RANGER GAMEZ

Free study guide · no sign-up

Free CompTIA Security+ (SY0-701) study guide

Everything Ranger's Cyber Patrol teaches for CompTIA Security+ (SY0-701), as a guide you can read on any phone or computer: 27 chapters and 74 lessons in plain words, with pictures, exam tips, questions to check yourself and a recap with a memory trick at the end of each chapter.

Read a chapter here, then practice it in the game, where 60 more questions, drills and mock exams show you when you are ready.

Start chapter 1 Play Ranger's Cyber Patrol

  1. 1Day 1: Controls on patrolControl categories: who or what does the work · Control types: what job the control doesObjectives 1.1
  2. 2Day 3: Who changed the price list?The CIA triad and non-repudiation · AAA: authentication, authorization, accounting · Gap analysisObjectives 1.2
  3. 3Week 1: Trust nobody (not even Ranger)Zero Trust: the control plane · Zero Trust: the data plane · Physical security · Deception and disruption technologyObjectives 1.2
  4. 4Week 2: The change boardBusiness processes that shape a change · Technical implications · Documentation and version controlObjectives 1.3
  5. 5Week 3: Locks, keys and a stolen laptopKeys: symmetric, asymmetric and PKI · Key exchange, algorithms and key length · Encryption levels and transport · Hardware and services that guard keys · ObfuscationObjectives 1.4
  6. 6Week 3: Hashes, signatures and certificatesHashing, salting and key stretching · Digital signatures and blockchain · CertificatesObjectives 1.4
  7. 7Month 2: Who's out there, and how they get inThreat actors · Motivations · Threat vectors: messages, files and devices · Attack surfaces in systems and networks · Human vectors and social engineeringObjectives 2.1, 2.2
  8. 8Month 2: The weak spots reportApplication vulnerabilities · OS-based and web-based vulnerabilities · Hardware and virtualization · Cloud, supply chain, crypto, misconfiguration · Mobile devices and…Objectives 2.3
  9. 9Month 2: Black Friday under attackMalware, part 1: how it spreads and what it wants · Malware, part 2: watchers, hiders and time bombs · Physical attacks · Network attacks · Application attacks ·…Objectives 2.4
  10. 10Month 3: Read the signs, lock it downIndicators of malicious activity · Mitigation techniques · Hardening techniquesObjectives 2.4, 2.5
  11. 11Month 6: Blueprints in the cloudsCloud and code-defined infrastructure · Network and platform architecturesObjectives 3.1
  12. 12Month 6: Walls, gates and tunnelsInfrastructure considerations · Firewalls and secure communicationObjectives 3.2
  13. 13Month 6: Know your dataData types and classifications · Methods to secure dataObjectives 3.3
  14. 14Month 6: When the lights go outStaying up · Testing, backups and powerObjectives 3.4
  15. 15Month 6: Harden everything (and count it)Baselines and hardening targets · Wireless settings and application security · Asset management, cradle to graveObjectives 4.1, 4.2
  16. 16Month 7: The scan came back redFinding vulnerabilities · Analysis, response, validation, reportingObjectives 4.3
  17. 17Month 7: The SIEM never sleeps (but you should)Monitoring and alerting · Automation and orchestrationObjectives 4.4, 4.7
  18. 18Month 7: Upgrade the defensesNetwork-level capabilities · Systems, protocols, email and endpointsObjectives 4.5
  19. 19Month 7: Who are you, and what may you touch?Identity lifecycle and SSO · Access control models and authenticationObjectives 4.6
  20. 20Month 7: The breach on Rosa's laptopIncident response · Data sources for investigationsObjectives 4.8, 4.9
  21. 21Month 7: Rules of the houseThe document stack · Who governs and who owns the dataObjectives 5.1
  22. 22Month 7: Putting a price on riskIdentify, assess, analyze · Register, appetite, strategies, BIAObjectives 5.2
  23. 23Month 7: Vendors, contracts and the lawThird-party risk · Compliance and privacyObjectives 5.3, 5.4
  24. 24Month 7: The first auditAudits and assessments · Penetration testingObjectives 5.5
  25. 25Month 8: The human firewall and the ransomware drillBuilding the awareness programObjectives 5.6, 4.8
  26. 26V8 preview: AI joins the patrol (SY0-801)V8 preview: attacks on AI systemsObjectives 2.6 V8
  27. 27V8 preview: what else is new in SY0-801V8 preview: describing threats and flaws · V8 preview: new vectors, surfaces and indicators · V8 preview: new tools and identity ideas · V8 preview: vendors, privacy…Objectives 2.1 V8, 2.3 V8, 2.5 V8, 4.1 V8, 4.5 V8, 5.3 V8
  28. A–ZGlossary803 terms and 394 acronyms, each linked to its lesson
Practice it in Ranger's Cyber PatrolThe same lessons as a story, with drills, hands-on labs and mock exams. Free, in your browser.
Play free

Questions

Is it really free?

Yes. The whole guide and Ranger's Cyber Patrol are free, with no ads and no sign-up. Nothing to download.

How is it organized?

It follows the official CompTIA Security+ (SY0-701) exam objectives. Each chapter teaches a group of objectives, then gives you questions to check yourself and a recap with a memory trick.

How should I study with it?

Read a chapter, answer its questions before you open the answers, then play the same chapter in Ranger's Cyber Patrol: drills on what you missed, hands-on practice and timed mock exams show when you are ready.

Are these the real exam questions?

No. Real exam questions are kept secret. These are practice questions written to the published objectives, and every answer is explained.

More free study guides: A+ Core 1 · A+ Core 2 · Network+ · Linux+ · AWS Cloud Practitioner · Azure Fundamentals · MD-102 · Apple Device Support

CompTIA, A+, Network+, Security+ and Linux+ are trademarks of CompTIA, Inc. Ranger Gamez is not affiliated with or endorsed by CompTIA. The practice questions are written to the published exam objectives; they are not real exam questions.