CompTIA Security+ exam voucher

Domain 1: General Security Concepts
- Security controls (technical, preventive, operational, physical, corrective)
- Fundamental concepts (CIA, non-repudiation, AAA, zero trust)
- Change management (business processes, technical implications, documentation)
- Cryptographic solutions (PKI, encryption, hashing, digital signatures, blockchain)

Domain 2: Threats, Vulnerabilities, and Mitigation
- Threat actors and motivations (nation-states, hacktivists, internal threats, organized crime)
- Threat vectors and attack surfaces (messages, unsecured networks, social engineering)
- Vulnerabilities (applications, hardware, mobile, virtualization, cloud, web)
- Malicious activities (malware, password attacks, network attacks, cryptographic attacks)
- Mitigation techniques (segmentation, access control, hardening, patches)

Domain 3: Security Architecture
- Architecture models (on-site, cloud, virtualization, IoT, industrial systems, IaC)
- Enterprise infrastructure (secure design principles, secure communication)
- Data protection (data types, security methods, classifications)
- Resilience and recovery (high availability, backups, business continuity)

Domain 4: Security Operations
- Computing resources (secure bases, mobile solutions, wireless security)
- Asset management (acquisition, elimination, tracking of hardware and software)
- Vulnerability management (identification, analysis, remediation, validation)
- Alerts and monitoring (monitoring tools, resource activities)
- Enterprise security (firewall, IDS/IPS, DNS filtering, DLP, NAC, EDR/XDR)
- Identity and access management (provisioning, SSO, MFA, privileged access)
- Automation and orchestration (use cases, scripting, considerations)
- Incident response (process, training, testing, root cause analysis, forensics)
- Data sources (logs and other sources for investigations)

Domain 5: Security Program Management
- Security governance (guidelines, policies, standards, procedures, roles)
- Risk management (identification, assessment, analysis, register, tolerance, strategies)
- Third-party risks (supplier evaluation, agreements, monitoring, rules of engagement)
- Security compliance (reports, non-compliance consequences, confidentiality)
- Audits and assessments (attestation, internal/external audits, penetration tests)
- Security awareness (phishing training, abnormal behavior, reporting)