information Security Policy Purpose
  6. Data Protection Requirements
  7. Network Security and User Access
  8. Keeping Security Policies Current
  9. Scenario-Based Quiz
03Continuity, Disaster Recovery, and Incident Response
  1. Business Continuity Purpose
  2. Maintaining Essential Functions
  3. Risk Assessments and Critical System Identification
  4. Disaster Recovery Purpose
  5. Recovery Objectives, Backups, and Testing
  6. Incident Response Policy Purpose
  7. Detection, Containment, Eradication, and Recovery
  8. Lessons Learned and Response Improvement
  9. Scenario-Based Quiz
04Secure Development and Change Management Governance
  1. Software Development Lifecycle Governance
  2. Secure Application Requirements
  3. Secure Development Process Controls
  4. Security Testing Before Release
  5. Change Management Purpose
  6. Requesting, Approving, and Testing Changes
  7. Documentation and Version Control
  8. Preventing Outages, Security Gaps, and Conflicts
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Risk Analysis Purpose
  • Turning Risk Data Into Actionable Insight
  • Qualitative Analysis
  • Qualitative Ratings and Risk Matrices
  • Quantitative Analysis
  • Numerical Risk Values
  • Comparing Qualitative and Quantitative Methods
  • Applying Analysis to Risk Prioritization
  • Social Engineering Awareness
  • Social Engineering Examples and Response
  • Initial Reporting and Monitoring
  • Recurring Reporting and Monitoring
  • Security Awareness Program Development
  • Training Alignment to Risk Profile
  • Security Awareness Execution
  • Continuous Improvement Through Feedback and Metrics
24
Elements Of The Risk Management Process4 Sections · Lessons, Flashcards, And Practice

Perform risk identification, analysis, treatment, acceptance, monitoring, reporting, and register maintenance.

What You Will Learn

  • Explain risk-based security decisions.
  • Distinguish risk analysis from treatment decisions.
  • Connect likelihood and impact with control effectiveness.
  • Recognize the current risk management stage.
  • Select responses that fit the business context.
Open LessonFlashcardsPractice
01Risk Identification Foundations
  1. Elements of the Risk Management Process
  2. Risk Identification Purpose
  3. Valuable Asset Identification
  4. Data, Hardware, Software, and Infrastructure
  5. Vulnerability Identification
  6. Threat Identification
  7. Employee Training and Human Factors
  8. Building the Risk Identification Baseline
  9. Scenario-Based Quiz
02Risk Assessment Approaches
  1. Risk Assessment Purpose
  2. Impact and Likelihood Evaluation
  3. Prioritizing Risks by Impact
  4. Ad Hoc Assessments
  5. Recurring Assessments
  6. One-Time Assessments
  7. Continuous Monitoring and Assessment
  8. Selecting the Appropriate Assessment Type
  9. Scenario-Based Quiz
03Risk Analysis Methods
  1. Risk Analysis Purpose
  2. Turning Risk Data Into Actionable Insight
  3. Qualitative Analysis
  4. Qualitative Ratings and Risk Matrices
  5. Quantitative Analysis
  6. Numerical Risk Values
  7. Comparing Qualitative and Quantitative Methods
  8. Applying Analysis to Risk Prioritization
  9. Scenario-Based Quiz
04Quantitative Risk Calculations and Decision Support
  1. Single Loss Expectancy
  2. Asset Value
  3. Exposure Factor
  4. Calculating Single Loss Expectancy
  5. Estimating Monetary Loss From Events
  6. Cost, Probability, and Financial Risk
  7. Using Calculations to Support Security Investment
  8. Applying Risk Data to Management Decisions
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Third-Party Risk Management Decisions
  • Vendor Risk Acceptance
  • Vendor Risk Mitigation
  • Vendor Risk Transfer
  • Vendor Risk Avoidance
  • Using Risk Results to Guide Security Requirements
  • Supporting Vendor Oversight with Risk Data
  • Applying Third-Party Risk Decisions
25
Third Party Risk Assessment And Management4 Sections · Lessons, Flashcards, And Practice

Assess suppliers, contracts, service providers, software dependencies, due diligence, monitoring, and exit risk.

What You Will Learn

  • Explain risk from third-party relationships.
  • Distinguish due diligence from ongoing oversight.
  • Connect vendor access and dependencies with business impact.
  • Recognize when restrictions or reassessment are needed.
  • Select third-party risk actions for the scenario.
Open LessonFlashcardsPractice
01Third-Party Risk Identification Foundations
  1. Third-Party Risk Assessment and Management
  2. Third-Party Risk Identification Purpose
  3. Vendor and Supplier Asset Identification
  4. Data, Hardware, Software, and Dependencies
  5. Third-Party Vulnerability Identification
  6. Third-Party Threat Identification
  7. Human Factors and Vendor Training Gaps
  8. Building the Third-Party Risk Baseline
  9. Scenario-Based Quiz
02Third-Party Risk Assessment Approaches
  1. Third-Party Risk Assessment Purpose
  2. Impact and Likelihood Evaluation
  3. Prioritizing Vendor Risks by Impact
  4. Ad Hoc Third-Party Assessments
  5. Recurring Third-Party Assessments
  6. One-Time Third-Party Assessments
  7. Continuous Vendor Monitoring
  8. Selecting the Appropriate Assessment Type
  9. Scenario-Based Quiz
03Third-Party Risk Analysis Methods
  1. Third-Party Risk Analysis Purpose
  2. Turning Vendor Risk Data Into Actionable Insight
  3. Qualitative Analysis
  4. Qualitative Ratings and Risk Matrices
  5. Quantitative Analysis
  6. Numerical Risk Values
  7. Comparing Qualitative and Quantitative Vendor Risk Methods
  8. Applying Analysis to Third-Party Risk Prioritization
  9. Scenario-Based Quiz
04Third-Party Risk Management and Decision Support
  1. Third-Party Risk Management Decisions
  2. Vendor Risk Acceptance
  3. Vendor Risk Mitigation
  4. Vendor Risk Transfer
  5. Vendor Risk Avoidance
  6. Using Risk Results to Guide Security Requirements
  7. Supporting Vendor Oversight With Risk Data
  8. Applying Third-Party Risk Decisions
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Lifecycle Review of Third-Party Risk Management
  • Lifecycle Risk Identification Purpose
  • Supplier Asset Review
  • Infrastructure Dependency Review
  • Vendor Vulnerability Treatment
  • Third-Party Threat Review
  • Vendor Human Factor Review
  • Reassessment Baseline
  • Supplier Oversight After Assessment
  • Vendor Risk Identification Outputs
  • Supplier Inventory Management
  • Critical Vendor Dependency
  • Vendor Remediation Management
  • Threat-Based Vendor Monitoring
  • Vendor Training Oversight
  • Renewal and Offboarding Baseline
26
Elements Of Effective Security Compliance4 Sections · Lessons, Flashcards, And Practice

Translate legal, regulatory, contractual, and policy requirements into controls, records, reviews, and reporting.

What You Will Learn

  • Explain how obligations shape security activities.
  • Distinguish control evidence from compliance reporting.
  • Connect legal and contractual duties with controls.
  • Recognize evidence of operating controls.
  • Select activities that demonstrate the stated requirement.
Open LessonFlashcardsPractice
01Compliance Reporting Foundations
  1. Elements of Effective Security Compliance
  2. Compliance Reporting Purpose
  3. Evidence and Documentation
  4. Laws, Regulations, Standards, and Policies
  5. Governance, Risk, and Compliance Alignment
  6. Compliance Status Visibility
  7. Audit and Stakeholder Readiness
  8. Building a Compliance Reporting Process
  9. Scenario-Based Quiz
02Internal and External Reporting
  1. Internal Reporting
  2. Reporting to Organizational Leadership
  3. CISO and Compliance Officer Reporting
  4. Internal Policy and Procedure Evidence
  5. External Reporting
  6. Regulator, Partner, and Customer Reporting
  7. Security Certifications and Audit Results
  8. Demonstrating Transparency and Accountability
  9. Scenario-Based Quiz
03Consequences of Non-Compliance
  1. Non-Compliance Outcomes
  2. Fines
  3. Regulatory Penalties
  4. Sanctions
  5. Business Operation Restrictions
  6. Reputational Damage
  7. Loss of License
  8. Contractual Impacts
  9. Scenario-Based Quiz
04Due Diligence, Due Care, and Compliance Assurance
  1. Due Diligence
  2. Due Care
  3. Responsible Compliance Review
  4. Reasonable Safeguards and Preventive Action
  5. Checking Compliance Against Requirements
  6. Documentation for Accountability
  7. Using Compliance Results to Improve Controls
  8. Applying Compliance Decisions in Real-World Scenarios
  9. Scenario-Based Quiz
27
Types And Purposes Of Audits And Assessments4 Sections · Lessons, Flashcards, And Practice

Compare internal and external audits, assessments, attestation, penetration testing, control validation, and reporting.

What You Will Learn

  • Explain security audits and assessments.
  • Distinguish internal reviews from independent audits.
  • Connect findings with evidence and remediation tracking.
  • Recognize independence and formal reporting requirements.
  • Select review types for the scenario.
Open LessonFlashcardsPractice
01Security Audits and Attestation Foundations
  1. Types and Purposes of Audits and Assessments
  2. Security Audit Purpose
  3. Systematic Security Evaluation
  4. Control Effectiveness Review
  5. Technical, Physical, and Compliance Scope
  6. Attestation Purpose
  7. Formal Confirmation of Security Practices
  8. Building Trust Through Attestation
  9. Scenario-Based Quiz
02Compliance Audits and Audit Governance
  1. Compliance Audit Purpose
  2. Laws, Regulations, Standards, and Contracts
  3. Compliance Documentation Review
  4. Internal Compliance Audits
  5. External Compliance Audits
  6. Audit Committee Purpose
  7. Board and Senior Leadership Oversight
  8. Audit Findings, Transparency, and Accountability
  9. Scenario-Based Quiz
03Self-Assessments and Regulatory Audits
  1. Self-Assessment Purpose
  2. Internal Control Review
  3. Proactive Risk Identification
  4. Questionnaires and Control Checklists
  5. Accountability Across Large Organizations
  6. Regulatory Audit Purpose
  7. Mandatory Reporting Requirements
  8. Consequences of Regulatory Audit Failure
  9. Scenario-Based Quiz
04Examinations and Comprehensive Assessments
  1. Examination Purpose
  2. Industry-Specific Review
  3. Standard and Guideline Compliance
  4. Financial and Operational Examination Context
  5. Security Assessment Purpose
  6. External Assessment Parties
  7. Policies, Procedures, and Control Review
  8. Implementation Findings and Improvement Actions
  9. Scenario-Based Quiz

Further Topics In The Course Outline

  • Section 1 Knowledge Check
  • Section 2 Knowledge Check
  • Section 3 Knowledge Check
  • Section 4 Knowledge Check
28
Implement Security Awareness Practices4 Sections · Lessons, Flashcards, And Practice

Design role-based awareness, phishing exercises, reporting behavior, measurement, reinforcement, and continuous improvement.

What You Will Learn

  • Explain awareness training for human-centered risks.
  • Distinguish phishing defense from policy reinforcement.
  • Connect awareness with credential and workplace protection.
  • Recognize when training or communication is needed.
  • Select practices that support the expected behavior.
Open LessonFlashcardsPractice
01Security Awareness and Phishing Defense
  1. Security Awareness Practice Foundations
  2. Phishing
  3. Phishing Campaigns
  4. Recognizing a Phishing Attempt
  5. Suspicious Domains, Urgency, and Information Requests
  6. Responding to Reported Suspicious Messages
  7. Reporting to IT or the Security Team
  8. Reducing Message-Based Social Engineering Risk
  9. Scenario-Based Quiz
02User Behavior, Policies, and Insider Risk
  1. Risky Behavior Recognition
  2. Unusual Network Traffic and Failed Login Attempts
  3. Unexpected Behavior Recognition
  4. Configuration Changes and Unauthorized Software
  5. Unintentional Behavior Recognition
  6. Policies and Handbooks
  7. Insider Threat Awareness
  8. Encouraging Reporting of Suspicious Activity
  9. Scenario-Based Quiz
03Everyday Security Hygiene and Work Environment Practices
  1. Password Management
  2. Strong Password Creation
  3. Password Sharing Risks
  4. Removable Media and Cables
  5. USB Device Risk
  6. Operational Security
  7. Protecting Company Operations and Sensitive Information
  8. Hybrid and Remote Work Environments
  9. Scenario-Based Quiz
04Awareness Program Design, Monitoring, and Execution
  1. Social Engineering Awareness
  2. Social Engineering Examples and Response
  3. Initial Reporting and Monitoring
  4. Recurring Reporting and Monitoring
  5. Security Awareness Program Development
  6. Training Alignment to Risk Profile
  7. Security Awareness Execution
  8. Continuous Improvement Through Feedback and Metrics
  9. Scenario-Based Quiz

Lesson, flashcard, and practice links open the corresponding Certify Academy resources. Sign in when prompted to continue your enrolled learning.

06 The Learning Environment

Keep The Tools Together.
Keep Your Next Step Clear.

The Student Center gives the course a home. Move from a topic into its lesson, review the matching flashcards, then open practice while keeping the selected course in view. The recording below shows Certify Academy’s own learning environment.

Certify Academy Student Center23 Seconds

Your overview keeps the next lesson, course progress, and study tools together.

Learning

Stay With The Explanation.

Use the lesson to understand the concept, the environment, and the reasons behind the response.

Review

Make Recall More Focused.

Match the review set to the topic so related ideas stay connected as you revisit them.

Practice

Check How You Apply It.

Use the question and explanation to decide what belongs in your next study session.

07 Put The Knowledge To Work

Practice The Connections
Security Work Depends On.

The value of a broad foundation is being able to move between related ideas. These examples show how topics in the course contribute to everyday security reasoning.

Colleagues working through information on a laptop.
Protect What People Depend On.
01

Protect An Account

Connect Access To Risk.

Authentication confirms who is asking for access. Authorization determines what that identity may do. Least privilege narrows the permission to the task, while account reviews help keep that permission appropriate as people and responsibilities change.

Work through identity management, access controls, secure configuration, and monitoring together. A familiar sign in screen becomes a system of decisions about protection and accountability.

Explore Security Operations
02

Understand An Alert

Ask What The Evidence Supports.

An alert is a starting point for investigation. You need to understand the environment, the activity being reported, the reliability of the source, and the other records that could help explain what happened.

Connect threat indicators with monitoring and investigation topics. Practice comparing what is known with what still needs to be checked before selecting a response.

Explore Threats And Mitigations
Professionals reviewing learning materials together.
Make Protection A Clear Decision.
03

Protect Information

Choose Protection For The Situation.

Encryption, hashing, signatures, and certificates answer different security needs. The useful question is how the information will be stored, transmitted, verified, and accessed, rather than which technology name is most familiar.

Relate cryptographic concepts to architecture and data protection. Explain what the selected safeguard protects and what responsibilities remain around it.

Explore Security Concepts
04

Explain A Security Risk

Bring The Technical Detail Into Context.

A security concern also has a business context. The affected service, the likelihood of disruption, the consequences, and the responsibilities for action all help an organization decide what deserves attention.

Connect technical findings with governance, risk, supplier oversight, compliance, and awareness. The course helps you explain the security issue in a way another person can use.

Explore Governance And Risk

Understanding You Can Share

Learn To Explain
The Work Behind The Answer.

Security knowledge becomes more useful when another person can follow your explanation. The course helps you connect the technical term, the situation, and the reason for the selected response.

An instructor leading a group training discussion.
Make The Reason Clear

Explain What The Safeguard Does.

Name the asset, the exposure, and the purpose of the control. Then explain what remains around it: the people, processes, monitoring, and responsibilities that make the protection useful.

That is a stronger foundation than recognizing the technology name alone.

A presenter leading a professional learning session.
Keep The Discussion Useful

Connect The Detail To The Decision.

Explain why the situation calls for one response and what would make another response appropriate. Use the evidence and the environment to support the choice.

This kind of practice gives definitions a practical place to fit, whether you are reviewing for an exam or exploring security work.

08 Make Review More Useful

A Better Routine
Than Read And Repeat.

Working through the material is the first step. Coming back to it with a clear question is what makes the next pass more useful.

Ask yourself what you can explain, what still sounds similar, and what changes when the situation changes. Use the course resources to answer those questions, rather than treating every review session as another trip through the same pages.

  1. 01

    Start With One Clear Topic.

    Read the explanation and name the main distinction you want to remember. Keep the context around the term, rather than collecting a definition alone.

  2. 02

    Explain It Without The Page.

    Try the flashcard first. Compare your explanation with the answer and note the part that was missing or unclear.

  3. 03

    Use It In A Situation.

    Choose a practice response and explain why it fits. Read the feedback even when your answer is correct.

  4. 04

    Give The Next Session A Purpose.

    Return to the lesson for the specific gap. A focused second look is easier to organize than an unfocused restart.

A learner writing notes beside an open laptop.
Build UnderstandingGive The Explanation A Second Look.
A learner explaining a point during a group discussion.
Apply The IdeaUse Practice To Find Your Next Focus.

09 Make Room In Your Week

A Study Plan That
Leaves Room For Life.

A workable pace includes time for new learning, review, and practice. Use the planner to see how the 28 lesson sequence could fit across your study window, then adjust it to your needs.

A learner reviewing notes beside a laptop.

Keep The Session Manageable

One Topic.
A Clear Next Step.

Consistency grows from a routine you can return to, even when your week changes.

Give Each Week A Learning Rhythm.

Start a new lesson when you have time to follow the explanation. Use a shorter session to revisit flashcards, review your notes, or work through a focused practice set. Leave space to return to a topic that needs another pass.

A lesson count is a planning guide, rather than a promise about the time every topic will take. Your background, available time, and comfort with the material will shape your pace. Progress includes understanding a difficult concept more clearly, even when that means slowing down for a session.

Individual course access lasts 120 days. A study window longer than that may require an active All Access membership.

12 Weeks36 Weeks
1.8Average Lessons Per Week
2Lessons To Aim For Each Week

Use the suggested pace as a starting point. Keep review and practice in the plan as you work through the course.

10 Think Beyond The Exam

A Foundation For
More Informed Career Choices.

Broad security knowledge can help you understand different kinds of work before choosing where to specialize. The course connects the subjects behind these roles, while your experience and an employer’s requirements shape the next step.

Three professionals standing together in a workplace.
Security And Analysis

Recognize Activity.
Explain The Finding.

Security analysis brings monitoring, threat patterns, investigation, and response together. The course gives these areas a shared foundation so you can explain what an alert might mean, what evidence could help, and why the next action depends on the situation.

Areas To Explore: Junior Security Analyst · Security Administrator

A professional reviewing information at a table.
IT And Infrastructure

Keep Systems Secure
As Well As Available.

Infrastructure work involves access, configuration, networks, data, and resilience. A security perspective adds context to those decisions: what needs protecting, how the environment could be exposed, and which safeguards fit its operation.

Areas To Explore: IT Support · Systems Administration · Security Administration

A smiling professional with colleagues in the background.
Risk And Oversight

Connect The Concern
To The Organization.

Governance and risk work turn security findings into decisions, responsibilities, and records. Understanding technical concepts helps you explain a concern, review the controls around it, and organize the information needed for a useful discussion.

Areas To Explore: IT Compliance · Security Risk · Governance Support

Explore The Work Behind The Titles.

Use current job listings to compare responsibilities and employer requirements as you plan your development.

LinkedIn JobsIndeed JobsUSAJOBS

11 The Value Of A Complete Course

Enough Depth
To Keep Building.

The course combines a broad sequence with resources you can revisit. That matters when you want to review a familiar subject, connect a new idea, or give a difficult topic a more focused second look.

You can inspect the full outline before you start. As you learn, the same structure becomes a reference: a place to find the concept behind a practice question or the topic that needs more attention.

28Lessons With A Connected Sequence

Follow the foundations through threats, architecture, operations, and oversight.

112Detailed Learning Sections

Break broad subjects into smaller pieces you can study and revisit.

1,512Flashcards For Focused Recall

Return to the definitions and distinctions that benefit from repeated review.

1,344Practice Questions And Activities

Work with scenarios and explanations as you build a more useful understanding.

Preparation With The Work In View.

Security+ preparation is a clear goal for the course. The underlying value is the ability to connect the concepts and explain the reasons behind security choices. Course completion provides preparation materials and practice; CompTIA sets the separate exam and credential requirements.

CompTIA Security+ Certification
CompTIA Security+A Clear Preparation Goal.

Build the knowledge behind the credential, with the separate certification process in view.

Keep The Credential In Context

Prepare For The Exam.
Keep The Knowledge With You.

The five course areas give your Security+ review a broad structure. Work through the unfamiliar subjects as well as the topics you enjoy, and use practice explanations to find the distinctions that need a clearer second look.

The longer term value is the way the ideas connect. A control has a purpose. An alert needs context. A response depends on evidence, authority, and the environment. Bringing those connections into your study routine makes the learning more useful than a list of terms.

CompTIA sets the separate exam and credential requirements. Course completion provides preparation materials; it does not award certification or guarantee an exam result.

12 Your Access Options

Choose The Scope
That Fits Your Learning.

Focus on Cybersecurity Foundations, or choose All Access if you want room to explore other professional subjects. The learning goal comes first; the access option should support it.

Individual Course

Cybersecurity
Foundations

$149One Payment
120 Days Of Access

A focused Security+ preparation path with the complete course and connected study tools.

  • 28 complete lessons
  • 1,512 flashcards
  • 1,344 practice questions and activities
  • 8 Security+ PBQ sets
  • Connected Student Center access
View Course Access At Checkout

Review the final offer and access terms at checkout. Certification exam fees are separate.

All Access Membership

Room To Explore
Your Next Subject.

$349Per Year

Bring your Security+ learning into a wider professional catalog, with lessons, review, practice, and your Student Center in one membership.

IT CoreNetwork CoreCybersecurity FoundationsSecurity Operations AnalystAI Risk & SecurityRisk Management Professional · Confirm AvailabilityCybersecurity LeadershipProject Management FoundationsProject Management CoreHuman Resources Professional
Choose Annual All Access

Billed annually. Membership renews until canceled.

A Way To Explore The Learning Environment

30 Days Of All Access To Find Your Fit.

$0 today, then $49 per month unless canceled. Payment method required.

Start The 30 Day Trial

Certification exams, vouchers, optional labs, and third party credential requirements are separate unless a specific checkout offer states otherwise.

13 Clear Answers Before You Begin

Know What
You Are Choosing.

Review the course, access options, and study format. If your question involves a team or a particular learning goal, contact the academy for guidance.

Talk With Certify Academy
What Does Cybersecurity Foundations Cover?

The 28 lessons cover general security concepts, threats and mitigations, security architecture, security operations, and security program management and oversight. The full curriculum above includes learning points and the detailed topics inside every lesson.

What Is Included With Individual Course Access?

Individual Cybersecurity Foundations access is $149 for 120 days, including lessons, flashcards, practice, and the connected Student Center. The course checkout shows the final offer and terms before payment.

How Does The 30 Day Trial Work?

The trial opens All Access for 30 days. It is $0 today and continues at $49 per month unless canceled before the trial ends. A payment method is required. The separate annual membership option is $349 per year.

Can I Study On My Own Schedule?

Yes. Use the online lessons, flashcards, and practice around the time you have. The planner divides the 28 lesson sequence across your selected window and leaves you to decide how much review each topic needs.

How Should I Use The Three Learning Tools?

Start with the lesson for context. Try flashcards to check what you can recall and explain. Use practice to apply the topic, then read the explanation and return to the part of the lesson that needs a clearer second look.

Will I Study Incident Response And Investigations?

Yes. The Security Operations area includes incident response activities, security alerting and monitoring, and data sources used to support investigations. Related threat, architecture, and governance topics help put those activities in context.

Does Course Completion Award Security+ Certification?

The course provides preparation materials. CompTIA awards the credential through its separate certification process. Exams and exam vouchers are separate unless the specific checkout offer explicitly includes them.

Can A Team Use The Course?

Contact Certify Academy to discuss your learners, training goals, and enrollment needs. The public curriculum gives your organization a detailed starting point for that conversation.

14 A Considered Next Step

Start With A Topic.
See Where It Takes You.

Explore the curriculum, try the learning preview, or look at the Student Center. Give yourself a clear picture of the course before choosing the access option that fits your plans.

Cybersecurity Foundations brings a broad subject into an organized path, with enough detail to return to the topics that matter to you.

Return To The Learning PreviewReview Access Options
A learner working on a laptop near a window.
Make Space For
Your Next Step.