Documentation Index
Fetch the complete documentation index at: https://mintlify.com/farhanashrafdev/90DaysOfCyberSecurity/llms.txt
Use this file to discover all available pages before exploring further.
Overview
The second week of the 90 Days of Cybersecurity challenge focuses on building essential security knowledge aligned with CompTIA Security+ certification (SY0-701). This week builds upon your networking foundation and introduces core cybersecurity concepts, threats, vulnerabilities, and security controls.Learning Path
Day 8: Threats, Attacks & Vulnerabilities
Understand different types of cyber threats, attack vectors, and common vulnerabilities.
Day 9: Architecture & Design
Learn about secure network architecture, cloud security, and infrastructure design.
Day 11: Operations & Incident Response
Study security operations, monitoring, and incident response procedures.
Day 12: Governance, Risk & Compliance
Understand security policies, frameworks, regulations, and risk management.
Day 13: Cryptography & PKI
Master encryption, hashing, digital signatures, and public key infrastructure.
Course Options
- Recommended: Professor Messer
- Alternative: Pete Zerger
Professor Messer’s Security+ (SY0-701) Course
Strongly Recommended - The most comprehensive and well-structured free resource for Security+ preparation.Professor Messer's SY0-701 Playlist
Complete Security+ SY0-701 video series covering all exam objectives with clear explanations and real-world examples.
- Covers 100% of Security+ SY0-701 exam objectives
- Clear, concise explanations without fluff
- Free course notes available
- Regular updates to match current exam version
- Trusted by thousands of certification candidates
Study Tips
Complete related practice questions and exercises daily. Consider these resources:
- Professor Messer’s free Security+ practice exams
- CompTIA CertMaster Practice
- Jason Dion’s practice tests (paid)
- Exam Compass free practice questions
Key Topics to Master
By the end of Day 14, you should be comfortable with:Security Fundamentals
- CIA Triad: Confidentiality, Integrity, and Availability
- Attack Types: Phishing, malware, social engineering, DDoS
- Threat Actors: APTs, insider threats, hacktivists
- Vulnerability Management: Scanning, assessment, and remediation
Security Controls & Technologies
- Access Control: Authentication, authorization, and accounting (AAA)
- Cryptography: Symmetric, asymmetric encryption, and hashing
- Network Security: Firewalls, IDS/IPS, VPNs, and segmentation
- Security Tools: SIEM, EDR, vulnerability scanners
Security Operations
- Incident Response: Detection, analysis, containment, recovery
- Monitoring & Logging: Security event analysis and correlation
- Risk Management: Assessment, mitigation, and acceptance
- Compliance: GDPR, HIPAA, PCI-DSS, and other frameworks
Additional Practice
CompTIA Security+ Certification
Official certification information and exam objectives (SY0-701)
Security+ Exam Objectives
Download the official exam objectives document
Professor Messer Practice Exams
Free practice questions and study resources
Cybrary Security+ Course
Additional free training content and labs