Exam-shaped drilling across all five SY0-701 domains: threats and attacks, architecture, operations, governance, and risk. Recall practice for the acronym-heavy material the exam expects you to know cold.
Confidentiality, Integrity, and Availability
AAA (Authentication, Authorization, Accounting)
Authentication verifies identity ("who you are"); authorization determines permitted actions ("what you can do")
Assurance that a party cannot deny having performed an action, typically via digital signatures or audit logs
An extension of the CIA triad adding Possession, Authenticity, and Utility
A layered security strategy using multiple overlapping controls so no single failure causes compromise
Granting users only the minimum access rights necessary to perform their job functions
Access is granted only to information required for a specific task, even if broader clearance exists
Splitting critical tasks among multiple people to prevent any single person from committing fraud undetected
Threat = potential cause of harm; Vulnerability = weakness that can be exploited; Risk = likelihood x impact of a threat exploiting a vulnerability
A software flaw unknown to the vendor with no patch available, actively exploited by attackers
Common Vulnerabilities and Exposures - a unique identifier assigned to a publicly known security vulnerability
Flashcards
Flip to reveal
Focus Mode
Spaced repetition
Multiple Choice
Test your knowledge
Type Answer
Active recall
Learn Mode
Multi-round mastery
Match Game
Memory challenge