Cybersecurity
Security Operations
Prepares you for CompTIA Security+ (SY0-701)
Threats, architecture, operations and risk: how organizations defend themselves and how security analysts work day to day.
By the end you’ll have made: A hardened, monitored home lab with an incident response plan you wrote and tested

Time to learn
≈ 42 h 34 min
That’s about 24 football matches.
15 h 16 min watching · 20 h 56 min practising · 6 h 22 min on quizzes and games
7 modules · 148 lessons
Start lesson oneModules
Week 1General security concepts
≈ 7 h 1 min · 53 long showers- How to Pass Your SY0-701 Security+ Exam in 2026 (part 1 of 2)5:04
- How to Pass Your SY0-701 Security+ Exam in 2026 (part 2 of 2)5:13
- Security Controls (part 1 of 2)5:55
- Security Controls (part 2 of 2)6:04
- The CIA Triad5:18
- Non-repudiation7:58
- Authentication, Authorization, and Accounting9:04
- Gap Analysis6:45
- Zero Trust (part 1 of 2)5:03
- Zero Trust (part 2 of 2)5:12
- Physical Security8:18
- Deception and Disruption4:31
- Change Management (part 1 of 2)5:41
- Change Management (part 2 of 2)5:51
- Security concepts checkpointTimed · 15 min
- Technical Change Management (part 1 of 2)5:27
- Technical Change Management (part 2 of 2)5:37
- Public Key Infrastructure9:08
- Encrypting Data9:48
- Key Exchange3:39
- Encryption Technologies6:53
- Obfuscation8:00
- Hashing and Digital Signatures (part 1 of 2)5:13
- Hashing and Digital Signatures (part 2 of 2)5:22
- Blockchain Technology2:22
- Certificates (part 1 of 2)7:19
- Certificates (part 2 of 2)7:29
- General security concepts gamesTower · Speed round · Match-up
Week 2Threat actors, vectors and vulnerabilities
≈ 6 h 3 min · 45 long showers- Threat Actors (part 1 of 2)5:12
- Threat Actors (part 2 of 2)5:21
- Common Threat Vectors (part 1 of 2)8:37
- Common Threat Vectors (part 2 of 2)8:47
- Phishing6:32
- Impersonation5:52
- Watering Hole Attacks4:12
- Other Social Engineering Attacks3:29
- Memory Injections2:39
- Buffer Overflows3:37
- Race Conditions4:58
- Threats and vulnerabilities checkpointTimed · 15 min
- Malicious Updates5:45
- Operating System Vulnerabilities4:09
- SQL Injection5:09
- Cross-site Scripting8:34
- Hardware Vulnerabilities6:27
- Virtualization Vulnerabilities5:25
- Cloud-specific Vulnerabilities4:06
- Supply Chain Vulnerabilities9:12
- Misconfiguration Vulnerabilities7:09
- Mobile Device Vulnerabilities3:23
- Zero-day Vulnerabilities3:02
- Threat actors, vectors and vulnerabilities gamesTower · Speed round · Match-up
Week 3Attacks, indicators and mitigations
≈ 5 h 56 min · 45 long showers- An Overview of Malware6:06
- Viruses and Worms5:54
- Spyware and Bloatware4:21
- Other Malware Types7:32
- Physical Attacks4:04
- Denial of Service6:07
- DNS Attacks8:57
- Wireless Attacks7:55
- On-path Attacks5:30
- Replay Attacks5:45
- Malicious Code3:40
- Attacks and mitigations checkpointTimed · 15 min
- Application Attacks (part 1 of 2)5:54
- Application Attacks (part 2 of 2)6:04
- Cryptographic Attacks9:31
- Password Attacks7:16
- Indicators of Compromise (part 1 of 2)5:30
- Indicators of Compromise (part 2 of 2)5:39
- Segmentation and Access Control6:06
- Mitigation Techniques6:51
- Hardening Techniques (part 1 of 2)6:06
- Hardening Techniques (part 2 of 2)6:15
- Attacks, indicators and mitigations gamesTower · Speed round · Match-up
Week 4Security architecture
≈ 6 h 23 min · 48 long showers- Cloud Infrastructures9:56
- Network Infrastructure Concepts6:56
- Other Infrastructure Concepts (part 1 of 2)7:12
- Other Infrastructure Concepts (part 2 of 2)7:22
- Infrastructure Considerations (part 1 of 2)6:54
- Infrastructure Considerations (part 2 of 2)7:04
- Secure Infrastructures5:54
- Intrusion Prevention5:14
- Network Appliances (part 1 of 2)5:58
- Network Appliances (part 2 of 2)6:08
- Port Security3:50
- Firewall Types8:00
- Architecture checkpointTimed · 15 min
- Secure Communication9:55
- Data Types and Classifications5:54
- States of Data6:07
- Protecting Data (part 1 of 2)7:14
- Protecting Data (part 2 of 2)7:24
- Resiliency9:42
- Capacity Planning3:53
- Recovery Testing5:18
- Backups (part 1 of 2)6:08
- Backups (part 2 of 2)6:18
- Power Resiliency4:02
- Security architecture gamesTower · Speed round · Match-up
Week 5Security operations: hardening, assets and vulnerabilities
≈ 5 h 41 min · 43 long showers- Secure Baselines4:11
- Hardening Targets (part 1 of 2)5:06
- Hardening Targets (part 2 of 2)5:15
- Securing Wireless and Mobile8:58
- Wireless Security Settings (part 1 of 2)5:28
- Wireless Security Settings (part 2 of 2)5:37
- Application Security8:26
- Asset Management8:37
- Vulnerability Scanning7:45
- Operations checkpointTimed · 15 min
- Threat Intelligence4:46
- Penetration Testing6:21
- Analyzing Vulnerabilities (part 1 of 2)5:15
- Analyzing Vulnerabilities (part 2 of 2)5:24
- Vulnerability Remediation8:45
- Security Monitoring (part 1 of 2)5:14
- Security Monitoring (part 2 of 2)5:23
- Security Tools (part 1 of 2)7:03
- Security Tools (part 2 of 2)7:13
- Security operations: hardening, assets and vulnerabilities gamesTower · Speed round · Match-up
Week 6Security operations: defences, identity and incidents
≈ 6 h 25 min · 48 long showers- Firewalls (part 1 of 2)5:46
- Firewalls (part 2 of 2)5:55
- Web Filtering10:00
- Operating System Security3:22
- Secure Protocols4:47
- Email Security7:05
- Monitoring Data7:25
- Endpoint Security9:25
- Identity and Access Management (part 1 of 2)6:23
- Identity and Access Management (part 2 of 2)6:33
- Defences and incident response checkpointTimed · 15 min
- Access Controls7:49
- Multifactor Authentication4:30
- Password Security6:22
- Scripting and Automation8:20
- Incident Response9:14
- Incident Planning6:50
- Digital Forensics9:54
- Log Data (part 1 of 2)6:51
- Log Data (part 2 of 2)7:00
- Security operations: defences, identity and incidents gamesTower · Speed round · Match-up
Week 7Security program management
≈ 5 h 5 min · 38 long showers- Security Policies (part 1 of 2)5:31
- Security Policies (part 2 of 2)5:41
- Security Standards5:36
- Security Procedures7:02
- Security Considerations4:52
- Data Roles and Responsibilities2:27
- Risk Management3:30
- Risk Analysis9:13
- Risk Management Strategies3:12
- Business Impact Analysis2:55
- Program management checkpointTimed · 15 min
- Third-party Risk Assessment (part 1 of 2)5:48
- Third-party Risk Assessment (part 2 of 2)5:58
- Agreement Types5:19
- Compliance8:06
- Privacy5:22
- Audits and Assessments2:49
- Penetration Tests5:29
- Security Awareness6:45
- User Training4:31
- Security program management gamesTower · Speed round · Match-up