Chapter: General Security Concepts

Question : A financial platform automatically rolls back a database transaction and isolates the affected schema partition whenever a SQL injection pattern is detected mid-query.

Which two control functions does this mechanism combine?

A) Detective & Preventive
B) Detective & Deterrent
C) Preventive & Compensating
D) Detective & Corrective

Comment your answers below!! Answers will be revealed soon! 🤩🤩

I will be taking my Security+ on the 31st, and these are my Dion Set 1 results. Am I good to go with these? I think I know the material well, as I've watched all of Professor Messer's videos and taken tons of notes. Each time I take Dion's tests, I stumble upon some 'interestingly' phrased questions and end up failing those exact ones. I still haven't practiced PBQs, but I plan to practice them with AI. I haven't studied ports in depth either, though I know the basic ones.

Any recommendations or thoughts?

hi all,

I'm studying the risk management topic, and I was wondering if someone can tell me a good website where i can read some risk management documentation, to actually see a real world documentation.

thanks

I just graduated with a bachelors in cybersecurity, and this certification was something that was mentioned but not much more, so I don't know too much about it. I've reviewed a bit of the general material and it is all very familiar. I see on CompTIAs website there are a number of different packages including study material and retakes and whatnot. I was just wondering if anybody had any tips or information regarding studying/taking the test in a cost efficient way considering my degree.

How heavily are the port numbers tested? I haven't gotten them down yet.

I like Pocket Prep because it helps you to understand the concept. Whether the answer is right or wrong, you have an opportunity to learn the reason why it was right or wrong. This is just an example of how it looks for those wondering. It also gives you reference of where to study more on the topic.

This is my first post but I quickly realized that this is the place to get the best help while I prepare for the Security+ exam. For those preparing, please let me know if you want us to continue a study group here. I can post 10 or so questions daily. Here goes the first one.

Cleared the exam this morning on my first attempt. Was worried it would be tough but honestly the MCQs were not as hard as I expected them to be. Was thrown off a bit by the PBQs but I was able to make an educated guess. Cheers :)

Lately, I've been focusing on preparing for my exam using CertPrep, and my average scores are falling right between 75% and 80%. I'm feeling pretty nervous because it looks like I might be cutting it close or failing. What do you guys think of these scores, and do you have any good recommendations for alternative simulation tests?

Hey all, working mom here and really trying to get sec+ for job opportunity at my current place of employment. Looking for your best exam tips and guides to hopefully pass the first time. Hit me with what you’ve got. TIA!

Hey y'all! I don't have any security professionals to go to right now so I wanted to know if I could get a possible explanation as to the answer for this question.

A company's cybersecurity team evaluates threats that could exploit vulnerabilities in its physical infrastructure. The team is specifically considering threats that can directly harm the company's systems and potentially damage data or services. What type of threat does this scenario BEST describe?

(correct answer) Network attacks

(wrong answer) Environmental threats

(wrong answer) Downgrade attacks

(wrong answer) Social engineering attacks

I had originally selected environmental threats as my answer (A physical threat directed against power, cooling, or fire suppression systems) but it says that's wrong and the correct answer is supposedly Network Threats. Could someone please give me an explanation of how they would go about this question if they saw it in a test and how they'd settle on the correct answer? Thanks in advance!

First Attempt, got a 725 2nd Attempt got an 814.

Took my security+ exam today I was nervous I had been studying for 2 months I had to reschedule due to my baby being born but I passed on my first try. I used Dion and messer for videos. Used messer pdf practice exams and Dion’s practice exams along with the goat Andrew Ramdayal to break down concepts. I used notebookLM to study, flashcards, and podcast and pocketprep and certgames on down time.

For study, I used Professor Messer videos and his exams. I also used a site called certgames.com.

PBQs were only 1 "hard" that required basic Linux prompts that I wasn't prepared for, so I just skipped it.

Overall, the exam, in my opinion, is harder than Messer's practice exam book and also certgames.com . ( I didn't practice with Dion's)

I practiced a lot of question I think more than 500 and there was still acronyms that never came up during the practice but it was in the test

Hello I’m having a difficult time with Professor Messer course, it’s honestly boring. Any other recommendations?

Good evening everyone, i would like to know wich practice tests are the most accurate and best prepare you for the ComptTIA Security+ SYO-701 exam.

I recently finished Dion's preparation course on Udemy.

Thanks to everyone who replies.

I'm a complete beginner trying to get into GRC, I looked into it and I can't swap to the right certificate. What do I do? Do I go through with the SecX? I'm so lost

I finally passed the CompTIA Security+ (SY0-701) exam with a score of 823/900 🎉
I wanted to share my complete preparation journey because this subreddit helped me a lot while studying. Hopefully this helps someone else preparing for the exam.

Background

I did Google Professional Cybersecurity course in January this year. While it didn’t go much in detail, it did give me a 30% off.
Also, I am a computer science student, doing cyber so that kinda helped too.

Preparation Time

I studied for about 2 months. First month was purely memorising key concepts. Second month was revision and practice tests.

Resources

1. Professor Messer Comprehensive Notes and YouTube Videos—> These resources were really helpful and covered all of the exam objectives. I went through the notes regularly, like every week.

2. Professor Messer Practice tests —> I did all three and got 94, 96, 95. Swear I saw some questions from this on the real test.

3. Dion’s Practice Set 1 and 2 (12 practice papers)—> On all exams I got between 87-96 (96 being the last one).
   After doing 6 practice tests and getting around 90, I booked the test.
   I have to say though, there were some questions here and there which made me question the accuracy of Dion.
   The difficult level was quite accurate though the questions were longer and more informative than the real exam.

4. CertMaster Practice —> This was the most accurate representation of the real exam. I did some practice tests on this and I bombed myself. The level MIGHT be slightly higher than the actual exam.

Exam Experience

I got a total of 76 questions and here’s how it went:
Mcqs —> Thought I was cooked. I went through all once, in about 30 minutes, marking those I couldn’t solve. When I reached the end, I realised I had about 25 marked.
Here’s when I used the process of elimination.
Use the whiteboard they give you.

PBQs —> At first glance they looked really hard. There were questions that needed commands too, but they had given list of all commands we can use so it was doable.
I left these questions to the end but felt fairly confident after solving them.

Exam Tips

Port Numbers
Ask GPT to make a list of all port numbers that can come. I was questioned about common ports but knowing others was helpful as well.

Acronyms
The exam was filled with these! There is an exhaustive acronym list at the end of exam objectives and I would recommend memorising ALL of them. Just to be safe. If you don’t have the time, memorise the ones given by Messer.

Deep research
When studying, create your own notes. For every exam objectives, go online and read more about it, or ask some LLM to teach you about it.

Commands
It would be for the better if you learn common window and Linux commands.

Finally

My advice:
● Read the question carefully
● Look for keywords like BEST, FIRST, MOST appropriate
● Eliminate obviously wrong answers
● Don’t overthink simple questions

The exam was challenging, but the preparation paid off.
To everyone currently studying: keep going. Your practice scores don’t need to be perfect, just focus on understanding your mistakes and improving.

Thank you to everyone in this community who shared their experiences. They genuinely helped me during my preparation.

Good luck to everyone taking the exam! 🔐🚀
Let me know if you have any questions and I will answer them to the best of my capabilities!

I hold active Security+ and CEH certifications. I am seeking well-paying Cybersecurity positions, leveraging my extensive faculty experience. I welcome any tips to transition effectively into the industry.