CompTIA Security+ SY0-701

Study lekcije

Priprema za ispit na hrvatskom — teorija s dijagramima, flashcards i kvizovi u stilu pravog ispita.

Study — teorija

1 Sigurnosni koncepti i sigurnosne kontrole CIA trijada, non-repudiation, NIST funkcije, gap analiza, IAM/AAA, kategorije i tipovi kontrola, uloge, SOC/DevSecOps/CIRT · Obj 1.1, 1.2, 5.1
2 Akteri prijetnji i površina napada Ranjivost/prijetnja/rizik, tipovi i motivacije aktera, insider i shadow IT, threat vectors, social engineering, phishing obitelj · Obj 2.1, 2.2
3 Kriptografska rješenja Simetrična/asimetrična enkripcija, hashing, digitalni potpisi, PKI i certifikati, CRL/OCSP, TPM/HSM, enkripcija u tri stanja, PFS, salting, blockchain · Obj 1.4
4 IAM — autentifikacija i kontrola pristupa Faktori i MFA, biometrija, tokeni, FIDO2/passwordless, DAC/MAC/RBAC/ABAC, least privilege, PAM/JIT, Kerberos SSO, federacija, SAML/OAuth · Obj 4.6
5 Mrežna arhitektura i sigurnosni uređaji OSI model, switching/routing, VLANs, zone-based security, 802.1X, vatrozidi, IDS/IPS, WAF, load balanceri, VPN (TLS/IPsec), SSH, jump serveri · Obj 3.1, 3.2
6 Cloud Computing i Virtualizacija Deployment modeli, XaaS (SaaS/PaaS/IaaS/FaaS), Shared Responsibility, hypervisori, kontejneri, serverless, IaC, SDN/NFV, HA, Zero Trust · Obj 3.1, 3.4, 3.5, 4.3
7 Upravljanje imovinom, otpornost i fizička sigurnost Asset management, backupi i snimke, HA i clustering, COOP, planiranje kapaciteta, napajanje, fizička sigurnost i nadzor · Obj 3.4, 4.2
8 Upravljanje ranjivostima OS i EOL ranjivosti, firmware, zero-day, misconfiguration, kriptografske ranjivosti, mobilni uređaji, XSS/SQLi, supply chain, scanning, CVSS/CVE, remediation · Obj 2.3, 4.3, 4.4
9 Hardening, Wireless Security i NAC Secure baselines, CIS Benchmarks, STIGs, SCAP, hardening switcha/servera, WEP→WPA3, SAE, WPS, RADIUS, EAP, NAC agent/agentless, firewalls, IDS/IPS, web filtriranje · Obj 4.1, 4.5
10 Endpoint sigurnost OS hardening, FDE/BitLocker/TPM/SED, patch management, EDR/XDR, HIDS/FIM, UEBA, least privilege, ACL, allow/block liste, Group Policy/SELinux, BadUSB, mobilni i MDM, Bluetooth/NFC, ICS/SCADA, decommissioning · Obj 2.5, 4.1, 4.5
11 Sigurni protokoli i aplikacijska sigurnost HTTPS/TLS, cipher suites, FTP/SFTP/FTPS, SMTP/POP3/IMAP portovi, S/MIME, DLP, email gateway, SPF/DKIM/DMARC, DNS filtriranje, DNSSEC, zone transfer, SDL/OWASP, input validation, SAST/DAST, code signing, sandboxing · Obj 2.2.8, 4.1.2, 4.1.6, 4.5.5
12 Incident Response, Digitalna forenzika i SIEM monitoring IR životni ciklus (7 koraka), CIRT/SIEM/SOAR, kill chain, containment, digitalna forenzika, RFC 3227, Volatility, dd/dcfldd, chain of custody, e-discovery, log analiza, NetFlow/IPFIX, SCAP/OVAL/XCCDF, DLP, UEBA · Obj 4.4, 4.8, 4.9
13 Malware, Mrežni, Lozinkni i Aplikacijski napadi Virusi/crvi/trojanci, fileless malware, rootkit, ransomware, botnet/C2, TTP/IoC/MITRE ATT&CK, DoS/DDoS/SYN flood/DRDoS, ARP/DNS poisoning, bežični napadi, KRACK, PtH/PtT/Golden ticket, downgrade/collision/birthday, buffer overflow, CSRF/SSRF · Obj 2.4.1, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7
14 Sigurnosno upravljanje, Compliance i Automatizacija Politike/standardi/procedure/smjernice, AUP, ISO 27001/27002/27017/27018, PCI DSS, FIPS, onboarding/offboarding, change management/RFC/CAB/backout plan, GDPR/CCPA/HIPAA/FISMA, Data Owner/Controller/Processor/Custodian, automatizacija/orkestracija/SOAR, workforce multiplier, operator fatigue · Obj 5.1.2, 5.1.3, 5.1.4, 5.1.7, 5.1.8, 1.3.1, 1.3.2, 1.3.3, 4.7.1, 4.7.2, 4.7.3
15 Upravljanje rizicima, BIA i penetracijski testovi SLE/ALE/ARO formule, kvalitativna/kvantitativna analiza, heat map, FIPS 199, 4 strategije rizika (mitigate/transfer/accept/avoid), risk exception/exemption, risk appetite/tolerance/threshold, KRI, risk register, BIA, MEF/PBF, MTD/RTO/WRT/RPO (RTO+WRT≤MTD!), MTBF/MTTR, vendor due diligence, right-to-audit, MOU/NDA/MOA/BPA/MSA/SLA/SOW, rules of engagement, attestation, interne/vanjske procjene, pen testing, active/passive recon, known/partially known/unknown environment, Red/Blue/Physical/Integrated · Obj 5.2.2, 5.2.3, 5.2.4, 5.2.7, 5.2.9, 5.3.1, 5.3.3, 5.5.2, 5.5.3, 5.5.4
16 Zaštita podataka, Compliance i Sigurnosna svjesnost Regulated/Trade secrets/Legal/Financial podaci, human-readable vs. non-human-readable, klasifikacija (Public/Confidential/Secret/Top Secret; Proprietary/Private/Sensitive/Restricted), Data Sovereignty, GDPR eksteritorijalnost, Privacy Shield, Privacy vs. Confidential, Data Controller/Processor/Subject, 7 GDPR prava (access/rectification/erasure/restriction/portability/object/withdraw), Right to Be Forgotten, data breach vs. privacy breach, GDPR 72h i HIPAA 60-day notifikacija, noncompliance kazne, compliance monitoring/reporting, Data at Rest/In Transit/In Use, TEE/Intel SGX, enkripcija/hashing/masking/tokenization/obfuscation/segmentation, DLP (policy server/endpoint/network agents, alert/block/quarantine/tombstone), AUP, Code of Conduct, BYOD/Shadow IT, Clean Desk Policy, security awareness training, CBT/gamification/CTF, anomalous/risky/unexpected/unintentional behaviors, Security Awareness Lifecycle · Obj 3.3.1, 3.3.3, 3.3.4, 5.1.2, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.6.1, 5.6.3, 5.6.4, 5.6.6

Labs — praktični dio

L Labs Dolazi nakon što završimo sve study lekcije.