Legacy Haven University

Category: Security+ (SY0-701)

The CompTIA Security+ (SY0-701) certification is the foundational benchmark for validation of baseline cybersecurity skills. As the threat landscape evolves, understanding fundamental security principles—from identity management and vulnerability mitigation to hybrid cloud architecture and incident response—is essential for every aspiring security professional.

This category provides clear, structured, and exam-aligned content designed to simplify complex technical domains. Explore domain-by-domain study guides, performance-based question (PBQ) preparation tips, cheat sheets, and practical insights built to help you pass the SY0-701 exam on your first attempt and succeed in operational security roles.

  • SY0-701 Lab: Linux Live-Response DFIR Triage

    A Linux web host is beaconing out. Do live-response triage: list processes to find the masquerading binary, find its C2 connection, uncover cron persistence, then kill the process to contain — collecting volatile evidence in the right order.

  • Architecting High Availability: Active-Active vs Active-Passive Clusters

    High availability (HA) keeps a service reachable when a node, a path, or a site fails.

  • CAS-005 Lab: Vault & Kubernetes Secrets Management

    Stop hardcoding database credentials in manifests. Store them in Vault’s KV engine, then create and verify a Kubernetes secret the app pod can mount.

  • Never Hardcode Secrets: Scaling Enterprise Secrets Management with HashiCorp Vault

    Hardcoded secrets turn source code, images, and pipelines into credential stores. CompTIA SecurityX (CAS-005) treats that as an identity problem and as an attack-surface problem. Domain 3.1 names secrets management as tokens, certificates, passwords, and keys, plus rotation and deletion.

  • 220-1202 Lab: Encrypting Drives with BitLocker & EFS

    The HR laptop stores sensitive files. Encrypt the whole OS drive with BitLocker (TPM + recovery key), then encrypt just the HR folder with EFS — and learn exactly when to reach for each.

  • Security Best Practices: BitLocker & EFS

    A stolen drive still holds every file on it unless the technician encrypted the data first. CompTIA A+ Core 2 (220-1202) groups three Windows controls for that job under objective 2.2: BitLocker, BitLocker-To-Go, and Encrypting File System (EFS).

  • 220-1201 Lab: MDM Configuration Basics

    The company is rolling out managed iPhones and Android tablets. Build the MDM security baseline: pick the policies that actually harden a fleet, then map MDM concepts and complete an enrollment profile.

  • Mobile Device Hardware & Screen Replacements

    A cracked lid is a ticket, not a 1.1 parts list. Core 1 asks you to monitor the hardware CompTIA names, pick the right replacement technique for those parts, and tell a broken panel apart from a dead digitizer, a dim backlight, or a swollen battery.

  • N10-009 Lab: HAProxy Load Balancing & Health Checks

    A single web server is a bottleneck and a SPOF. Inspect the HAProxy config, add a second backend server with round-robin balancing and health checks, validate, reload, and prove requests alternate across servers.

  • Wireless Networking: Wi-Fi 6, 7 & WPA3

    Wireless fails when the access point (AP) sits on a crowded channel, uses a weak passphrase, or advertises the same name as a rogue radio. CompTIA Network+ (N10-009) tests whether you can select the band, the channel plan, the encryption mode, and the AP type before clients join.