Study guide · 8 topics
Cybersecurity Exam Study Guide
Eight topic guides aligned to Security+ SY0-701 domains — everything tested on CompTIA Security+ and developer security interviews. Code examples, exam traps, and tips throughout.
Test your Cybersecurity knowledge → Free · No sign-upCommon Web Attacks Explained — XSS, SQL Injection, CSRF & SSRF | Security+ SY0-701
Web attacks are tested on every security exam. Here is how the top attacks work and how to defend against them — aligned to SY0-701 Domain 1 (Threats, Attacks & Vulnerabilities, 24% of exam).
Read guide →02 · 7 min readAuthentication & Authorisation — Passwords, JWT, OAuth & MFA Explained
Auth is tested in every security exam and interview. Here's the concepts you need — from password hashing to OAuth flows.
Read guide →03 · 6 min readEncryption Types for CompTIA Security+ — AES, RSA, TLS & Hashing Explained
Encryption fundamentals are tested on every security certification. Here's the concepts you must know.
Read guide →04 · 7 min readOWASP Top 10 Explained — Web Security Risks and How to Fix Them | Security+ SY0-701
The OWASP Top 10 is the foundation of web security. Referenced in SY0-701 Domain 1 (Threats, Attacks & Vulnerabilities) and every developer security interview.
Read guide →05 · 6 min readNetwork Security Explained — Firewalls, IDS/IPS, VPN & Zero Trust
Network security is core to every security certification. Here's the concepts and distinctions that get tested.
Read guide →06 · 5 min readWeb Security Headers Explained — CSP, HSTS, X-Frame-Options & CORS
Security headers are a quick win that stop entire categories of attacks. Here's what exams test.
Read guide →07 · 6 min readIncident Response & Digital Forensics — CompTIA Security+ SY0-701 Domain 4
Operations & Incident Response is 16% of the SY0-701 exam. Here is what you need to know about handling breaches, analysing evidence, and recovering systems.
Read guide →08 · 6 min readSecAI+ vs Security+ SY0-801 — Which to Take in 2026
Security+ is the baseline security certification; SecAI+ is a newer, shorter exam on securing AI systems that assumes you already have that baseline. Security+ V8 launches around 17 November 2026.
Read guide →Where Cybersecurity leads
Certifications that build on Cybersecurity
Real proctored exams with published blueprints — each with a free readiness test here that scores you per exam domain rather than giving you one number.
CompTIA SecAI+ (CY0-001)
Securing AI systems is 40% of SecAI+ on its own — adversarial risk, securing AI deployments, and the controls around models and their pipelines. CompTIA recommends Security+ or equivalent, which is what you just tested.
NVIDIA NCP-AAI (Agentic AI)
Safety, Ethics and Compliance plus Human-AI Interaction and Oversight are their own NCP-AAI domains — the exam tests who approves an agent’s consequential actions, which is your question.