CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Public key infrastructure (PKI) - ansA system that manages the creation, distribution, and
revocation of digital certificates.
Public key - ansA cryptographic key that is used for encryption and verifying digital
signatures in asymmetric encryption.
Private key - ansA cryptographic key that is used for decryption and creating digital
signatures in asymmetric encryption.
Key escrow - ansA process where a trusted third party holds a copy of an encryption key.
Encryption - ansThe process of converting plaintext into ciphertext to protect data
confidentiality.
Full-disk encryption - ansThe process of encrypting the entire disk to protect all data stored
on it.
Partition encryption - ansThe process of encrypting a specific partition on a disk.
File encryption - ansThe process of encrypting individual files to protect their contents.
Volume encryption - ansThe process of encrypting a logical volume, which can span multiple
disks or partitions.
Database encryption - ansThe process of encrypting a database to protect its contents.
Record encryption - ansThe process of encrypting individual records within a database.
Transport/communication encryption - ansThe process of encrypting data during transmission
to ensure its confidentiality.
Asymmetric encryption - ansA cryptographic system that uses two different keys: a public
key for encryption and a private key for decryption.
Symmetric encryption - ansA cryptographic system that uses the same key for both
encryption and decryption.
Key exchange - ansThe process of securely sharing encryption keys between parties.
Algorithms - ansMathematical functions used in encryption and decryption processes.
Key length - ansThe size of the encryption key, measured in bits.
Trusted Platform Module (TPM) - ansA hardware component that provides secure storage
and cryptographic functions.
Hardware security module (HSM) - ansA physical device that generates, stores, and manages
cryptographic keys.
Key management system - ansA system that handles the generation, storage, and distribution
of cryptographic keys.
Secure enclave - ansA secure area within a processor that protects sensitive data.
Obfuscation - ansThe process of making something unclear or difficult to understand.
Steganography - ansThe process of hiding secret information within an innocent-looking
carrier file.
Tokenization - ansThe process of replacing sensitive data with a non-sensitive token.
Data masking - ansThe process of modifying sensitive data to protect its confidentiality.
Hashing - ansThe process of converting data into a fixed-size string of characters.
Salting - ansThe process of adding random data to the input of a hash function to prevent
precomputed attacks.
Digital signatures - ansA cryptographic mechanism to verify the authenticity and integrity of
digital documents.
,CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Key stretching - ansA technique to make a cryptographic key more resistant to brute-force
attacks.
Blockchain - ansA distributed ledger that records transactions across multiple computers.
Open public ledger - ansA transparent and publicly accessible record of all transactions in a
blockchain.
Certificates - ansDigital documents that bind a public key to an entity.
Certificate authorities - ansEntities that issue and sign digital certificates.
Certificate revocation lists (CRLs) - ansLists of revoked digital certificates.
Online Certificate Status Protocol (OCSP) - ansA protocol for checking the revocation status
of digital certificates.
Self-signed - ansA digital certificate that is signed by its own private key.
Third-party Certificate - ansA digital certificate that is signed by a trusted third-party
certificate authority.
Root of trust - ansA trusted entity or component that forms the basis of a security system.
Certificate signing request (CSR) generation - ansThe process of creating a request for a
digital certificate.
Wildcard - ansA type of digital certificate that can be used for multiple subdomains.
Confidentiality - ansThe principle of protecting data from unauthorized access.
Integrity - ansThe principle of ensuring accuracy and completeness of data.
Availability - ansThe principle of ensuring data is accessible when needed.
Non-repudiation - ansThe ability to prove that a specific action or event occurred and that it
was performed by a specific entity.
Authentication - ansThe process of verifying the identity of individuals or systems.
Authorization - ansThe process of granting or denying access rights based on authenticated
identity.
Accounting - ansThe process of tracking and recording activities for auditing purposes.
Gap analysis - ansThe assessment of the difference between the current and desired state of
security measures.
Zero Trust - ansA security model that requires continuous verification and authentication for
all users and devices, assuming no trust by default.
Control Plane - ansThe network component that manages access to resources and enforces
security policies.
Adaptive identity - ansA control plane component that dynamically adjusts access privileges
based on user behavior and context.
Threat scope reduction - ansA control plane technique that limits the exposure of resources to
potential threats.
Policy-driven access control - ansA control plane approach that enforces access rules based
on predefined policies.
Policy Administrator - ansA control plane component responsible for managing and defining
security policies.
Policy Engine - ansA control plane component that evaluates and enforces security policies.
Data Plane - ansThe network component that handles data traffic
Implicit trust zones - ansData plane areas where trust is assumed, allowing communication
without additional authentication.
,CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Subject/System - ansEntities within the data plane that interact with each other.
Policy Enforcement Point - ansA data plane component that enforces security policies and
controls access to resources.
Physical security - ansMeasures taken to protect physical assets and prevent unauthorized
access.
Bollards - ansPhysical barriers used to control or block vehicle access.
Access control vestibule - ansA small enclosed area designed to control access to a building
or secure area.
Fencing - ansPhysical barriers used to enclose and protect an area.
Video surveillance - ansThe use of cameras to monitor and record activities in a specific area.
Security guard - ansA person responsible for monitoring and protecting a specific area or
property.
Access badge - ansA physical or electronic card used to grant access to a secure area.
Lighting - ansIllumination used to enhance visibility and deter unauthorized access.
Sensors - ansDevices used to detect and respond to specific environmental conditions.
Infrared - ansA type of sensor that detects heat radiation.
Pressure - ansA type of sensor that detects changes in pressure.
Microwave - ansA type of sensor that uses microwave radiation to detect movement.
Ultrasonic - ansA type of sensor that uses sound waves to detect objects or movement.
Deception and disruption technology - ansTechniques and tools used to mislead or disrupt
attackers.
Honeypot - ansA decoy system designed to attract and monitor unauthorized access attempts.
Honeynet - ansA network of honeypots used to gather information about attackers.
Honeyfile - ansA file that appears valuable to attackers but is actually monitored.
Honeytoken - ansA piece of information that appears valid but is actually a trap for attackers.
Technical Control - ansA control category that utilizes technology or tools to prevent or
detect risks in a system or process.
Managerial Control - ansA control category that involves the implementation of policies and
procedures to manage risks within an organization.
Operational Control - ansA control category that focuses on the day-to-day activities and
processes to mitigate risks and ensure smooth operations.
Physical Control - ansA control category that utilizes physical barriers or safeguards to
protect assets and prevent unauthorized access.
Preventive Control - ansA control type that aims to proactively stop risks from occurring by
implementing measures and safeguards.
Deterrent Control - ansA control type that discourages individuals from engaging in risky
behavior through the presence of deterrent measures.
Detective Control - ansA control type that identifies risks or incidents after they have
occurred, allowing for timely response and mitigation.
Corrective Control - ansA control type that addresses risks or incidents and takes appropriate
actions to rectify them and prevent recurrence.
Compensating Control - ansA control type that provides an alternative measure to mitigate
risks when primary controls are not effective or feasible.
, CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Directive Control - ansA control type that provides guidance or instructions to individuals to
ensure compliance with organizational policies or procedures.
Business processes impacting security operation - ansProcesses that affect security
operations, including approval, ownership, stakeholders, impact analysis, test results, backout
plan, maintenance window, and standard operating procedure.
Approval process - ansProcess for obtaining approval for security-related activities.
Ownership - ansResponsibility and accountability for security-related activities.
Stakeholders - ansIndividuals or groups with an interest or involvement in security
operations.
Impact analysis - ansAssessment of the potential effects of security-related activities on the
system or organization.
Test results - ansOutcomes of security testing to evaluate the effectiveness of security
measures.
Backout plan - ansPlan to revert security-related changes in case of issues or failures.
Maintenance window - ansScheduled period of time during which security maintenance
activities can be performed without impacting normal operations.
Standard operating procedure - ansDocumented set of step-by-step instructions for
performing security-related tasks.
Technical implications - ansTechnical considerations and consequences of security
operations, including allow lists/deny lists, restricted activities, downtime, service restart,
application restart, legacy applications, and dependencies.
Allow lists/deny lists - ansLists of allowed or denied entities (e.g., IP addresses, users) for
security purposes.
Restricted activities - ansActivities limited or controlled due to security requirements.
Downtime - ansPeriods of time when a system or service is not available for use.
Service restart - ansProcess of stopping and starting a service to apply security changes or
resolve issues.
Application restart - ansProcess of stopping and starting an application to apply security
changes or resolve issues.
Legacy applications - ansOlder software applications that may have security vulnerabilities or
compatibility issues.
Dependencies - ansRelationships or connections between different components or systems
that can impact security operations.
Documentation - ansProcess of updating diagrams, policies, and procedures to reflect security
changes or requirements.
Updating diagrams - ansModifying visual representations of systems or processes to reflect
security-related changes.
Updating policies/procedures - ansRevising written guidelines or instructions to align with
security policies or requirements.
Version control - ansManagement and tracking of changes to documents, software, or other
items to maintain consistency and integrity.
Malware attacks - ansMalicious software that includes various types such as ransomware,
trojans, worms, spyware, bloatware, viruses, keyloggers, logic bombs, and rootkits.
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Public key infrastructure (PKI) - ansA system that manages the creation, distribution, and
revocation of digital certificates.
Public key - ansA cryptographic key that is used for encryption and verifying digital
signatures in asymmetric encryption.
Private key - ansA cryptographic key that is used for decryption and creating digital
signatures in asymmetric encryption.
Key escrow - ansA process where a trusted third party holds a copy of an encryption key.
Encryption - ansThe process of converting plaintext into ciphertext to protect data
confidentiality.
Full-disk encryption - ansThe process of encrypting the entire disk to protect all data stored
on it.
Partition encryption - ansThe process of encrypting a specific partition on a disk.
File encryption - ansThe process of encrypting individual files to protect their contents.
Volume encryption - ansThe process of encrypting a logical volume, which can span multiple
disks or partitions.
Database encryption - ansThe process of encrypting a database to protect its contents.
Record encryption - ansThe process of encrypting individual records within a database.
Transport/communication encryption - ansThe process of encrypting data during transmission
to ensure its confidentiality.
Asymmetric encryption - ansA cryptographic system that uses two different keys: a public
key for encryption and a private key for decryption.
Symmetric encryption - ansA cryptographic system that uses the same key for both
encryption and decryption.
Key exchange - ansThe process of securely sharing encryption keys between parties.
Algorithms - ansMathematical functions used in encryption and decryption processes.
Key length - ansThe size of the encryption key, measured in bits.
Trusted Platform Module (TPM) - ansA hardware component that provides secure storage
and cryptographic functions.
Hardware security module (HSM) - ansA physical device that generates, stores, and manages
cryptographic keys.
Key management system - ansA system that handles the generation, storage, and distribution
of cryptographic keys.
Secure enclave - ansA secure area within a processor that protects sensitive data.
Obfuscation - ansThe process of making something unclear or difficult to understand.
Steganography - ansThe process of hiding secret information within an innocent-looking
carrier file.
Tokenization - ansThe process of replacing sensitive data with a non-sensitive token.
Data masking - ansThe process of modifying sensitive data to protect its confidentiality.
Hashing - ansThe process of converting data into a fixed-size string of characters.
Salting - ansThe process of adding random data to the input of a hash function to prevent
precomputed attacks.
Digital signatures - ansA cryptographic mechanism to verify the authenticity and integrity of
digital documents.
,CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Key stretching - ansA technique to make a cryptographic key more resistant to brute-force
attacks.
Blockchain - ansA distributed ledger that records transactions across multiple computers.
Open public ledger - ansA transparent and publicly accessible record of all transactions in a
blockchain.
Certificates - ansDigital documents that bind a public key to an entity.
Certificate authorities - ansEntities that issue and sign digital certificates.
Certificate revocation lists (CRLs) - ansLists of revoked digital certificates.
Online Certificate Status Protocol (OCSP) - ansA protocol for checking the revocation status
of digital certificates.
Self-signed - ansA digital certificate that is signed by its own private key.
Third-party Certificate - ansA digital certificate that is signed by a trusted third-party
certificate authority.
Root of trust - ansA trusted entity or component that forms the basis of a security system.
Certificate signing request (CSR) generation - ansThe process of creating a request for a
digital certificate.
Wildcard - ansA type of digital certificate that can be used for multiple subdomains.
Confidentiality - ansThe principle of protecting data from unauthorized access.
Integrity - ansThe principle of ensuring accuracy and completeness of data.
Availability - ansThe principle of ensuring data is accessible when needed.
Non-repudiation - ansThe ability to prove that a specific action or event occurred and that it
was performed by a specific entity.
Authentication - ansThe process of verifying the identity of individuals or systems.
Authorization - ansThe process of granting or denying access rights based on authenticated
identity.
Accounting - ansThe process of tracking and recording activities for auditing purposes.
Gap analysis - ansThe assessment of the difference between the current and desired state of
security measures.
Zero Trust - ansA security model that requires continuous verification and authentication for
all users and devices, assuming no trust by default.
Control Plane - ansThe network component that manages access to resources and enforces
security policies.
Adaptive identity - ansA control plane component that dynamically adjusts access privileges
based on user behavior and context.
Threat scope reduction - ansA control plane technique that limits the exposure of resources to
potential threats.
Policy-driven access control - ansA control plane approach that enforces access rules based
on predefined policies.
Policy Administrator - ansA control plane component responsible for managing and defining
security policies.
Policy Engine - ansA control plane component that evaluates and enforces security policies.
Data Plane - ansThe network component that handles data traffic
Implicit trust zones - ansData plane areas where trust is assumed, allowing communication
without additional authentication.
,CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Subject/System - ansEntities within the data plane that interact with each other.
Policy Enforcement Point - ansA data plane component that enforces security policies and
controls access to resources.
Physical security - ansMeasures taken to protect physical assets and prevent unauthorized
access.
Bollards - ansPhysical barriers used to control or block vehicle access.
Access control vestibule - ansA small enclosed area designed to control access to a building
or secure area.
Fencing - ansPhysical barriers used to enclose and protect an area.
Video surveillance - ansThe use of cameras to monitor and record activities in a specific area.
Security guard - ansA person responsible for monitoring and protecting a specific area or
property.
Access badge - ansA physical or electronic card used to grant access to a secure area.
Lighting - ansIllumination used to enhance visibility and deter unauthorized access.
Sensors - ansDevices used to detect and respond to specific environmental conditions.
Infrared - ansA type of sensor that detects heat radiation.
Pressure - ansA type of sensor that detects changes in pressure.
Microwave - ansA type of sensor that uses microwave radiation to detect movement.
Ultrasonic - ansA type of sensor that uses sound waves to detect objects or movement.
Deception and disruption technology - ansTechniques and tools used to mislead or disrupt
attackers.
Honeypot - ansA decoy system designed to attract and monitor unauthorized access attempts.
Honeynet - ansA network of honeypots used to gather information about attackers.
Honeyfile - ansA file that appears valuable to attackers but is actually monitored.
Honeytoken - ansA piece of information that appears valid but is actually a trap for attackers.
Technical Control - ansA control category that utilizes technology or tools to prevent or
detect risks in a system or process.
Managerial Control - ansA control category that involves the implementation of policies and
procedures to manage risks within an organization.
Operational Control - ansA control category that focuses on the day-to-day activities and
processes to mitigate risks and ensure smooth operations.
Physical Control - ansA control category that utilizes physical barriers or safeguards to
protect assets and prevent unauthorized access.
Preventive Control - ansA control type that aims to proactively stop risks from occurring by
implementing measures and safeguards.
Deterrent Control - ansA control type that discourages individuals from engaging in risky
behavior through the presence of deterrent measures.
Detective Control - ansA control type that identifies risks or incidents after they have
occurred, allowing for timely response and mitigation.
Corrective Control - ansA control type that addresses risks or incidents and takes appropriate
actions to rectify them and prevent recurrence.
Compensating Control - ansA control type that provides an alternative measure to mitigate
risks when primary controls are not effective or feasible.
, CompTIA Security+ (SY0-701) Exam Objectives Master
Set
A Top-Rated Exam Study Guide for Guaranteed Success and
a Top Pass with Grade A
Current Updated Edition 2025/2026
Directive Control - ansA control type that provides guidance or instructions to individuals to
ensure compliance with organizational policies or procedures.
Business processes impacting security operation - ansProcesses that affect security
operations, including approval, ownership, stakeholders, impact analysis, test results, backout
plan, maintenance window, and standard operating procedure.
Approval process - ansProcess for obtaining approval for security-related activities.
Ownership - ansResponsibility and accountability for security-related activities.
Stakeholders - ansIndividuals or groups with an interest or involvement in security
operations.
Impact analysis - ansAssessment of the potential effects of security-related activities on the
system or organization.
Test results - ansOutcomes of security testing to evaluate the effectiveness of security
measures.
Backout plan - ansPlan to revert security-related changes in case of issues or failures.
Maintenance window - ansScheduled period of time during which security maintenance
activities can be performed without impacting normal operations.
Standard operating procedure - ansDocumented set of step-by-step instructions for
performing security-related tasks.
Technical implications - ansTechnical considerations and consequences of security
operations, including allow lists/deny lists, restricted activities, downtime, service restart,
application restart, legacy applications, and dependencies.
Allow lists/deny lists - ansLists of allowed or denied entities (e.g., IP addresses, users) for
security purposes.
Restricted activities - ansActivities limited or controlled due to security requirements.
Downtime - ansPeriods of time when a system or service is not available for use.
Service restart - ansProcess of stopping and starting a service to apply security changes or
resolve issues.
Application restart - ansProcess of stopping and starting an application to apply security
changes or resolve issues.
Legacy applications - ansOlder software applications that may have security vulnerabilities or
compatibility issues.
Dependencies - ansRelationships or connections between different components or systems
that can impact security operations.
Documentation - ansProcess of updating diagrams, policies, and procedures to reflect security
changes or requirements.
Updating diagrams - ansModifying visual representations of systems or processes to reflect
security-related changes.
Updating policies/procedures - ansRevising written guidelines or instructions to align with
security policies or requirements.
Version control - ansManagement and tracking of changes to documents, software, or other
items to maintain consistency and integrity.
Malware attacks - ansMalicious software that includes various types such as ransomware,
trojans, worms, spyware, bloatware, viruses, keyloggers, logic bombs, and rootkits.
