!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 1 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
Overview of Security
● Welcome
o Domains (SYO-601)
▪ Attacks, Threats, and Vulnerabilities (24%)
▪ Architecture and Design (21%)
▪ Implementation (25%)
▪ Operations and Incident Response (16%)
▪ Governance, Risk, and Compliance (14%)
o 90 minutes to answer up to 90 questions
o Minimum to Pass
● Overview of Security
o Information Security
▪ Act of protecting data and information from unauthorized access,
unlawful modification and disruption, disclosure, corruption, and
destruction
o Information Systems Security
▪ Act of protecting the systems that hold and process our critical data
1
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 1 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 2 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
o Basics and Fundamentals
● CIA Triad
o Confidentiality
▪ Information has not been disclosed to unauthorized people
o Integrity
▪ Information has not been modified or altered without proper
authorization
o Availability
▪ Information is able to be stored, accessed, or protected at all times
● AAA of Security
o Authentication
▪ When a person’s identity is established with proof and confirmed by a
system
● Something you know
● Something you are
● Something you have
● Something you do
● Somewhere you are
o Authorization
▪ Occurs when a user is given access to a certain piece of data or certain
areas of a building
o Accounting
▪ Tracking of data, computer usage, and network resources
▪ Non-repudiation occurs when you have proof that someone has taken an
action
2
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 2 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 3 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
● Security Threats
o Malware
▪ Short-hand term for malicious software
o Unauthorized Access
▪ Occurs when access to computer resources and data occurs without the
consent of the owner
o System Failure
▪ Occurs when a computer crashes or an individual application fails
o Social Engineering
▪ Act of manipulating users into revealing confidential information or
performing other detrimental actions
● Mitigating Threats
o Physical Controls
▪ Alarm systems, locks, surveillance cameras, identification cards, and
security guards
o Technical Controls
▪ Smart cards, encryption, access control lists (ACLs), intrusion detection
systems, and network authentication
o Administrative Controls
▪ Policies, procedures, security awareness training, contingency planning,
and disaster recovery plans
▪ User training is the most cost-effective security control to use
● Hackers
o Five Types of Hackers
▪ White Hats
● Non-malicious hackers who attempt to break into a company’s
systems at their request
▪ Black Hats
● Malicious hackers who break into computer systems and
networks without authorization or permission
▪ Gray Hats
● Hackers without any affiliation to a company who attempt to
break into a company’s network but risk the law by doing so
▪ Blue Hats
● Hackers who attempt to hack into a network with permission of
the company but are not employed by the company
▪ Elite
3
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 3 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 4 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
● Hackers who find and exploit vulnerabilities before anyone else
does
● 1 in 10,000 are elite
o Script kiddies have limited skill and only run other people’s exploits and tools
● Threat Actors
o Script Kiddies
▪ Hackers with little to no skill who only use the tools and exploits written
by others
o Hacktivists
▪ Hackers who are driven by a cause like social change, political agendas, or
terrorism
o Organized Crime
▪ Hackers who are part of a crime group that is well-funded and highly
sophisticated
o Advanced Persistent Threats
▪ Highly trained and funded groups of hackers (often by nation states) with
covert and open-source intelligence at their disposal
4
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 4 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 1 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
Overview of Security
● Welcome
o Domains (SYO-601)
▪ Attacks, Threats, and Vulnerabilities (24%)
▪ Architecture and Design (21%)
▪ Implementation (25%)
▪ Operations and Incident Response (16%)
▪ Governance, Risk, and Compliance (14%)
o 90 minutes to answer up to 90 questions
o Minimum to Pass
● Overview of Security
o Information Security
▪ Act of protecting data and information from unauthorized access,
unlawful modification and disruption, disclosure, corruption, and
destruction
o Information Systems Security
▪ Act of protecting the systems that hold and process our critical data
1
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 1 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 2 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
o Basics and Fundamentals
● CIA Triad
o Confidentiality
▪ Information has not been disclosed to unauthorized people
o Integrity
▪ Information has not been modified or altered without proper
authorization
o Availability
▪ Information is able to be stored, accessed, or protected at all times
● AAA of Security
o Authentication
▪ When a person’s identity is established with proof and confirmed by a
system
● Something you know
● Something you are
● Something you have
● Something you do
● Somewhere you are
o Authorization
▪ Occurs when a user is given access to a certain piece of data or certain
areas of a building
o Accounting
▪ Tracking of data, computer usage, and network resources
▪ Non-repudiation occurs when you have proof that someone has taken an
action
2
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 2 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 3 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
● Security Threats
o Malware
▪ Short-hand term for malicious software
o Unauthorized Access
▪ Occurs when access to computer resources and data occurs without the
consent of the owner
o System Failure
▪ Occurs when a computer crashes or an individual application fails
o Social Engineering
▪ Act of manipulating users into revealing confidential information or
performing other detrimental actions
● Mitigating Threats
o Physical Controls
▪ Alarm systems, locks, surveillance cameras, identification cards, and
security guards
o Technical Controls
▪ Smart cards, encryption, access control lists (ACLs), intrusion detection
systems, and network authentication
o Administrative Controls
▪ Policies, procedures, security awareness training, contingency planning,
and disaster recovery plans
▪ User training is the most cost-effective security control to use
● Hackers
o Five Types of Hackers
▪ White Hats
● Non-malicious hackers who attempt to break into a company’s
systems at their request
▪ Black Hats
● Malicious hackers who break into computer systems and
networks without authorization or permission
▪ Gray Hats
● Hackers without any affiliation to a company who attempt to
break into a company’s network but risk the law by doing so
▪ Blue Hats
● Hackers who attempt to hack into a network with permission of
the company but are not employed by the company
▪ Elite
3
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 3 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
,!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 4 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
CompTIA Security+ (Study Notes)
● Hackers who find and exploit vulnerabilities before anyone else
does
● 1 in 10,000 are elite
o Script kiddies have limited skill and only run other people’s exploits and tools
● Threat Actors
o Script Kiddies
▪ Hackers with little to no skill who only use the tools and exploits written
by others
o Hacktivists
▪ Hackers who are driven by a cause like social change, political agendas, or
terrorism
o Organized Crime
▪ Hackers who are part of a crime group that is well-funded and highly
sophisticated
o Advanced Persistent Threats
▪ Highly trained and funded groups of hackers (often by nation states) with
covert and open-source intelligence at their disposal
4
https://www.DionTraining.com © 2022 v1.2
Dion Training Solutions, LLC is a Platinum Delivery Partner for CompTIA certification products. All rights reserved.
!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_Study_Guide.pdf.pdf*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!
^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
Page 4 of 16610/16/2026, 5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*Security__601_Study_Guide.pdf10/16/2026,
5:42:03 AM*&!#%#&&!%%#^#^&^!#&*^&^*#!(FG*T!^&*#*((*!#&()#_)#!*&$!*#)(!*##(*0Security__601_S
5:42:03 AM*&
