CompTIA Security+ Flashcards: 99 Key Terms and What to Update for SY0-701
Study CompTIA Security+ with 99 flashcards: CIA triad, IDS vs IPS, RTO vs RPO, backups, PKI. Learn in contrast pairs and update the deck for SY0-701.
Studying. But it's also a video game. 🎮
Flashcards, quizzes and games that make you actually remember.
Posted by
FLIP IT TeamRelated reading
CompTIA Network+ Flashcards: Ports, Subnets and the OSI Model in 99 Cards
Study CompTIA Network+ (N10-009) with 99 flashcards: OSI layers, ports, private IP ranges, cabling and VPNs, plus the troubleshooting cards you should add.
AWS Solutions Architect Flashcards: Sorting Exam Material from AWS Trivia (140 Cards)
Study the AWS Solutions Architect deck the smart way: tag 140 cards by SAA-C03 domain, separate exam material from AWS history and add the missing cards.
CompTIA A+ Flashcards: What This 182-Card Deck Covers and What to Add
The CompTIA A+ deck maps the CompTIA certification ladder, renewals and stackables. Learn what to keep, which cards are outdated and the A+ cards to add.
CompTIA Security+ is a vocabulary exam before it is anything else: most questions hinge on telling two near-identical terms apart. Deck YR0667 – CompTIA Security+ (99 cards) is a clean, accurate glossary built for exactly that. Here is how to turn it into exam points.
Study this deck: CompTIA Security+
1 / 10What is the CIA triad?
Tap the card for the answer · swipe right if you knew it, left if not
What the cards actually say
| Front | Back |
|---|---|
| What is the CIA triad? | Confidentiality, Integrity, Availability |
| What is non-repudiation? | Preventing someone from denying they performed an action; digital signatures and logging |
| What is the difference between DoS and DDoS? | DoS: single source; DDoS: multiple distributed sources (harder to mitigate) |
| What is whaling? | Spear phishing targeting high-profile executives |
| What is a digital signature? | Encrypted hash of the message using the sender's private key |
| What is the difference between transport mode and tunnel mode in IPsec? | Transport: encrypts only payload; Tunnel: encrypts the entire IP packet including header |
| What is RPO? | Maximum acceptable data loss measured in time |
| What is the difference between full, incremental, and differential backups? | Incremental: changes since last backup; Differential: changes since last full backup |
Terms you'll lock in
AAA (authentication, authorization, accounting), the three authentication factors, MFA, SSO, least privilege, separation of duties, defense in depth, vulnerability vs threat vs risk vs exploit, virus, worm, Trojan, ransomware, spyware, rootkit, botnet, phishing, spear phishing, vishing, smishing, MITM, SQL injection, XSS, CSRF, buffer overflow, privilege escalation, AES, RSA, SHA-256, MD5, PKI, Certificate Authority, TLS, VPN, WPA3, SIEM, IDS vs IPS, signature vs anomaly detection, honeypot, black/white/gray box testing, zero-day, hardening, RBAC, DAC, MAC, NAC, DMZ, air gap, DLP, steganography, tokenization, data masking, AUP, RTO, the 3-2-1 backup rule, GDPR, PCI DSS, HIPAA, and the four risk responses: mitigate, transfer, accept, avoid.
Study it in contrast pairs, not in order
The deck runs in textbook order, but the exam tests confusables. Build five mini-sessions and review each as a set: IDS/IPS, DAC/MAC/RBAC, phishing/spear phishing/whaling/vishing/smishing, RTO/RPO, incremental/differential. For each pair, say the one-word discriminator out loud ("IPS blocks", "differential = since last full") before flipping. Watch the acronym trap too: on this deck MAC means Mandatory Access Control, while the exam also uses MAC for media access control addresses and message authentication codes.
Update two things for SY0-701
The current exam is SY0-701 (launched November 2023), and the deck leans toward the older SY0-601 blueprint:
- Card 84 lists incident response as Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned. SY0-701 uses Preparation, Detection, Analysis, Containment, Eradication, Recovery, Lessons Learned. Rewrite the card.
- Missing objectives: zero trust (control plane/data plane, policy engine), SASE, change management, cloud and IoT architecture, and the threat-actor list. Add 8–10 cards on these, and tag every card by the five SY0-701 domains so you can track weak areas (Security Operations carries the most weight, at 28%).
Also note that SSL is deprecated: on the exam, "secure transport" means TLS 1.2/1.3.
Keep going
If you're stacking CompTIA certs, our CompTIA Network+ guide covers the ports and OSI layers that Security+ takes for granted.
Open Flip It, search for deck code YR0667 (CompTIA Security+), and start with the contrast pairs.
Ready to learn faster? 🚀
Join FLIP IT for free and turn studying into a game.