CompTIA Security+ SY0-701

Study lekcije

Priprema za ispit na hrvatskom — teorija s dijagramima, flashcards i kvizovi u stilu pravog ispita.

Study — teorija

1 Sigurnosni koncepti i sigurnosne kontrole CIA trijada, non-repudiation, NIST funkcije, gap analiza, IAM/AAA, kategorije i tipovi kontrola, uloge, SOC/DevSecOps/CIRT · Obj 1.1, 1.2, 5.1
2 Akteri prijetnji i površina napada Ranjivost/prijetnja/rizik, tipovi i motivacije aktera, insider i shadow IT, threat vectors, social engineering, phishing obitelj · Obj 2.1, 2.2
3 Kriptografska rješenja Simetrična/asimetrična enkripcija, hashing, digitalni potpisi, PKI i certifikati, CRL/OCSP, TPM/HSM, enkripcija u tri stanja, PFS, salting, blockchain · Obj 1.4
4 IAM — autentifikacija i kontrola pristupa Faktori i MFA, biometrija, tokeni, FIDO2/passwordless, DAC/MAC/RBAC/ABAC, least privilege, PAM/JIT, Kerberos SSO, federacija, SAML/OAuth · Obj 4.6
5 Mrežna arhitektura i sigurnosni uređaji OSI model, switching/routing, VLANs, zone-based security, 802.1X, vatrozidi, IDS/IPS, WAF, load balanceri, VPN (TLS/IPsec), SSH, jump serveri · Obj 3.1, 3.2
6 Cloud Computing i Virtualizacija Deployment modeli, XaaS (SaaS/PaaS/IaaS/FaaS), Shared Responsibility, hypervisori, kontejneri, serverless, IaC, SDN/NFV, HA, Zero Trust · Obj 3.1, 3.4, 3.5, 4.3
7 Upravljanje imovinom, otpornost i fizička sigurnost Asset management, backupi i snimke, HA i clustering, COOP, planiranje kapaciteta, napajanje, fizička sigurnost i nadzor · Obj 3.4, 4.2
8 Upravljanje ranjivostima OS i EOL ranjivosti, firmware, zero-day, misconfiguration, kriptografske ranjivosti, mobilni uređaji, XSS/SQLi, supply chain, scanning, CVSS/CVE, remediation · Obj 2.3, 4.3, 4.4
9 Hardening, Wireless Security i NAC Secure baselines, CIS Benchmarks, STIGs, SCAP, hardening switcha/servera, WEP→WPA3, SAE, WPS, RADIUS, EAP, NAC agent/agentless, firewalls, IDS/IPS, web filtriranje · Obj 4.1, 4.5
10 Endpoint sigurnost OS hardening, FDE/BitLocker/TPM/SED, patch management, EDR/XDR, HIDS/FIM, UEBA, least privilege, ACL, allow/block liste, Group Policy/SELinux, BadUSB, mobilni i MDM, Bluetooth/NFC, ICS/SCADA, decommissioning · Obj 2.5, 4.1, 4.5
11 Sigurni protokoli i aplikacijska sigurnost HTTPS/TLS, cipher suites, FTP/SFTP/FTPS, SMTP/POP3/IMAP portovi, S/MIME, DLP, email gateway, SPF/DKIM/DMARC, DNS filtriranje, DNSSEC, zone transfer, SDL/OWASP, input validation, SAST/DAST, code signing, sandboxing · Obj 2.2.8, 4.1.2, 4.1.6, 4.5.5

Labs — praktični dio

L Labs Dolazi nakon što završimo sve study lekcije.