CompTIA Security+ Preparation

Program facts

Study fee

Free

subjects

5

lessons

24

Estimated time

33.5 hours

Content last reviewed

21 October 2026

Access period

30 days

Study language

Arabic and English

About the program

A structured professional program covering the current SY0-701 objectives in CompTIA's official blueprint and translating concepts into security decisions, cases, and exercises. It includes an internal assessment and readiness mock, both separate from CompTIA's official exam.

Practical relevance

Lessons practice prioritization, hardening, monitoring, incident response, and supplier management through checkable outputs.

Why this program

It combines official blueprint mapping with evidence-based reasoning instead of reducing preparation to acronym memorization or leaked items.

Career relevance

It supports foundational security work across hybrid environments, operations, and governance without promising employment or licensure.

What you will learn

• Distinguish controls, concepts, and cryptography
• Analyze threats, vulnerabilities, and mitigations
• Design resilient architecture and data protection
• Perform operations, monitoring, and response
• Manage governance, risk, and compliance

Who it is for

• Security+ SY0-701 candidates who want to connect the objectives to cases and decisions instead of memorizing tool names or answer keys.
• Support, operations, networking, and application staff who need to interpret identity, segmentation, monitoring, and response evidence within their responsibilities.
• Learners identifying gaps before an external exam or moving into a foundational security role, while treating the internal score as learning feedback rather than CompTIA endorsement or a guaranteed prediction.

Curriculum

1. Subject 1 Open for free

   General Security Concepts

   This domain turns confidentiality, integrity, and availability into decisions that can be checked in a working system. Learners distinguish authentication, which establishes identity, from authorization, which controls an action, and accounting, which records it. They select preventive, detective, or corrective controls for a stated gap rather than for a product label. Lessons test why network location alone cannot authorize a request and how to change a firewall rule with a success test and rollback threshold. They compare transport and storage encryption with digital signatures and password protection, then verify actual key use. A server-room access case closes the module with denial evidence and a test that preserves approved maintenance. The official domain weight is 12%; these are independent training cases, not CompTIA exam items.

   4 lessons · 5 hours

   1. Control categories, CIA, AAA, and zero trust 1.5 hours
   2. Change management and security impact 1 hours
   3. Cryptography, PKI, and key management 1 hours
   4. Physical protection, deception, and control-gap analysis 1 hours
2. Subject 2

   Threats, Vulnerabilities, and Mitigations

   The module begins by naming the exposed asset and attack path before assigning a threat actor or mitigation. Learners separate facts in a supplier message or sign-in log from inferences that require independent verification. They prioritize vulnerabilities using exposure, exploitation, business impact, and tested compensating controls rather than a severity score alone. A common timeline connects identity, endpoint, and network indicators while testing a legitimate-work hypothesis before containment or token revocation. Cases compare an unused vulnerable mobile library function with anonymously readable cloud objects and a correctly signed supplier update from an uncertain build path. Learners produce a bounded containment decision, a retest, and a statement of what the available logs cannot prove. The official domain weight is 22%; training cases do not claim a real regional incident.

   5 lessons · 6 hours

   1. Threat actors, motivations, and attack surfaces 1 hours
   2. Vulnerability types and prioritization 1 hours
   3. Malicious indicators and mitigation techniques 1 hours
   4. Read attack indicators and distinguish attack paths 1 hours
   5. Assess mobile, cloud, and supply-chain weaknesses 1 hours
3. Subject 3

   Security Architecture and Resilience

   This module maps customer and provider responsibilities before selecting a control. Learners turn user, front-end, API, and database flows into testable sources, destinations, identities, ports, and logs. They compare broad network access with access to a named application and test failure paths instead of assuming redundancy removes shared failure points. Data protection distinguishes classification, encryption, and authorization during use; an analytics role must be shown unable to retrieve individual payroll rows when aggregates suffice. A recovery case calculates RPO from the last usable recovery point and RTO to the first valid business transaction, including identity, secrets, DNS, and queues after the server returns. IoT and OT cases require bounded maintenance access and safety-owner approval before disruptive testing. The official weight is 18%, and the cases are hypothetical.

   5 lessons · 6 hours

   1. Architecture models and shared responsibility 1 hours
   2. Securing enterprise infrastructure and selecting controls 1 hours
   3. Data protection, resilience, and recovery 1 hours
   4. Classify and protect data across its states 1 hours
   5. Engineer available IoT and OT with clear trust boundaries 1 hours
4. Subject 4

   Security Operations

   Security operations runs from a measurable baseline to proof that treatment worked. Learners specify SSH settings, an approved management path, and both allowed and denied connection tests before changing an asset. Monitoring cases compare a suspicious success after repeated failures with control cases so an alert does not automatically become isolation. Investigation records evidence source, time, hash, and custodian, and connects events without inventing a cause that the sequence cannot support. Lessons test a guest path that bypasses segmentation through an inherited VPN, an old payroll session surviving a role change, and a scanner banner contradicted by a documented backport. Closure requires a repeat test from the relevant path and continued authorized service, not merely a closed ticket. This official domain carries 28% weight; actions remain within approved authority.

   6 lessons · 7 hours

   1. Hardening resources, assets, and vulnerabilities 1 hours
   2. Monitoring, tooling, identity, and automation 1 hours
   3. Incident response, investigation, and data sources 1 hours
   4. Apply enterprise controls and verify network posture 1 hours
   5. Manage identity lifecycle, federation, and authorization 1 hours
   6. Manage vulnerabilities from discovery to verified treatment 1 hours
5. Subject 5

   Security Program Management and Oversight

   This module links policy to a decision owner and evidence that can be reviewed over time. Learners describe a cloud risk through asset, threat, weakness, likelihood, and impact, then reassess residual risk after named controls and escalate anything above tolerance to the authorized owner. A supplier report cannot prove a service or period outside its scope; lessons test encryption, account disablement, notification, and exit with actual samples and results. Awareness work calculates click and report rates with explicit denominators, then uses a different lure to avoid measuring memorization. An audit case separates delayed access removal shown by sampled tickets from continued access that missing session logs leave unverified, and proposes a later closure test. The official weight is 20%, and the internal assessment is not issuer certification.

   4 lessons · 4.5 hours

   1. Governance, policy, and risk management 1 hours
   2. Third-party risk, compliance, and audits 1 hours
   3. Security awareness and readiness strategy 1 hours
   4. Turn policy into compliance evidence and an audit decision 1 hours

Subjects unlock in sequence as you progress.

Strengths

• Coverage of every SY0-701 objective
• Original cases that do not copy the exam
• Complete equivalent Arabic and English
• Explicit separation of internal and external assessments

Evidence basis

The blueprint comes directly from CompTIA, while primary NIST and OWASP publications support bounded operational concepts.

How the route works

Professional Certification Preparation programs help learners prepare for a recognized external certification through structured knowledge, review, practice questions, and readiness assessments. Arab Platform for Professional Studies (ARPS) does not administer the certification owner's official exam.

Structured self-paced study aligned to the current external certification scope, with knowledge review, practice questions, readiness checks, and internal mock assessments.

• Focused preparation for a specific external certification.
• Content aligned to the current official exam scope when available.
• Practice questions and internal readiness assessments.
• Clear separation between Arab Platform for Professional Studies (ARPS) preparation and the official external exam.

Assessment

The route includes an internal assessment for Arab Platform for Professional Studies (ARPS) completion eligibility and separate mock/readiness assessments that are not the external official exam.

Assessment attempts: 2 per assessment, 7 days apart

The pass mark is announced before the program is published.

Certificate

The Arab Platform for Professional Studies (ARPS) credential confirms completion of the preparation program only; the target professional certification requires passing the external issuer's examination under its rules.

Every certificate has a public verification code. Verify a certificate

Verification example: a real issued certificate

Disclaimer: Any platform completion document covers this preparation program only; it is not Security+ or CompTIA endorsement.

Program questions