CompTIA SY0-701 考試概覽:

認證廠商:	CompTIA
考試名稱:	CompTIA Security+ 認證考試
考試代碼:	SY0-701
證照有效期限:	3 年
相關認證:	CompTIA A+ CompTIA Network+ CompTIA CySA+ CompTIA CASP+
及格分數:	750 分（滿分區間 100–900 分）
考試費用:	370 美元
實際考試題數:	最多 90 題
考試形式:	選擇題（單選與複選）, 實作導向題型（PBQ）
支援語言:	英文, 日文, 葡萄牙文, 西班牙文
考試時間:	90 minutes
範例考題:	CompTIA SY0-701 範例考題
考試方式:	Pearson VUE 考場（實體現場應考）
必備條件:	建議具備條件：持有 CompTIA Network+ 認證，以及 2 年資訊管理相關經驗且專注於資安領域。非強制要求，但強烈建議具備。
官方大綱網址:	https://www.comptia.org/certifications/security#examdetails

CompTIA SY0-701 考試大綱：

主題	簡介
主題 1	Security Operations: This topic delves into applying common security techniques to computing resources, addressing security implications of proper hardware, software, and data asset management, managing vulnerabilities effectively, and explaining security alerting and monitoring concepts. It also discusses enhancing enterprise capabilities for security, implementing identity and access management, and utilizing automation and orchestration for secure operations.
主題 2	General Security Concepts: This topic covers various types of security controls, fundamental security concepts, the importance of change management processes in security, and the significance of using suitable cryptographic solutions.
主題 3	Security Architecture: Here, you'll learn about security implications across different architecture models, applying security principles to secure enterprise infrastructure in scenarios, and comparing data protection concepts and strategies. The topic also delves into the importance of resilience and recovery in security architecture.
主題 4	Security Program Management and Oversight: Finally, this topic discusses elements of effective security governance, the risk management process, third-party risk assessment, and management processes. Additionally, the topic focuses on security compliance requirements, types and purposes of audits and assessments, and implementing security awareness practices in various scenarios.
主題 5	Threats, Vulnerabilities, and Mitigations: In this topic, you'll find discussions comparing threat actors and motivations, explaining common threat vectors and attack surfaces, and outlining different types of vulnerabilities. Moreover, the topic focuses on analyzing indicators of malicious activity in scenarios and exploring mitigation techniques used to secure enterprises against threats.