CompTIA SY0-401 Exam Syllabus Topics:

Reference: https://certification.comptia.org/certifications/security

CompTIA Security SY0-401

The SY0-401 exam is part of the CompTIA Security Certification. This exam measures your ability in secure networks, pc, cloud solution for small and big enterprise.

This certification exam is targeted for professional expert who want validate their IT security knowledge and skills. CompTIA Security SY0-401 is a benchmark for best practices in IT security, this certification covers the essential principles for network security and risk management and it is a mandatory step for your IT security career. CompTIA Security SY0-401 exam will verify if professionals have the right skills to secure networks from hackers attacks in cloud computing and on-premis infrastructures and mobile devices too. CompTIA Security meets the ISO 17024 standard and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. This is a fundamental step in your career advance as obtaining your Security will automatically boost your career because CompTIA Security is a globally recognized credential with certified professionals working in over 147 countries throughout the world. The certification is for administrators, system engineers, functional consultants, partners, and project managers, and developers which want to proof their ability in the Security world. This is a list of covered topics:

• Implement security configuration parameters on network devices and other technologies.
• Explain the importance of security related awareness and training
• Given a scenario, use secure network administration principles.
• Explain types of malware
• Explain types of application attacks
• Explain the importance of risk related concepts.
• Compare and contrast physical security and environmental controls
• Explain the importance of application security controls and techniques
• Given a scenario, use appropriate tools and techniques to discover security threats and vulnerabilities
• Summarize common incident response procedures.
• Summarize the security implications of integrating systems and data with third parties.
• Given a scenario, implement basic forensic procedures
• Summarize risk management best practices
• Given a scenario, use appropriate PKI, certificate management and associated components
• Explain network design elements and components.
• Given a scenario, select the appropriate solution to establish host security
• Given a scenario, utilize general cryptography concepts
• Summarize various types of attacks
• Given a scenario, select the appropriate control to meet the goals of security
• Given a scenario, implement appropriate risk mitigation strategies.
• Given a scenario, select the appropriate authentication, authorization or access control
• Given a scenario, use appropriate cryptographic methods
• Compare and contrast the function and purpose of authentication services
• Explain types of wireless attacks