Lesson library
0 of 32 lessons completed · 0-day streak
Course, careers and qualifications
The five SY0-701 domains, your learning path, industry skills and career opportunities, role-specific DoDM 8140.03 qualifications, and the separate security clearance process. Course completion does not award certification, employment or clearance.
Certification and clearance are separate requirements.
Domain 1: General Security Concepts (12%)
Main exam topics
Security controls; confidentiality, integrity and availability; authentication and authorization; zero trust; physical security; change management; non-repudiation; encryption, hashing, certificates and digital signatures.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
- The CIA triad and AAANot started
Why every control protects confidentiality, integrity, or availability, and how AAA governs access.
- Security control categories and typesNot started
Classify controls by who implements them and what they accomplish.
- Cryptography fundamentalsNot started
Symmetric, asymmetric, hashing, and where PKI fits.
- Study guide 1: Fundamental security conceptsNot started
CIA, frameworks, gap analysis, AAA, and how controls are categorized and typed.
- Study guide 3: Cryptographic solutionsNot started
Symmetric and asymmetric encryption, hashing, signatures, PKI, key management and data-protection uses.
Domain 2: Threats, Vulnerabilities & Mitigations (22%)
Main exam topics
Threat actors and motivations; attack surfaces; phishing and social engineering; malware; network and application attacks; software, hardware, cloud and supply-chain vulnerabilities; indicators of attack; patching, isolation, segmentation and access controls.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
- Threat actors and motivationsNot started
Who attacks, why, and with what resources.
- Social engineeringNot started
Phishing variants, pretexting, and how to verify requests.
- Malware and indicatorsNot started
Recognize malware families and the signs they leave.
- Study guide 2: Threat types, attack surfaces and social engineeringNot started
Threat actors and motivations, threat vectors, supply chain risk, and human-targeted attacks.
- Study guide 13: Indicators of malicious activityNot started
Malware types and indicators, physical and network attacks, and application attack signs.
Domain 3: Security Architecture (18%)
Main exam topics
Cloud and on-premises systems; virtualization, containers and industrial systems; shared responsibility; secure infrastructure and communications; segmentation and firewalls; protecting data at rest, in transit and in use; encryption, DLP, backups, redundancy and recovery.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
- Architecture models and cloudNot started
Cloud, on-premises, and hybrid trade-offs.
- Network segmentation and zero trustNot started
Zones, micro-segmentation, and continuous verification.
- Resilience and recoveryNot started
High availability, backups, RTO and RPO.
- Study guide 5: Secure enterprise network architectureNot started
Zones, segmentation, switching and routing security, appliances, and secure communications.
- Study guide 6: Secure cloud architecture, embedded systems and zero trustNot started
Cloud service and deployment models, shared responsibility, IaC, containers, ICS/IoT and zero trust.
- Study guide 7: Resiliency and site securityNot started
Asset management, redundancy, backups, continuity testing and physical security controls.
Domain 4: Security Operations (28%)
Main exam topics
Hardening; asset and vulnerability management; monitoring and alerting; identity and access management; automation; firewalls and endpoint protection; log interpretation; incident detection, containment, eradication and recovery; forensic evidence and chain of custody.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
- Hardening and secure baselinesNot started
Configuration standards for endpoints and servers.
- Identity and access managementNot started
Provisioning, MFA, and privileged access.
- Monitoring and alertingNot started
SIEM, IDS vs. IPS, and log analysis.
- Incident responseNot started
Preparation through lessons learned.
- Study guide 4: Identity and access managementNot started
Authentication factors, passwords, MFA, authorization models, least privilege, SSO and federation.
- Study guide 8: Vulnerability managementNot started
OS, application and cloud vulnerabilities, scanning, CVSS prioritization and remediation.
- Study guide 9: Network security capabilitiesNot started
Baselines, wireless security, network access control and enhancing detection and filtering.
- Study guide 10: Endpoint and mobile securityNot started
Hardening, EDR/XDR, host firewalls, and mobile device management and connection methods.
- Study guide 11: Application securityNot started
Secure protocols, email and file transfer, secure coding, and cloud/web application protections.
- Study guide 12: Incident response and monitoringNot started
IR lifecycle, digital forensics, log and data sources, SIEM and monitoring tools.
Domain 5: Security Program Management & Oversight (20%)
Main exam topics
Governance, policies, standards and roles; risk assessment and treatment; vendor oversight; compliance and privacy; audits and assessments; security awareness; annualized loss expectancy = single loss expectancy × annual rate of occurrence.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
- Governance and policiesNot started
Policies, standards, and procedures.
- Risk managementNot started
Risk analysis, SLE, ALE, and treatment.
- Third-party risk and complianceNot started
Vendor assessments and agreements.
- Study guide 14: Security governance, change management and automationNot started
Policies, standards, procedures, governance structures, change management and automation.
- Study guide 15: Risk management, vendors and auditsNot started
Risk analysis and responses, vendor assessment and agreements, audits and penetration tests.
- Study guide 16: Data protection, compliance and personnel policiesNot started
Data types and classification, privacy and compliance, data states and personnel/training policies.