Security+ SY0-701
PBQ
Kvizovi
Statistike
Tema
CompTIA Security+ SY0-701
Study lekcije
Priprema za ispit na hrvatskom — teorija s dijagramima, flashcards i kvizovi u stilu pravog ispita.
Study — teorija
1
Sigurnosni koncepti i sigurnosne kontrole
CIA trijada, non-repudiation, NIST funkcije, gap analiza, IAM/AAA, kategorije i tipovi kontrola, uloge, SOC/DevSecOps/CIRT · Obj 1.1, 1.2, 5.1
2
Akteri prijetnji i površina napada
Ranjivost/prijetnja/rizik, tipovi i motivacije aktera, insider i shadow IT, threat vectors, social engineering, phishing obitelj · Obj 2.1, 2.2
3
Kriptografska rješenja
Simetrična/asimetrična enkripcija, hashing, digitalni potpisi, PKI i certifikati, CRL/OCSP, TPM/HSM, enkripcija u tri stanja, PFS, salting, blockchain · Obj 1.4
4
IAM — autentifikacija i kontrola pristupa
Faktori i MFA, biometrija, tokeni, FIDO2/passwordless, DAC/MAC/RBAC/ABAC, least privilege, PAM/JIT, Kerberos SSO, federacija, SAML/OAuth · Obj 4.6
5
Mrežna arhitektura i sigurnosni uređaji
OSI model, switching/routing, VLANs, zone-based security, 802.1X, vatrozidi, IDS/IPS, WAF, load balanceri, VPN (TLS/IPsec), SSH, jump serveri · Obj 3.1, 3.2
6
Cloud Computing i Virtualizacija
Deployment modeli, XaaS (SaaS/PaaS/IaaS/FaaS), Shared Responsibility, hypervisori, kontejneri, serverless, IaC, SDN/NFV, HA, Zero Trust · Obj 3.1, 3.4, 3.5, 4.3
7
Upravljanje imovinom, otpornost i fizička sigurnost
Asset management, backupi i snimke, HA i clustering, COOP, planiranje kapaciteta, napajanje, fizička sigurnost i nadzor · Obj 3.4, 4.2
8
Upravljanje ranjivostima
OS i EOL ranjivosti, firmware, zero-day, misconfiguration, kriptografske ranjivosti, mobilni uređaji, XSS/SQLi, supply chain, scanning, CVSS/CVE, remediation · Obj 2.3, 4.3, 4.4
9
Hardening, Wireless Security i NAC
Secure baselines, CIS Benchmarks, STIGs, SCAP, hardening switcha/servera, WEP→WPA3, SAE, WPS, RADIUS, EAP, NAC agent/agentless, firewalls, IDS/IPS, web filtriranje · Obj 4.1, 4.5
10
Endpoint sigurnost
OS hardening, FDE/BitLocker/TPM/SED, patch management, EDR/XDR, HIDS/FIM, UEBA, least privilege, ACL, allow/block liste, Group Policy/SELinux, BadUSB, mobilni i MDM, Bluetooth/NFC, ICS/SCADA, decommissioning · Obj 2.5, 4.1, 4.5
11
Sigurni protokoli i aplikacijska sigurnost
HTTPS/TLS, cipher suites, FTP/SFTP/FTPS, SMTP/POP3/IMAP portovi, S/MIME, DLP, email gateway, SPF/DKIM/DMARC, DNS filtriranje, DNSSEC, zone transfer, SDL/OWASP, input validation, SAST/DAST, code signing, sandboxing · Obj 2.2.8, 4.1.2, 4.1.6, 4.5.5
12
Incident Response, Digitalna forenzika i SIEM monitoring
IR životni ciklus (7 koraka), CIRT/SIEM/SOAR, kill chain, containment, digitalna forenzika, RFC 3227, Volatility, dd/dcfldd, chain of custody, e-discovery, log analiza, NetFlow/IPFIX, SCAP/OVAL/XCCDF, DLP, UEBA · Obj 4.4, 4.8, 4.9
13
Malware, Mrežni, Lozinkni i Aplikacijski napadi
Virusi/crvi/trojanci, fileless malware, rootkit, ransomware, botnet/C2, TTP/IoC/MITRE ATT&CK, DoS/DDoS/SYN flood/DRDoS, ARP/DNS poisoning, bežični napadi, KRACK, PtH/PtT/Golden ticket, downgrade/collision/birthday, buffer overflow, CSRF/SSRF · Obj 2.4.1, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7
14
Sigurnosno upravljanje, Compliance i Automatizacija
Politike/standardi/procedure/smjernice, AUP, ISO 27001/27002/27017/27018, PCI DSS, FIPS, onboarding/offboarding, change management/RFC/CAB/backout plan, GDPR/CCPA/HIPAA/FISMA, Data Owner/Controller/Processor/Custodian, automatizacija/orkestracija/SOAR, workforce multiplier, operator fatigue · Obj 5.1.2, 5.1.3, 5.1.4, 5.1.7, 5.1.8, 1.3.1, 1.3.2, 1.3.3, 4.7.1, 4.7.2, 4.7.3
15
Upravljanje rizicima, BIA i penetracijski testovi
SLE/ALE/ARO formule, kvalitativna/kvantitativna analiza, heat map, FIPS 199, 4 strategije rizika (mitigate/transfer/accept/avoid), risk exception/exemption, risk appetite/tolerance/threshold, KRI, risk register, BIA, MEF/PBF, MTD/RTO/WRT/RPO (RTO+WRT≤MTD!), MTBF/MTTR, vendor due diligence, right-to-audit, MOU/NDA/MOA/BPA/MSA/SLA/SOW, rules of engagement, attestation, interne/vanjske procjene, pen testing, active/passive recon, known/partially known/unknown environment, Red/Blue/Physical/Integrated · Obj 5.2.2, 5.2.3, 5.2.4, 5.2.7, 5.2.9, 5.3.1, 5.3.3, 5.5.2, 5.5.3, 5.5.4
16
Zaštita podataka, Compliance i Sigurnosna svjesnost
Regulated/Trade secrets/Legal/Financial podaci, human-readable vs. non-human-readable, klasifikacija (Public/Confidential/Secret/Top Secret; Proprietary/Private/Sensitive/Restricted), Data Sovereignty, GDPR eksteritorijalnost, Privacy Shield, Privacy vs. Confidential, Data Controller/Processor/Subject, 7 GDPR prava (access/rectification/erasure/restriction/portability/object/withdraw), Right to Be Forgotten, data breach vs. privacy breach, GDPR 72h i HIPAA 60-day notifikacija, noncompliance kazne, compliance monitoring/reporting, Data at Rest/In Transit/In Use, TEE/Intel SGX, enkripcija/hashing/masking/tokenization/obfuscation/segmentation, DLP (policy server/endpoint/network agents, alert/block/quarantine/tombstone), AUP, Code of Conduct, BYOD/Shadow IT, Clean Desk Policy, security awareness training, CBT/gamification/CTF, anomalous/risky/unexpected/unintentional behaviors, Security Awareness Lifecycle · Obj 3.3.1, 3.3.3, 3.3.4, 5.1.2, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.6.1, 5.6.3, 5.6.4, 5.6.6
Labs — praktični dio
1
Gap Analysis konfiguracije
Policy Analyzer, security baseline, Compare to Effective State · 10 pitanja
2
Vrste sigurnosnih kontrola
ACL, Event IDs, login banner, file hashing · 12 pitanja
3
nmap — skeniranje otvorenih portova
nmap parametri, SYN scan, attack surface, segmentacija · 12 pitanja
4
SET — socijalni inženjering i phishing
Social-Engineer Toolkit, reverse shell, Meterpreter · 12 pitanja
5
EFS — enkripcija datoteka i oporavak
cipher naredbe, Data Recovery Agent, gubitak ključa · 12 pitanja
6
Hashiranje i salting lozinki
md5sum, sha1sum, MetaDefender, John the Ripper, /etc/shadow · 12 pitanja
7
Sigurnost lozinki — napad i obrana
Password spraying (Hydra), dictionary crack, brute force, AD password policy · 12 pitanja
8
Upravljanje dozvolama — Linux i Windows
chmod (simbolički/oktalni), icacls, efektivne dozvole, SMB share · 12 pitanja
9
Postavljanje udaljenog pristupa
Windows RDP konfiguracija, SSH, PuTTY, hushlogin · 12 pitanja
10
IPSec tuneliranje i verifikacija enkripcije
IPSec politike (attempt/required), Wireshark, ISAKMP, ESP paketi · 12 pitanja
11
Docker — upravljanje kontejnerima
docker run/exec/ps/stop/rm, izolacija, NAT mreža, korisnici u kontejneru · 12 pitanja
12
Virtualizacija s Hyper-V
Install-WindowsFeature, Gen1 vs Gen2, External/Internal/Private switch, VHD/VHDX · 10 pitanja
13
Backup i oporavak podataka
diskpart, Windows Server Backup, Recovery Wizard, Volume Shadow Copy (VSS) · 10 pitanja
14
Sanitizacija i oporavak diska
fdisk, mkfs, rm vs shred -uvz, testdisk, dd if=/dev/zero · 12 pitanja
15
SQL Injection napadi
DVWA, error-based SQLi, boolean, UNION SELECT, information_schema, Apache logovi · 12 pitanja
16
Threat Intelligence i IoC izvori
CIS MS-ISAC feeds, AlienVault OTX Pulses, IoC tipovi, Exploit-DB · 10 pitanja
17
Skeniranje ranjivosti — Greenbone/OpenVAS
gvm-start, GSA, scan targets, SMB/SSH credentials, CVE, CVSS · 12 pitanja
18
Sigurnosne smjernice i baseline
SANS.org predlošci, CIS Benchmarks, SCAP, NIST NCP, DISA STIGs · 10 pitanja
19
Konfiguracija pravila vatrozida
ICMP blokiranje, SMB blokiranje, explicit vs implicit deny, Windows Defender Firewall · 12 pitanja
20
Group Policy — GPO i organizacijske jedinice
OU kreiranje, GPO linkanje, gpresult, RSOP, logon/logoff skripte · 12 pitanja
21
Očvršćavanje (hardening) sustava
Device Manager (disable/uninstall), uklanjanje FTP, /etc/hosts manipulacija · 12 pitanja
22
DNS filtriranje i logiranje
Event ID 3010, Type 1/28, beaconing, block-DNS.sh, crontab, nslookup/dig interaktivno · 14 pitanja
23
Centralizirano Windows logiranje
wecutil qc, WinRM, firewall pravila, Event Log Readers, Collector vs Source Initiated · 12 pitanja
24
Wazuh SIEM — detekcija napada
Alert razine 0-16, Hydra RDP napad, Rule IDs, MITRE ATT&CK, IR faze · 14 pitanja
25
Digitalna forenzika — disk analiza
fdisk/testdisk/fiwalk/mmls, TSK alati (fsstat/fls/istat/tsk_recover), inode, file carving · 14 pitanja
26
Wireshark — analiza mrežnog prometa
3 panela, display filtri, OSI terminologija (Frame/Packet/Segment/Datagram), HTTP GET vs POST · 13 pitanja
27
Analiza temeljnog uzroka (RCA)
Wazuh Rule 60112, Event ID 4719, logon tipovi, napadni lanac, Dylan kao počinitelj · 14 pitanja
28
Analiza malwarea — Joe Sandbox i VirusTotal
Joe Sandbox Cloud, EICAR test datoteka, VirusTotal URL/file/hash, RELATIONS tab · 13 pitanja
29
Napad na putu — Burp Suite AitM
Adversary-in-the-Middle, Burp proxy 127.0.0.1:8080, HTTP History, POST credential theft · 13 pitanja
30
Playbook — odgovor na incident
Playbook vs Runbook, 9 koraka IR, HeavyLoad.exe DoS simulacija, AAR, SOAR · 13 pitanja
31
Allow/Deny liste — AppLocker
secpol.msc, AppIDSvc, Publisher/Path/Hash pravila, zaobilaženje Path rule · 13 pitanja
32
Automatizacija skriptiranjem — iptables i threat feed
ip_block.sh, iptables -I INPUT 1 DROP, awk dedup, sha256sum malware removal · 14 pitanja
33
Rekognicija — OSINT i mrežno izviđanje
ip a s, ping, whois, nslookup interaktivno, dig, Google Dorking, Netcraft, PeekYou · 14 pitanja
34
Penetracijsko testiranje — DVWA web napadi
DVWA, directory traversal, command injection (www-data), file upload, msfvenom, Metasploit · 14 pitanja
35
Phishing simulacija i reverse shell
Socijalni inženjering, pretext, nc -l -k -p 7890, rs-dl.bat, reverse vs bind shell · 13 pitanja
36
Mrežna istraga incidenta
traffic.pcap, Event ID 4720, WinT0Ols malware, SSHv2 brute force, PII eksfiltracija · 13 pitanja
Vježbe — fill-in-blank
Akronimi — Security+ (65 pitanja)
Fill-in-blank: upiši puni naziv kratice — SSH, MFA, SIEM, SOAR, CVSS, GDPR, RTO... sve bitne kratice s ispita.
Formule i pojmovi — Security+ (40 pitanja)
Fill-in-blank: formule (ALE, SLE, MTBF, MTTR, RTO+WRT≤MTD), računanje s brojevima i ključni pojmovi upravljanja rizikom.
Portovi — Security+ (60 pitanja)
Fill-in-blank: protokol → port i port → protokol. Svi bitni portovi: 22, 25, 53, 88, 389, 443, 3389 i ostali.
Korisni linkovi
DumpsCollection — SY0-701
Kolekcija exam dumpova za CompTIA Security+ SY0-701 od raznih providera (Lead2Pass, Transcender i dr.)
MasteryExamPrep — SY0-701
Besplatni practice testovi za CompTIA Security+ SY0-701 s objašnjenjima odgovora.
CompTIA DemoSim — Official Simulator
Službeni CompTIA demo simulator ispitnih pitanja — realna okruženje ispita uključujući PBQ (performance-based) pitanja.
ExamCompass — Security+ Practice Tests
Besplatni practice testovi za CompTIA Security+ s više od 800 pitanja po domenama.
Professor Messer — SY0-701 Video Course (YouTube)
Besplatni video tečaj za CompTIA Security+ SY0-701 od Professor Messera — najpopularniji besplatni resurs za ispit.
Professor Messer — Službena stranica SY0-701
Materijali za učenje, practice testovi i study grupice za CompTIA Security+ SY0-701.