Chapter 1 of 5 · CompTIA Security+ SY0-801
General Security Concepts
CIA, Zero Trust, control types, change management, PKI, encryption and hashing.
- 7topics
- 35 minfast track
- 2diagrams and exhibits
- 16%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1CIA Triad, AAA and Non-repudiationUnderstand the CIA triad, non-repudiation, and authentication, authorization and accounting (AAA), and match each security…4 min
- 2Defense in Depth, Zero Trust and Least PrivilegeLearn defense in depth, the core zero trust principles and least privilege, and how layered controls stop one failure from…5 min
- 3Security Control Categories and TypesLearn the four Security+ control categories and six control types, with examples, so you can classify any safeguard that an exam…5 min
- 4Change Management and Security ImpactHow change management protects security: the CAB, impact analysis, backout plans, fail forward, dependencies, documentation and…5 min
- 5PKI and Digital CertificatesUnderstand PKI: public and private keys, key escrow, certificate authorities, root of trust, CSRs, wildcard and self-signed…Diagram6 min
- 6Encryption and Key ManagementCompare symmetric and asymmetric encryption, key exchange, key length, encryption levels and key tools such as TPM, HSM, KMS and…5 min
- 7Hashing, Signatures and ObfuscationLearn hashing algorithms, salting, digital signatures, steganography, tokenization and data masking, and which security goal each…5 min
About this chapter
What this chapter covers
General Security Concepts is 16% of the CompTIA Security+ SY0-801 exam. It gives you the vocabulary that every later chapter relies on.
The chapter has three objectives. They cover the core security concepts and how controls are classified, how changes are managed safely, and how cryptography protects data and identity.
Expect questions that ask you to name a control type, match a scenario to a security goal, judge a change request or pick the right cryptographic tool.
How the topics fit together
The fundamental concepts explain what security is trying to achieve, controls are the tools that achieve it, change management keeps them safe to alter, and cryptography supplies many of the technical protections.
- The CIA triad, AAA, non-repudiation, Zero Trust and least privilege are the layers of defense in depth.
- Security controls give you a way to label any safeguard by category and type.
- Change management makes sure that new settings and updates do not weaken what is already working.
- Public key infrastructure (PKI), encryption and hashing protect confidentiality, integrity and identity.
Many later questions reuse these terms, so spend time here to learn the exact definitions and the differences between similar words.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and tables.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Read the pages in order. The cryptography pages build on each other, starting with keys and certificates and ending with hashing and signatures.
Ready for more practice?
The full CompTIA Security+ SY0-801 question bank has 998 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.