This video covers DOMAIN 2 of the Security+ Exam Cram series, which will cover EVERY TOPIC in the SY0-701 exam syllabus.

Security+ Exam Cram 2024 series playlist
https://youtube.com/playlist?list=PL7XJSuT7Dq_UDJgYoQGIW9viwM5hc4C7n&si=VO6psgHa3MchJjLf

Official Study Guide
https://amzn.to/3U4YsHq

Official Practice Tests
https://amzn.to/3VR0kF3

PDF Presentation Download - Security+ SY0-701 DOMAIN 2
https://1drv.ms/b/s!AmhtzcmYt5AVip8qPj9wI63WLBtqUA?e=eu3Wej

Chapters
00:00 Introduction
02:21 DOMAIN 2 - Threats, Vulnerabilities, and Mitigations
02:35 2.1 Security Control Categories and Types
03:17 Dynamics of "Money vs Mission"
04:15 Threat Actors
06:09 Motivations
08:39 Actor, Skill-level, Motivation
11:03 Actor, Attributes, Motivations, Examples
13:04 Impact of Skill and Funding
15:58 Combined Impact

17:14 2.2 Threat Vectors and Attack Surfaces
18:08 Threat Vector and Attack Surfaced Defined
19:52 Message-based
22:15 Image-based
23:00 File-based
23:40 Voice Call
24:55 Removable Devices
25:35 Vulnerable Software
26:38 Unsupported Apps and Systems
27:44 Unsecure Networks
29:52 Open Ports
31:23 Default Credentials
31:51 Supply Chain
33:27 Social Engineering Principles
36:40 Human Vector/Social Engineering

44:53 2.3 Vulnerabilities
45:32 Know these 4 important terms
47:25 Application
50:00 OS-based
52:14 Web-based
54:39 Hardware
55:42 Virtualization
57:22 Cloud-specific
01:11:18 Supply Chain
01:12:21 Cryptographic
01:16:40 Misconfiguration
01:17:25 Mobile Device
01:18:53 Zero-Day

01:19:53 2.4 Indicators of Malicious Activity
01:21:08 Know these 3 important terms
01:22:46 Indicators
01:25:38 Malware Attacks
01:38:41 Physical Attacks
01:41:39 Network Attacks
01:53:40 Application Attacks
02:02:43 Cryptographic Attacks
02:07:04 Password Attacks

02:10:25 2.5 Mitigation Techniques
02:11:22 Important terms
02:11:57 Segmentation
02:14:50 Segmentation in the Cloud
02:20:10 Access Control
02:22:00 Application Allow List
02:22:52 Isolation
02:24:18 Patching
02:27:32 Encryption
02:32:10 Monitoring
02:36:06 Least Privilege
02:37:41 Configuration Enforcement
02:41:52 Decommissioning
02:42:34 Hardening Techniques


Exam Syllabus
https://comptiacdn.azureedge.net/webcontent/docs/default-source/exam-objectives/comptia-security-sy0-701-exam-objectives-(5-0).pdf

Music by @musicforvideolibrary