.jpg){kind=logo}
THAP-SY0-601.AB1
THAP - CompTIA Security+ (SY0-601)
Beginner Self-paced · 1 year access
64 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
01 / Lessons & labs
See exactly what you will learn and practice
Lessons
37 Interactive Lessons · 302 topics01 Introduction 3 topics +
- Goals and Methods
- Who Should Read This Course?
- CompTIA Security+ Exam Topics
02 Comparing and Contrasting Different Types of Social Engineering Techniques 4 topics · 2 LiveLab +
- Social Engineering Fundamentals
- User Security Awareness Education
- Knowledge Check
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
03 Analyzing Potential Indicators to Determine the Type of Attack 8 topics · 6 LiveLab +
- Malicious Software (Malware)
- Password Attacks
- Physical Attacks
- Adversarial Artificial Intelligence
- Supply-Chain Attacks
- Cloud-based vs. On-premises Attacks
- Cryptographic Attacks
- Review Key Topics
6 LiveLab in this lesson — see the labs panel →
04 Analyzing Potential Indicators Associated with Application Attacks 18 topics · 3 LiveLab +
- Privilege Escalation
- Cross-Site Scripting (XSS) Attacks
- Injection Attacks
- Pointer/Object Dereference
- Directory Traversal
- Buffer Overflows
- Race Conditions
- Error Handling
- Improper Input Handling
- Replay Attacks
- Request Forgeries
- Application Programming Interface (API) Attacks
- Resource Exhaustion
- Memory Leaks
- Secure Socket Layer (SSL) Stripping
- Driver Manipulation
- Pass the Hash
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
05 Analyzing Potential Indicators Associated with Network Attacks 7 topics · 1 LiveLab +
- Wireless Attacks
- On-Path Attacks
- Layer 2 Attacks
- Domain Name System (DNS) Attacks
- Distributed Denial-of-Service (DDoS) Attacks
- Malicious Code or Script Execution Attacks
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
06 Understanding Different Threat Actors, Vectors, and Intelligence Sources 6 topics +
- Actors and Threats
- Attributes of Threat Actors
- Attack Vectors
- Threat Intelligence and Threat Intelligence Sources
- Research Sources
- Review Key Topics
07 Understanding the Security Concerns Associated with Various Types of Vulnerabilities 8 topics +
- Cloud-based vs. On-premises Vulnerabilities
- Zero-day Vulnerabilities
- Weak Configurations
- Third-party Risks
- Improper or Weak Patch Management
- Legacy Platforms
- The Impact of Cybersecurity Attacks and Breaches
- Review Key Topics
08 Summarizing the Techniques Used in Security Assessments 5 topics +
- Threat Hunting
- Vulnerability Scans
- Logs and Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Review Key Topics
09 Understanding the Techniques Used in Penetration Testing 4 topics · 2 LiveLab +
- Penetration Testing
- Passive and Active Reconnaissance
- Exercise Types
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
10 Understanding the Importance of Security Concepts in an Enterprise Environment 5 topics · 1 LiveLab +
- Configuration Management
- Data Sovereignty and Data Protection
- Site Resiliency
- Deception and Disruption
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
11 Summarizing Virtualization and Cloud Computing Concepts 5 topics +
- Cloud Models
- Cloud Service Providers
- Cloud Architecture Components
- Virtual Machine (VM) Sprawl Avoidance and VM Escape Protection
- Review Key Topics
12 Summarizing Secure Application Development, Deployment, and Automation Concepts 9 topics +
- Software Development Environments and Methodologies
- Application Provisioning and Deprovisioning
- Software Integrity Measurement
- Secure Coding Techniques
- Open Web Application Security Project (OWASP)
- Software Diversity
- Automation/Scripting
- Elasticity and Scalability
- Review Key Topics
13 Summarizing Authentication and Authorization Design Concepts 6 topics +
- Authentication Methods
- Biometrics
- Multifactor Authentication (MFA) Factors and Attributes
- Authentication, Authorization, and Accounting (AAA)
- Cloud vs. On-premises Requirements
- Review Key Topics
14 Implementing Cybersecurity Resilience 9 topics · 3 LiveLab +
- Redundancy
- Replication
- On-premises vs. Cloud
- Backup Types
- Non-persistence
- High Availability
- Restoration Order
- Diversity
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
15 Understanding the Security Implications of Embedded and Specialized Systems 14 topics +
- Embedded Systems
- Supervisory Control and Data Acquisition (SCADA)/Industrial Control Systems (ICS)
- Internet of Things (IoT)
- Specialized Systems
- Voice over IP (VoIP)
- Heating, Ventilation, and Air Conditioning (HVAC)
- Drones
- Multifunction Printers (MFP)
- Real-Time Operating Systems (RTOS)
- Surveillance Systems
- System on a Chip (SoC)
- Communication Considerations
- Embedded System Constraints
- Review Key Topics
16 Understanding the Importance of Physical Security Controls 24 topics +
- Bollards/Barricades
- Access Control Vestibules
- Badges
- Alarms
- Signage
- Cameras
- Closed-Circuit Television (CCTV)
- Industrial Camouflage
- Personnel
- Locks
- USB Data Blockers
- Lighting
- Fencing
- Fire Suppression
- Sensors
- Drones
- Visitor Logs
- Faraday Cages
- Air Gap
- Screened Subnet (Previously Known as Demilitarized Zone [DMZ])
- Protected Cable Distribution
- Secure Areas
- Secure Data Destruction
- Review Key Topics
17 Summarizing the Basics of Cryptographic Concepts 21 topics · 4 LiveLab +
- Digital Signatures
- Key Length
- Key Stretching
- Salting
- Hashing
- Key Exchange
- Elliptic-Curve Cryptography
- Perfect Forward Secrecy
- Quantum
- Post-Quantum
- Ephemeral
- Modes of Operation
- Blockchain
- Cipher Suites
- Symmetric vs. Asymmetric Encryption
- Lightweight Cryptography
- Steganography
- Homomorphic Encryption
- Common Use Cases
- Limitations
- Review Key Topics
4 LiveLab in this lesson — see the labs panel →
18 Implementing Secure Protocols 3 topics · 3 LiveLab +
- Protocols
- Use Cases
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
19 Implementing Host or Application Security Solutions 15 topics · 2 LiveLab +
- Endpoint Protection
- Antimalware
- Next-Generation Firewall
- Host-based Intrusion Prevention System
- Host-based Intrusion Detection System
- Host-based Firewall
- Boot Integrity
- Database
- Application Security
- Hardening
- Self-Encrypting Drive/Full-Disk Encryption
- Hardware Root of Trust
- Trusted Platform Module
- Sandboxing
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
20 Implementing Secure Network Designs 16 topics · 11 LiveLab +
- Load Balancing
- Network Segmentation
- Virtual Private Network
- DNS
- Network Access Control
- Out-of-Band Management
- Port Security
- Network Appliances
- Access Control List
- Route Security
- Quality of Service
- Implications of IPv6
- Port Spanning/Port Mirroring
- Monitoring Services
- File Integrity Monitors
- Review Key Topics
11 LiveLab in this lesson — see the labs panel →
21 Installing and Configuring Wireless Security Settings 5 topics · 2 LiveLab +
- Cryptographic Protocols
- Authentication Protocols
- Methods
- Installation Considerations
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
22 Implementing Secure Mobile Solutions 6 topics · 1 LiveLab +
- Connection Methods and Receivers
- Mobile Device Management
- Mobile Device Management Enforcement and Monitoring
- Mobile Devices
- Deployment Models
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
23 Applying Cybersecurity Solutions to the Cloud 4 topics +
- Cloud Security Controls
- Solutions
- Cloud Native Controls vs. Third-Party Solutions
- Review Key Topics
24 Implementing Identity and Account Management Controls 4 topics · 3 LiveLab +
- Identity
- Account Types
- Account Policies
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
25 Implementing Authentication and Authorization Solutions 4 topics · 2 LiveLab +
- Authentication Management
- Authentication/Authorization
- Access Control Schemes
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
26 Implementing Public Key Infrastructure 5 topics · 2 LiveLab +
- Public Key Infrastructure
- Types of Certificates
- Certificate Formats
- PKI Concepts
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
27 Using the Appropriate Tool to Assess Organizational Security 9 topics · 12 LiveLab +
- Network Reconnaissance and Discovery
- File Manipulation
- Shell and Script Environments
- Packet Capture and Replay
- Forensics
- Exploitation Frameworks
- Password Crackers
- Data Sanitization
- Review Key Topics
12 LiveLab in this lesson — see the labs panel →
28 Summarizing the Importance of Policies, Processes, and Procedures for Incident Response 12 topics +
- Incident Response Plans
- Incident Response Process
- Exercises
- Attack Frameworks
- Stakeholder Management
- Communication Plan
- Disaster Recovery Plan
- Business Continuity Plan
- Continuity of Operations Planning (COOP)
- Incident Response Team
- Retention Policies
- Review Key Topics
29 Using Appropriate Data Sources to Support an Investigation 11 topics · 2 LiveLab +
- Vulnerability Scan Output
- SIEM Dashboards
- Log Files
- syslog/rsyslog/syslog-ng
- journalctl
- NXLog
- Bandwidth Monitors
- Metadata
- NetFlow/sFlow
- Protocol Analyzer Output
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
30 Applying Mitigation Techniques or Controls to Secure an Environment 7 topics +
- Reconfigure Endpoint Security Solutions
- Configuration Changes
- Isolation
- Containment
- Segmentation
- SOAR
- Review Key Topics
31 Understanding the Key Aspects of Digital Forensics 10 topics · 2 LiveLab +
- Documentation/Evidence
- Acquisition
- On-premises vs. Cloud
- Integrity
- Preservation
- E-discovery
- Data Recovery
- Nonrepudiation
- Strategic Intelligence/Counterintelligence
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
32 Comparing and contrasting the Various Types of Controls 3 topics +
- Control Category
- Control Types
- Review Key Topics
33 Understanding the Importance of Applicable Regul...orks That Impact Organizational Security Posture 4 topics +
- Regulations, Standards, and Legislation
- Key Frameworks
- Benchmarks and Secure Configuration Guides
- Review Key Topics
34 Understanding the Importance of Policies to Organizational Security 7 topics +
- Personnel Policies
- Diversity of Training Techniques
- Third-Party Risk Management
- Data Concepts
- Credential Policies
- Organizational Policies
- Review Key Topics
35 Summarizing Risk Management Processes and Concepts 6 topics +
- Risk Types
- Risk Management Strategies
- Risk Analysis
- Disaster Analysis
- Business Impact Analysis
- Review Key Topics
36 Understanding Privacy and Sensitive Data Concepts in Relation to Security 12 topics +
- Organizational Consequences of Privacy and Data Breaches
- Notifications of Breaches
- Data Types and Asset Classification
- PII
- PHI
- Privacy Enhancing Technologies
- Roles and Responsibilities
- Information Lifecycle
- Impact Assessment
- Terms of Agreement
- Privacy Notice
- Review Key Topics
37 Final Preparation 3 topics +
- Hands-on Activities
- Suggested Plan for Final Review and Study
- Summary
Hands-On Labs Our edge
64 LiveLabs- Using SET
- Performing Website Reconnaissance
- Cracking a Password Using the John the Ripper Tool
- Simulating a DoS Attack
- Using Rainbow Tables
- Detecting Rootkits
- Creating a Remote Access Trojan (RAT)
- Using NetBus in Windows 10
- Defending Against a Buffer Overflow Attack
- Performing Session Hijacking Using Burp Suite
- Exploiting a Website Using SQL Injection
- Performing ARP Spoofing
- Identifying Search Options in Metasploit
- Using OWASP ZAP
- Setting Up a Honeypot
- Configuring RAID 5
- Taking an Incremental Backup
- Taking a Full Backup
- Observing an MD5-Generated Hash Value
- Performing Symmetric Encryption
- Examining Asymmetric Encryption
- Hiding Text Using Steganography
- Configuring an SSH Server
- Configuring DNSSEC on an Active Directory Integrated Zone
- Using the ifconfig Command
- Configuring Inbound Rules for a Firewall
- Using Windows Firewall
- Configuring a Tunnel Group for Clientless SSL VPN
- Configuring Clientless SSL VPNs on ASA
- Configuring a Site-to-Site IPsec VPN Topology
- Performing IDS Configuration with Snort
- Using Performance Monitor
- Creating a VLAN and Viewing its Assignment to Port Mapping
- Creating a DMZ Zone
- Setting Up a VPN Server with Windows Server 2016
- Implementing Port Security
- Configuring a BPDU Guard on a Switch Port
- Configuring NetFlow and NetFlow Data Export
- Turning on Airplane Mode of an iPhone
- Setting Up a VPN in Android
- Performing a MITM Attack
- Stopping Permissions Inheritance
- Managing NTFS Permissions
- Creating a User Account in the Active Directory
- Configuring IPSec
- Creating a Network Policy for 802.1X
- Revoking and Exporting a Certificate
- Examining PKI Certificates
- Performing Memory Analysis with Volatility
- Using Wireshark
- Manipulating a File in Linux
- Conducting Vulnerability Scanning Using Nessus
- Using the theHarvester Tool
- Creating Reverse and Bind Shells Using Netcat
- Using the netstat Command
- Using the hping Program
- Using pathping and ping Commands
- Scanning Live Systems Using Nmap
- Using dig and nslookup Commands
- Tracing a Route Using Tracert
- Viewing the System Logs
- Using Windows Event Viewer
- Completing the Chain of Custody
- Analyzing Forensics with Autopsy
Labs run in your browser — nothing to install.
02 / FAQs
Questions before you start
Prepare for THAP - CompTIA Security+ (SY0-601)
One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.
- 1 year of full access
- 64 LiveLab included
- Certificate of completion
No credit card required