Overview
The second week of the 90 Days of Cybersecurity challenge focuses on building essential security knowledge aligned with CompTIA Security+ certification (SY0-701). This week builds upon your networking foundation and introduces core cybersecurity concepts, threats, vulnerabilities, and security controls.Learning Path
Day 8: Threats, Attacks & Vulnerabilities
Understand different types of cyber threats, attack vectors, and common vulnerabilities.
Day 9: Architecture & Design
Learn about secure network architecture, cloud security, and infrastructure design.
Day 11: Operations & Incident Response
Study security operations, monitoring, and incident response procedures.
Day 12: Governance, Risk & Compliance
Understand security policies, frameworks, regulations, and risk management.
Day 13: Cryptography & PKI
Master encryption, hashing, digital signatures, and public key infrastructure.
Course Options
- Recommended: Professor Messer
- Alternative: Pete Zerger
Professor Messer’s Security+ (SY0-701) Course
Strongly Recommended - The most comprehensive and well-structured free resource for Security+ preparation.Professor Messer's SY0-701 Playlist
Complete Security+ SY0-701 video series covering all exam objectives with clear explanations and real-world examples.
- Covers 100% of Security+ SY0-701 exam objectives
- Clear, concise explanations without fluff
- Free course notes available
- Regular updates to match current exam version
- Trusted by thousands of certification candidates
Study Tips
Complete related practice questions and exercises daily. Consider these resources:
- Professor Messer’s free Security+ practice exams
- CompTIA CertMaster Practice
- Jason Dion’s practice tests (paid)
- Exam Compass free practice questions
Key Topics to Master
By the end of Day 14, you should be comfortable with:Security Fundamentals
- CIA Triad: Confidentiality, Integrity, and Availability
- Attack Types: Phishing, malware, social engineering, DDoS
- Threat Actors: APTs, insider threats, hacktivists
- Vulnerability Management: Scanning, assessment, and remediation
Security Controls & Technologies
- Access Control: Authentication, authorization, and accounting (AAA)
- Cryptography: Symmetric, asymmetric encryption, and hashing
- Network Security: Firewalls, IDS/IPS, VPNs, and segmentation
- Security Tools: SIEM, EDR, vulnerability scanners
Security Operations
- Incident Response: Detection, analysis, containment, recovery
- Monitoring & Logging: Security event analysis and correlation
- Risk Management: Assessment, mitigation, and acceptance
- Compliance: GDPR, HIPAA, PCI-DSS, and other frameworks
Additional Practice
CompTIA Security+ Certification
Official certification information and exam objectives (SY0-701)
Security+ Exam Objectives
Download the official exam objectives document
Professor Messer Practice Exams
Free practice questions and study resources
Cybrary Security+ Course
Additional free training content and labs