General Security Concepts

This domain turns confidentiality, integrity, and availability into decisions that can be checked in a working system. Learners distinguish authentication, which establishes identity, from authorization, which controls an action, and accounting, which records it. They select preventive, detective, or corrective controls for a stated gap rather than for a product label. Lessons test why network location alone cannot authorize a request and how to change a firewall rule with a success test and rollback threshold. They compare transport and storage encryption with digital signatures and password protection, then verify actual key use. A server-room access case closes the module with denial evidence and a test that preserves approved maintenance. The official domain weight is 12%; these are independent training cases, not CompTIA exam items.

Read the whole first subject without an account: its lessons, summary and review questions.