Security+ SY0-701 study guides

Plain-English explanations of every exam concept, mapped to the five official domains. Read a guide, then practice it in the free Kestrel Exams app.

1.0 General Security Concepts

Symmetric vs asymmetric encryption The CIA triad (soon)Hashing explained (soon)Digital signatures & non-repudiation (soon)PKI & certificate chains (soon)Zero trust (soon)

2.0 Threats, Vulnerabilities & Mitigations

Phishing vs vishing vs smishing (soon)Malware types compared (soon)SQL injection (soon)Cross-site scripting (XSS) (soon)ARP & DNS poisoning (soon)Password attacks (soon)

3.0 Security Architecture

DMZ / screened subnet (soon)Full vs split tunnel VPN (soon)TLS & perfect forward secrecy (soon)Cloud shared responsibility (soon)DLP (soon)The 3-2-1 backup rule (soon)

4.0 Security Operations

What is 802.1X? SIEM explained (soon)SOAR explained (soon)IDS vs IPS (soon)SPF, DKIM & DMARC (soon)MFA & authentication factors (soon)

5.0 Security Program Management

SLE vs ALE (risk math) (soon)Risk response strategies (soon)GDPR, HIPAA & PCI DSS (soon)BCP vs DRP (soon)RPO vs RTO (soon)Penetration testing types (soon)

Test yourself in the free Kestrel Exams app

Exam-weighted Security+ SY0-701 practice — offline, no ads, no tracking.

Open Kestrel Exams →