CompTIA Security+ (SY0-701) — Préparation complète
Notes de cours illustrées, quiz par domaine et méthode éprouvée pour réussir le SY0-701 du premier coup.
0 participants15h 30minIntermédiaire
Par DID-ACTE Official — L’équipe pédagogique officielle de DID-ACTE
$49.99
Remboursement sous 14 jours · Accès à vie · Certificat inclus
Ce que vous apprendrez
- Maîtriser le domaine ACR : Acronyms & Quick Reference
- Maîtriser le domaine D1 : General Security Concepts
- Maîtriser le domaine D2 : Threats, Vulnerabilities, and Mitigations
- Maîtriser le domaine D3 : Security Architecture
- Maîtriser le domaine D4 : Security Operations
- Maîtriser le domaine D5 : Security Program Management & Oversight
Programme de la formation
6 sections · 385 leçons · 15h 30min
ACR — Acronyms & Quick Reference13 leçons
- Acronyms - Authentication & Access ControlAperçu2min
- Acronyms - Symmetric & Asymmetric Cryptography2min
- Acronyms - Hashing & Integrity2min
- Acronyms - Secure Network Protocols2min
- Acronyms - Detection & Security Tools3min
- Acronyms - Attacks & Threats3min
- Acronyms - Wireless & Mobile3min
- Acronyms - Cloud & Virtualization3min
- Acronyms - Risk Management3min
- Acronyms - Compliance & Frameworks3min
- Acronyms - Most Commonly Confused3min
- Acronyms - Master Reference A-L3min
- Acronyms - Master Reference M-Z4min
D1 — General Security Concepts19 leçons
- Compare and Contrast Various Types of Security Controls4min
- The CIA Triad and Non-Repudiation2min
- AAA Framework (Authentication, Authorization, Accounting)3min
- Zero Trust Architecture2min
- Physical Security Controls2min
- Deception and Disruption Technologies1min
- Gap Analysis2min
- Change Management Processes2min
- Symmetric vs Asymmetric Encryption2min
- Technical Implications of Changes2min
- Hashing, Salting, and Key Stretching2min
- Documentation and Version Control2min
- Obfuscation Techniques2min
- PKI and Digital Certificates2min
- Encryption Levels and Scope2min
- Cryptographic Tools (TPM, HSM, Secure Enclave)3min
- Blockchain and Open Public Ledger2min
- Certificate Types and Trust Hierarchy3min
- Quiz — General Security Concepts10min
D2 — Threats, Vulnerabilities, and Mitigations69 leçons
- Threat Actors Overview2min
- Nation-State Actors2min
- Unskilled Attackers (Script Kiddies)2min
- Hacktivists2min
- Insider Threats2min
- Organized Crime2min
- Shadow IT2min
- Threat Actor Attributes3min
- Threat Actor Motivations3min
- Threat Actors - Comprehensive Review3min
- Threat Vectors vs Attack Surfaces2min
- Message-Based Threat Vectors2min
- Image, File, Voice, and Removable Device Vectors2min
- Vulnerable Software2min
- Unsupported Systems and Applications2min
- Unsecure Networks (Wireless, Wired, Bluetooth)2min
- Open Service Ports and Default Credentials2min
- Supply Chain Vectors3min
- Human Vectors and Social Engineering2min
- Phishing, Vishing, and Smishing2min
- Pretexting and Impersonation2min
- Business Email Compromise (BEC)2min
- Watering Hole, Typosquatting, and Brand Impersonation3min
- Misinformation and Disinformation2min
- Threat Vectors and Attack Surfaces - Review3min
- Memory Injection2min
- Buffer Overflow3min
- Race Conditions and TOC/TOU3min
- Malicious Updates3min
- Operating System (OS) Vulnerabilities3min
- SQL Injection (SQLi)3min
- Cross-Site Scripting (XSS)3min
- VM Escape and Resource Reuse3min
- Cloud-Specific Vulnerabilities3min
- Supply Chain Vulnerabilities3min
- Cryptographic Vulnerabilities3min
- Misconfiguration Vulnerabilities3min
- Sideloading and Jailbreaking4min
- Zero-Day Vulnerabilities3min
- Domain 2.3 - Complete Review Cheat Sheet4min
- Malware Basics: Virus vs Worm vs Trojan3min
- Segmentation: Dividing the Network2min
- Malware: Ransomware, Spyware, and Keylogger3min
- Isolation: Complete Separation2min
- Access Control: ACL and Permissions2min
- Malware: Logic Bomb, Rootkit, and Bloatware3min
- Least Privilege: Only What You Need2min
- Physical Attacks: Brute Force, RFID, Environmental3min
- DDoS Attacks: Amplified and Reflected3min
- Application Allow List (Whitelist)2min
- Patching: Closing Security Holes2min
- On-Path and Credential Replay Attacks3min
- Encryption: Protecting Data2min
- DNS Attacks and Wireless Attacks3min
- Monitoring: Watching for Threats2min
- Application Attacks: Replay, Privilege Escalation, Forgery4min
- Cryptographic Attacks: Downgrade, Collision, Birthday3min
- Configuration Enforcement and Baselines2min
- Decommissioning: Secure Retirement2min
- Password Attacks: Spraying vs Brute Force3min
- Indicators of Compromise (IoC)4min
- Hardening: Host-Based Firewall2min
- Domain 2.4 - Complete Review Cheat Sheet4min
- Hardening: HIPS (Host-Based IPS)2min
- Hardening: Disabling Ports and Protocols2min
- Hardening: Default Password Changes2min
- Hardening: Endpoint Protection and Unnecessary Software2min
- Domain 2.5 - Complete Review Cheat Sheet2min
- Quiz — Threats, Vulnerabilities, and Mitigations10min
D3 — Security Architecture54 leçons
- Cloud Models: IaaS, PaaS, SaaS2min
- Cloud Responsibility Matrix2min
- Hybrid Cloud and Third-Party Vendors2min
- On-Premises vs Cloud Architecture2min
- Centralized vs Decentralized Architecture2min
- Infrastructure as Code (IaC)2min
- Serverless Architecture2min
- Microservices Architecture2min
- Containerization and Virtualization2min
- Network Infrastructure: Segmentation and SDN2min
- IoT Security Challenges2min
- ICS/SCADA and Industrial Systems2min
- RTOS and Embedded Systems2min
- High Availability and Resilience2min
- Architecture Considerations: Cost, Scale, Risk2min
- Domain 3.1 - Complete Review Cheat Sheet2min
- Device Placement and Security Zones2min
- Attack Surface and Connectivity2min
- Failure Modes: Fail-Open vs Fail-Closed2min
- Device Attributes: Active vs Passive2min
- Device Attributes: Inline vs Tap/Monitor2min
- Network Appliances: Jump Server and Proxy Server2min
- Network Appliances: IPS, IDS, and Load Balancer2min
- Port Security: 802.1X and EAP2min
- Firewall Types: WAF, UTM, NGFW2min
- Firewall Layers: Layer 4 vs Layer 72min
- VPN and Remote Access2min
- Tunneling: TLS and IPSec2min
- SD-WAN and SASE2min
- Selection of Effective Controls2min
- Domain 3.2 - Complete Review Cheat Sheet3min
- Data Types: Regulated and Business Data2min
- Data Types: Human and Non-Human Readable2min
- Data Classification Levels2min
- Data States: At Rest, In Transit, In Use2min
- Data Sovereignty and Geolocation2min
- Encryption: Protecting Data Confidentiality2min
- Hashing: Verifying Data Integrity2min
- Data Masking and Tokenization2min
- Obfuscation and Segmentation3min
- Permission Restrictions and Geographic Controls2min
- Domain 3.3 - Complete Review Cheat Sheet3min
- High Availability: Load Balancing vs Clustering2min
- Site Considerations: Hot, Warm, Cold Sites2min
- Geographic Dispersion2min
- Platform Diversity and Multi-Cloud2min
- Continuity of Operations and Capacity Planning2min
- Testing: Tabletop, Failover, and Simulation2min
- Backups: Types and Strategies2min
- Snapshots, Replication, and Journaling2min
- Power: UPS and Generators3min
- Recovery Metrics: RTO, RPO, MTBF, MTTR2min
- Domain 3.4 - Complete Review Cheat Sheet3min
- Quiz — Security Architecture10min
D4 — Security Operations124 leçons
- Secure Baselines: Establish, Deploy, Maintain2min
- Hardening Targets: Workstations and Servers2min
- Hardening Targets: Network Devices2min
- Hardening: IoT, ICS/SCADA, Embedded Systems2min
- Wireless Installation: Site Surveys and Heat Maps2min
- Mobile Device Management (MDM)2min
- Mobile Deployment: BYOD, COPE, CYOD2min
- Mobile Connection Methods2min
- Wireless Security: WPA3 and Authentication2min
- Application Security: Input Validation and Code Analysis2min
- Sandboxing and Monitoring3min
- Domain 4.1 - Complete Review Cheat Sheet3min
- Asset Management: Why It Matters for Security2min
- Acquisition and Procurement Process2min
- Assignment and Accounting: Ownership2min
- Assignment and Accounting: Classification2min
- Monitoring and Asset Tracking: Inventory2min
- Monitoring and Asset Tracking: Enumeration2min
- Disposal: Sanitization Methods (Clear, Purge, Destroy)2min
- Disposal: Physical Destruction Methods2min
- Disposal: Certification and Documentation2min
- Data Retention: How Long to Keep Data2min
- Domain 4.2 - Complete Review Cheat Sheet3min
- Vulnerability Management: The Big Picture2min
- Identification: Vulnerability Scanning2min
- Application Security: Static vs Dynamic Analysis2min
- Package Monitoring and Software Composition2min
- Threat Feeds: OSINT, Proprietary, and Dark Web2min
- Penetration Testing2min
- Responsible Disclosure and Bug Bounty Programs2min
- Analysis: False Positives and False Negatives2min
- CVSS: Common Vulnerability Scoring System2min
- CVE and Vulnerability Classification2min
- Risk Analysis: Exposure Factor and Context2min
- Vulnerability Response and Remediation3min
- Validation and Verification of Remediation2min
- Vulnerability Reporting3min
- Domain 4.3 - Complete Review Cheat Sheet2min
- Security Monitoring: The Big Picture2min
- Monitoring Computing Resources2min
- Log Aggregation2min
- Alerting and Alert Response2min
- Alert Tuning and Quarantine2min
- Scanning, Reporting, and Archiving2min
- SCAP and Security Benchmarks2min
- Agent-Based vs Agentless Monitoring2min
- SIEM: Security Information and Event Management2min
- Antivirus and Data Loss Prevention (DLP)2min
- SNMP Traps and NetFlow3min
- Vulnerability Scanners in Monitoring3min
- Domain 4.4 - Complete Review Cheat Sheet2min
- Enterprise Security Capabilities: The Big Picture2min
- Firewall Configuration: Rules and Access Lists2min
- Firewall: Screened Subnets (DMZ)2min
- IDS/IPS: Signatures and Trends2min
- Web Filtering and Content Control2min
- Operating System Security: Group Policy and SELinux3min
- Secure Protocol Implementation2min
- DNS Filtering2min
- Email Security: SPF, DKIM, and DMARC2min
- File Integrity Monitoring (FIM)2min
- Network Access Control (NAC)2min
- EDR and XDR: Endpoint and Extended Detection3min
- User Behavior Analytics (UBA/UEBA)3min
- Domain 4.5 - Complete Review Cheat Sheet2min
- Identity and Access Management: The Big Picture2min
- Automation and Orchestration: The Big Picture2min
- Provisioning and De-provisioning2min
- Permission Assignments and Implications2min
- Use Case: User Provisioning2min
- Use Case: Resource Provisioning2min
- Identity Proofing and Attestation2min
- Use Case: Guard Rails2min
- Federation2min
- Use Case: Security Groups and Ticket Management2min
- Single Sign-On: LDAP, OAuth, and SAML2min
- Use Case: Enabling/Disabling Services and Access2min
- Interoperability2min
- Access Controls: MAC and DAC2min
- Use Case: Continuous Integration and Testing2min
- Access Controls: RBAC, Rule-Based, and ABAC2min
- Use Case: Integrations and APIs2min
- Time-of-Day Restrictions and Least Privilege3min
- Benefits: Efficiency and Enforcing Baselines2min
- Benefits: Standard Configurations and Secure Scaling2min
- Multifactor Authentication: Factors2min
- Benefits: Employee Retention and Workforce Multiplier2min
- Multifactor Authentication: Implementations2min
- Password Concepts and Best Practices3min
- Considerations: Complexity and Cost2min
- Considerations: Single Point of Failure2min
- Privileged Access Management (PAM)3min
- Domain 4.6 - Complete Review Cheat Sheet2min
- Considerations: Technical Debt and Ongoing Supportability2min
- Domain 4.7 - Complete Review Cheat Sheet2min
- Incident Response: The Big Picture2min
- IR Phase 1: Preparation2min
- IR Phase 2: Detection and Analysis2min
- IR Phase 3: Containment2min
- IR Phase 4: Eradication2min
- IR Phase 5: Recovery3min
- IR Phase 6: Lessons Learned3min
- Training and Testing: Tabletop Exercises3min
- Training and Testing: Simulations3min
- Root Cause Analysis3min
- Threat Hunting3min
- Digital Forensics: Overview and Legal Hold3min
- Digital Forensics: Chain of Custody3min
- Digital Forensics: Acquisition and Preservation3min
- Digital Forensics: Reporting and E-Discovery3min
- Domain 4.8 - Complete Review Cheat Sheet3min
- Data Sources for Investigation: The Big Picture2min
- Firewall Logs2min
- Application Logs2min
- Endpoint Logs2min
- OS-Specific Security Logs3min
- IPS/IDS Logs3min
- Network Logs3min
- Metadata3min
- Vulnerability Scans3min
- Automated Reports and Dashboards3min
- Packet Captures3min
- Domain 4.9 - Complete Review Cheat Sheet3min
- Quiz — Security Operations10min
D5 — Security Program Management & Oversight106 leçons
- Security Governance: The Big Picture2min
- Guidelines vs. Policies vs. Standards vs. Procedures2min
- Security Policies: AUP and Information Security2min
- Business Continuity and Disaster Recovery Policies2min
- Incident Response and Change Management Policies2min
- SDLC Policy3min
- Security Standards2min
- Security Procedures2min
- External Considerations2min
- Monitoring and Revision2min
- Governance Structures3min
- Data Roles: Owners and Controllers3min
- Data Roles: Processors and Custodians/Stewards3min
- Domain 5.1 - Complete Review Cheat Sheet3min
- Third-Party Risk Management: The Big Picture2min
- Risk Management Process: The Big Picture2min
- Vendor Assessment Techniques2min
- Risk Identification2min
- Penetration Testing for Vendor Assessment2min
- Risk Assessment Types2min
- Qualitative vs. Quantitative Risk Analysis2min
- Right-to-Audit Clause2min
- Internal and Independent Audits2min
- Quantitative Analysis: SLE, ALE, ARO2min
- Supply Chain Analysis2min
- Probability, Likelihood, Exposure Factor, and Impact2min
- Vendor Selection and Due Diligence2min
- Risk Register3min
- Risk Tolerance vs. Risk Threshold2min
- Conflict of Interest in Vendor Selection2min
- Agreement Types Overview (SLA, MOA, MOU, MSA)2min
- Risk Appetite3min
- Service Level Agreement (SLA) Deep Dive2min
- Risk Management Strategies2min
- Work Order (WO) and Statement of Work (SOW)2min
- Risk Acceptance: Exemptions and Exceptions3min
- Non-Disclosure Agreement (NDA)2min
- Risk Reporting3min
- Business Impact Analysis: RTO and RPO2min
- Business Partners Agreement (BPA)2min
- Business Impact Analysis: MTTR and MTBF3min
- Vendor Monitoring2min
- Domain 5.2 - Complete Review Cheat Sheet2min
- Questionnaires for Vendor Assessment2min
- Rules of Engagement2min
- Domain 5.3 - Complete Review Cheat Sheet2min
- Security Compliance: The Big Picture2min
- Compliance Reporting: Internal2min
- Compliance Reporting: External2min
- Consequences of Non-Compliance: Fines and Sanctions2min
- Consequences of Non-Compliance: Reputational Damage2min
- Consequences of Non-Compliance: Loss of License and Contractual Impacts2min
- Compliance Monitoring: Due Diligence and Due Care2min
- Compliance Monitoring: Attestation and Acknowledgement2min
- Compliance Monitoring: Internal and External2min
- Compliance Monitoring: Automation2min
- Privacy: Legal Implications Overview2min
- Privacy: Data Subject Rights2min
- Privacy: Controller vs. Processor2min
- Privacy: Data Ownership and Inventory2min
- Privacy: Data Retention2min
- Privacy: Right to Be Forgotten2min
- Domain 5.4 - Complete Review Cheat Sheet2min
- Audits and Assessments: The Big Picture2min
- Attestation2min
- Internal Audits: Overview2min
- Internal Audits: Compliance2min
- Internal Audits: Audit Committee2min
- Internal Audits: Self-Assessments2min
- External Audits: Overview2min
- External Audits: Regulatory2min
- External Audits: Examinations2min
- External Audits: Assessment2min
- External Audits: Independent Third-Party Audit2min
- Penetration Testing: Overview2min
- Penetration Testing: Physical2min
- Penetration Testing: Offensive (Red Team)2min
- Penetration Testing: Defensive (Blue Team)2min
- Penetration Testing: Integrated (Purple Team)2min
- Penetration Testing: Known Environment (White Box)2min
- Penetration Testing: Partially Known Environment (Gray Box)2min
- Penetration Testing: Unknown Environment (Black Box)2min
- Reconnaissance: Passive2min
- Reconnaissance: Active2min
- Domain 5.5 - Complete Review Cheat Sheet2min
- Security Awareness: The Big Picture2min
- Phishing Campaigns2min
- Recognizing a Phishing Attempt2min
- Responding to Reported Suspicious Messages2min
- Anomalous Behavior Recognition: Overview2min
- Anomalous Behavior: Risky2min
- Anomalous Behavior: Unexpected2min
- Anomalous Behavior: Unintentional2min
- User Guidance and Training: Policies and Handbooks2min
- User Guidance and Training: Situational Awareness2min
- User Guidance and Training: Insider Threat2min
- User Guidance and Training: Password Management2min
- User Guidance and Training: Removable Media and Cables2min
- User Guidance and Training: Social Engineering2min
- User Guidance and Training: Operational Security (OPSEC)2min
- User Guidance and Training: Hybrid/Remote Work2min
- Reporting and Monitoring: Initial and Recurring2min
- Security Awareness Program: Development2min
- Security Awareness Program: Execution2min
- Domain 5.6 - Complete Review Cheat Sheet2min
- Quiz — Security Program Management & Oversight10min
Description
Réussissez votre CompTIA Security+
Ce cours couvre tous les domaines officiels de la certification, avec des notes de cours claires et illustrées, suivies d'un quiz de validation par domaine.
Au programme
- ACR — Acronyms & Quick Reference
- D1 — General Security Concepts
- D2 — Threats, Vulnerabilities, and Mitigations
- D3 — Security Architecture
- D4 — Security Operations
- D5 — Security Program Management & Oversight
💡 Pour un entraînement complet type examen (examens blancs chronométrés, questions interactives PBQ, flashcards et coach IA), l'abonnement DID-ACTE complète parfaitement ce cours.
Prérequis
- Aucun prérequis — le cours part des fondamentaux
- Un ordinateur et de la régularité
Pour qui ?
- Candidats à la certification
- Professionnels IT en montée en compétence
- Étudiants en cybersécurité/réseaux
Votre formateur
DID-ACTE Official
L’équipe pédagogique officielle de DID-ACTE
Cours officiels DID-ACTE : préparation aux certifications IT (CompTIA Security+, Network+) avec examens blancs, exercices pratiques interactifs et coach IA. Chaque cours est construit sur les objectifs officiels des certifications et maintenu à jour.
Avis des participants
Aucun avis pour le moment — soyez parmi les premiers participants.
$49.99
Remboursement sous 14 jours · Accès à vie · Certificat inclus