CompTIA Exam Prep - ITF+, A+, Network+, Security+, CySA+

CompTIA SecurityX (CAS-005) places identity squarely inside the Security Architecture domain, which carries 27% of the exam — the single heaviest domain on the test. Objective 2.4, "Apply security concepts to access, authentication, and authorization design," pushes well past the vocabulary that CompTIA Security+ (SY0-701) tests. Instead of just naming a protocol, CAS-005 expects you to reason like the enterprise architect who actually assembles an access control plane: provisioning pipelines, federation trust relationships, policy decision and enforcement points, attestation, and the public key infrastructure underwriting all of it. This guide walks through each sub-concept Objective 2.4 expects you to design around, building on our earlier breakdowns of access control models , federation , and PKI structure . Why CAS-005 Treats IAM as Architecture, Not Terminology Security+ candidates need to recognize that RBAC, ABAC, SAML, and OAuth exist and roughly what each does. ...

Every device, network, and cloud service covered on the CompTIA Tech+ (FC0-U71) exam eventually depends on one thing: a way to reach the internet. Objective 2.7 asks candidates to recognize the major internet service types — fiber, cable, DSL, and wireless — and to understand how each one gets data from a home or business to the wider internet. This guide breaks down how each technology works, where it shines, where it falls short, and what Tech+ test-takers need to remember on exam day. If you have already read our walkthrough of Basic Networking Concepts for Tech+ or Common Network Devices for Tech+ , think of this article as the missing piece: those posts explain what happens inside a LAN, while this one explains how that LAN actually connects to the outside world. Why Internet Service Types Matter for Tech+ (FC0-U71) Objective 2.7 is a small slice of the Infrastructure domain, but it shows up in real life constantly — anyone who has ever compared internet p...

Most new IT professionals assume device security means installing antivirus software and calling it done. CompTIA's Tech+ (FC0-U71) exam tests something broader: Objective 6.2, "Explain methods to secure devices and security best practices," expects candidates to recognize how social engineering works, what the standard device-hardening controls actually do, how physical security fits into the picture, and what makes a browsing session safe rather than risky. This sits inside Domain 6.0 (Security), which carries 19% of the exam — tied for the single largest domain, alongside Infrastructure and Software Development Concepts. This guide builds on the account-level concepts from our Security Fundamentals for Tech+ article (the CIA triad and AAA) and pairs with our Web Browser Features for Tech+ guide, since safe browsing habits live partly in the browser itself. Here, the focus shifts to the device: what threatens it, what protects it, and what a candidate needs to recog...

Most PenTest+ study plans spend weeks on exploitation and barely a day on what happens after the shell pops. That's a mistake on the real PT0-003 exam: Domain 5.0, Post-Exploitation and Lateral Movement, is worth 14% of your score , and its final objective — 5.4, Cleanup and Restoration Activities — is one of the most frequently misunderstood topics on the test. It's also one of the most important skills in the actual job, since a penetration tester who leaves backdoors, test accounts, or leftover tools on a client network has effectively created a new security incident instead of reporting one. This guide walks through exactly what "cleanup" means on PT0-003: what has to be removed, what has to be preserved, and why examiners test this as its own distinct skill rather than folding it into exploitation. Why Cleanup Is Its Own PT0-003 Objective CompTIA splits Domain 5 into four objectives: establishing persistence (5.1), moving laterally (5.2), staging and exfiltr...

Domain 3.0, Security Engineering, carries the single heaviest weight on the CompTIA SecurityX (CAS-005) exam at 31% — and objective 3.2, endpoint and server security, is where a huge share of those questions live. CAS-005 does not test endpoint security as a beginner topic. It expects candidates who already passed Security+ to reason at an architect's level: how application control, EDR, SELinux, host-based firewalls, and mobile device management fit together into a layered defense, and how a skilled attacker tries to defeat each layer in turn. This guide walks through the CAS-005 3.2 sub-objectives in the order CompTIA lists them, then ties the layer together with the threat-actor tactics, techniques, and procedures (TTPs) the exam expects you to recognize on sight: injection, privilege escalation, credential dumping, unauthorized execution, lateral movement, and defense evasion. Application Control and Allowlisting Application control (also called application allowlisting or...

CompTIA SecurityX (CAS-005) doesn't stop at servers, laptops, and cloud workloads. Objective 3.5, "Secure specialized and legacy systems," asks candidates to think about the machines that keep the physical world running: the programmable logic controllers on a factory floor, the HVAC controller on a hospital roof, the medical infusion pump, and the decade-old embedded appliance nobody wants to touch because touching it might shut down a production line. These systems rarely get patched, rarely get replaced, and almost never get a security review — which is exactly why CAS-005 treats them as their own exam domain rather than folding them into general endpoint security. This guide walks through operational technology, embedded and IoT devices, the wireless technologies that connect them, and the specific security and privacy considerations CAS-005 expects you to apply when a system can't simply be hardened the way a modern server can. Operational Technology: SCADA, ...

Most threat hunting programs eventually run into the same wall: an analyst has a hypothesis, a log source, and no standard way to express the pattern they're looking for across tools that don't speak the same language. That's the problem detection rule languages solve. CompTIA's SecurityX (CAS-005) exam objective 4.3, Threat Hunting and Threat Intelligence, specifically calls out four of them by name: Sigma , YARA , RITA , and Snort . Candidates are expected to know what each one actually matches on, where it runs in the pipeline, and why security engineers maintain more than one. This guide works through all four, how they relate to the threat intelligence sharing formats covered elsewhere on this blog ( STIX and TAXII ), and how CAS-005 expects you to apply them during a hunt. Why CAS-005 Tests Rule Languages Specifically Security+ (SY0-701) and even CySA+ treat threat hunting mostly as a concept: work from a hypothesis, use behavioral baselines, escalate what y...

Artificial intelligence stopped being a niche topic the moment it showed up inside everyday operating systems, browsers, and office software — which is exactly why CompTIA added it to the Tech+ (FC0-U71) exam. Objective 3.5, "Identify common uses of artificial intelligence (AI)," sits inside the Applications and Software domain, worth 18% of the exam, and it expects candidates to recognize four specific categories of AI that show up in modern IT environments: chatbots, virtual assistants, generative AI, and AI-driven predictions and recommendations. This guide walks through each of those four categories the way Tech+ tests them — definitions, real-world examples, and the practical benefits CompTIA wants you to be able to articulate. It builds on the application and software concepts covered in our Operating Systems Fundamentals for Tech+ guide and pairs naturally with our Web Browser Features for Tech+ article, since many of today's AI assistants live inside the brow...

Every network, from a two-computer home office to a sprawling enterprise campus, is built from the same handful of hardware building blocks. CompTIA Tech+ (FC0-U71) Domain 2.0, Infrastructure, expects candidates to recognize these devices by name, know what layer of the network they operate at, and understand why you'd choose one over another. This is foundational vocabulary that carries straight through to A+ and Network+ , so getting it right now pays off on every exam that follows. This guide walks through the core network devices Tech+ wants you to know: hubs, switches, routers, wireless access points, modems, and firewalls, plus the all-in-one SOHO devices that combine several of these roles into a single box. We'll also connect each device to the common computing devices they support and the troubleshooting mindset you'll need when one of them fails. Hubs and Switches: Connecting Devices on a LAN A hub is the oldest and simplest connectivity device: it takes a ...

Nearly every enterprise breach retrospective these days turns up the same culprit somewhere in the chain: a vendor, a subcontractor, or an open-source dependency nobody was watching closely enough. CompTIA's SecurityX (CAS-005) exam treats this reality as core architecture work, not an afterthought bolted onto procurement. Objective 1.2, inside the Governance, Risk, and Compliance domain — worth 20% of the exam — asks candidates to "perform risk management activities" against a named set of organizational requirements, and third-party risk sits squarely inside that objective alongside supply chain risk, vendor risk, and subprocessor risk. This guide breaks down what SecurityX expects you to know about managing risk that lives outside your own network boundary, building on the enterprise architecture and operations concepts covered in our Zero Trust Architecture for CAS-005 guide and our look at Enterprise Data Loss Prevention strategies . Why Third-Party Risk Gets It...