Include the reviewed fundamentals and Study Buddy material with All topics questions or flashcards. These additions are learning-only; article sources below identify the approved educational scope.
Evidence labels show where each concept’s recorded learning comes from: classroom sessions, Study Buddy sessions, supplementary Study Guide explanations or a mix. Reviewed revision may go further, so you can study ahead. Available questions do not imply complete topic or exam coverage.
Official syllabus references
CompTIA Security+
Exam version SY0-701 · All 28 numbered objectives represented; detailed bullets and revision content remain partial.
3.1 · Architecture models
Related groups: 3.0 · Security architecture. Topic organisation is editorial; consult the official specification for full detail.
Firewall Rules and Segmentation
Evidence: Partial
Revision: Available · 4 questions · 1 flashcard
Exam relevance
Learning-only · no verified exam mapping
Reviewed revision scope
Classroom (Session 2): enabling and correctly configuring firewalls is a basic device-security practice.
Classroom (Sessions 3 and 4): firewalls are one of the five technical control areas of Cyber Essentials.
Supplementary: a firewall rule combines conditions with an allow or deny action; rules are checked from the top, the first match decides, and a default-deny rule blocks anything not explicitly allowed, so rule order matters.
Supplementary: a stateful firewall records the connections it has allowed and lets their replies back in without a separate rule.
Supplementary: segmentation divides a network into zones and enforces which traffic may cross between them; where each zone is one VLAN and subnet, traffic inside a zone does not cross the network firewall between zones.
Firewall or segmentation work carried out by the learner
Causes of the observed VyOS firewall configuration messages
Unverified exam objectives
Recorded evidence
Classroom (Session 2): enabling and correctly configuring firewalls is a basic device-security practice.
Classroom (Sessions 3 and 4): firewalls are one of the five technical control areas of Cyber Essentials.
Supplementary: a firewall rule combines conditions with an allow or deny action; rules are checked from the top, the first match decides, and a default-deny rule blocks anything not explicitly allowed, so rule order matters.
Supplementary: a stateful firewall records the connections it has allowed and lets their replies back in without a separate rule.
Supplementary: segmentation divides a network into zones and enforces which traffic may cross between them; where each zone is one VLAN and subnet, traffic inside a zone does not cross the network firewall between zones.
Session 2: Cyber Fundamentals Part 2 — Classroom session record · The CIA Triad; The DAD Triad; Securing Devices; Denial; DDoS Mitigation; Security, Usability and Functionality; Policies, Standards, Procedures and Guidelines
Session 3: Governance, Risk and Compliance — Classroom session record · Governance and Accountability; Risk and Measurement; Risk Management Lifecycle; Risk Treatment; Compliance Is Not the Same as Security; Risk Appetite vs Risk Tolerance; CVSS and Business Risk; ISO/IEC 27001 and 27002; Cyber Essentials; NIST Cybersecurity Framework; UK GDPR and Data Protection; Data Classification; UK GDPR Lawful Bases; ICO and the 72-Hour Rule; PCI DSS
Session 4: Governance, Risk and Compliance — In Depth — Classroom session record · The Three GRC Pillars; Compliance ≠ Security; ISO/IEC 27001 and Continual Improvement; Why Consultants Need Business Context; Business Impact Analysis; Assessing Risk; Identifying and Managing Risk; Frameworks and Standards; UK GDPR and Data Protection; Data Classification and Handling
Firewalls, Traffic Filtering and Segmentation — Supplementary Study Guide explanation · Why firewalls keep coming up; Where firewalls sit; What a firewall checks; First match wins, then default deny; Stateful filtering: remembering conversations; Firewalls and NAT are different jobs; Segmentation: giving the firewall a boundary to guard; What a firewall cannot do
Not established by the recorded evidence
Firewall product configuration
Firewall or segmentation work carried out by the learner
Causes of the observed VyOS firewall configuration messages
Unverified exam objectives
Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.
Virtual Machines and Isolation
Evidence: Supplementary
Revision: Available · 3 questions · 2 flashcards
Exam relevance
Learning-only · no verified exam mapping
Reviewed revision scope
Supplementary VM explanations distinguish physical host, hypervisor and guest, network modes and integration paths; virtualisation and NAT do not guarantee isolation or establish completed labs.
Supplementary VM explanations distinguish physical host, hypervisor and guest, network modes and integration paths; virtualisation and NAT do not guarantee isolation or establish completed labs.
Virtual Machines — Supplementary Study Guide explanation · The idea; Host, hypervisor and guest; Why it is useful for learning; Fictional learning scenario: planning a Linux environment; Networking modes and their consequences; Isolation has limits; Platforms and learning context; Revision takeaway
Not established by the recorded evidence
Completed labs, configurations and assessments
Complete examination objectives
Reviewed 2026-09-23. Reviewed against approved Sessions 1–2 and Study Buddy Core Concepts. Scenarios are fictional educational applications, not completed practical work. This concept has not yet been individually verified against the Security+ SY0-701 objectives or any other exam syllabus.
Virtual Lab Topology: NAT and Host-only Adapters
Evidence: Mixed
Revision: Available · 5 questions · 3 flashcards
Exam relevance
Learning-only · no verified exam mapping
Reviewed revision scope
Classroom (Session 6): the tutor configured a Kali Linux VM in VirtualBox with Adapter 1 set to NAT for internet access and Adapter 2 set to Host-only Adapter for the lab, and a Metasploitable VM with a single Host-only Adapter.
Classroom (Session 6): the tutor ran ifconfig on Kali Linux and Metasploitable to view their interfaces, identify their IPv4 addresses and confirm that both were on the intended lab network.
Supplementary: a host-only network connects the host and the VMs attached to it without ordinary internet access by itself; it limits reach but is not complete isolation.
Supplementary: a VM with a NAT adapter and a host-only adapter does not forward traffic between the two networks unless forwarding is deliberately enabled and configured.
Supplementary: a deliberately vulnerable VM is kept off the internet and untrusted networks so that its weaknesses cannot be reached from outside the lab.
Building, configuring or testing the lab personally
Addresses, interface names or ifconfig output from the demonstration
Port forwarding, bridged networking or routing configuration
Unverified exam objectives
Recorded evidence
Classroom (Session 6): the tutor configured a Kali Linux VM in VirtualBox with Adapter 1 set to NAT for internet access and Adapter 2 set to Host-only Adapter for the lab, and a Metasploitable VM with a single Host-only Adapter.
Classroom (Session 6): the tutor ran ifconfig on Kali Linux and Metasploitable to view their interfaces, identify their IPv4 addresses and confirm that both were on the intended lab network.
Supplementary: a host-only network connects the host and the VMs attached to it without ordinary internet access by itself; it limits reach but is not complete isolation.
Supplementary: a VM with a NAT adapter and a host-only adapter does not forward traffic between the two networks unless forwarding is deliberately enabled and configured.
Supplementary: a deliberately vulnerable VM is kept off the internet and untrusted networks so that its weaknesses cannot be reached from outside the lab.
Session 6: Networking Fundamentals — Part 2 — Classroom session record · Sections 2–8: Kali Linux with NAT and host-only adapters; Metasploitable with a host-only adapter only; the msfadmin login; ifconfig on both machines; the attacking and victim roles; nmap -sV against the Metasploitable lab address; researching detected versions for known vulnerabilities
Virtual Machines — Supplementary Study Guide explanation · A two-VM security lab; NAT and host-only in this lab; Why this topology is sensible; Two adapters do not make a router
Not established by the recorded evidence
Building, configuring or testing the lab personally
Addresses, interface names or ifconfig output from the demonstration
Port forwarding, bridged networking or routing configuration
Unverified exam objectives
Reviewed 2026-09-25. Reviewed against the Session 6 Learning Log and the Virtual Machines lesson Sources and scope section. Scope statements are labelled Classroom or Supplementary, and revision scope is the reviewed evidence scope. No practical competence, completed lab or exam alignment is implied.