CompTIA Security+ Study Roadmap

Domain 1: Security Controls — Technical, Managerial, Operational, Physical

Domain 1: Cryptography — Symmetric, Asymmetric, Hashing, PKI

Domain 2: Threat Actors — Nation-state, Hacktivists, Insider threats

Domain 2: Vulnerabilities — Software, Hardware, Cloud, Zero-day

Domain 3: Architecture Models — Zero Trust, Defense in depth, Segmentation

Domain 3: Data Protection — Encryption at rest/transit, DLP, Classification

Domain 4: Security Operations — Firewalls, IDS/IPS, SIEM, SOAR

Domain 4: IAM — MFA, SSO, RBAC, PAM, Federation

Domain 5: Governance — Policies, Standards, Frameworks, Risk management

Domain 5: Compliance — GDPR, PCI-DSS, HIPAA, SOX, Incident response

Full Review: Practice tests, Weak areas, PBQ practice

Final Review: Timed practice exams, Last-minute review, Exam logistics