CompTIA Exam Prep - ITF+, A+, Network+, Security+, CySA+

 Computer Fraud and Abuse Act The Computer Fraud and Abuse Act (CFAA) , codified at 18 U.S.C. § 1030 , is the primary U.S. federal law addressing computer-related crimes. Enacted in 1986 and amended multiple times since, it was originally designed to combat hacking but now covers a broad range of cyber offenses 1 2 . Purpose and Scope The CFAA criminalizes various forms of unauthorized access to computers and networks. It applies to: Protected computers , which include any device used in or affecting interstate or foreign commerce (essentially any internet-connected device). Government systems , financial institutions, and systems involved in national security. Key Prohibited Acts The CFAA outlines seven categories of prohibited conduct 2 : 1. Unauthorized access to obtain national security or protected information. 2. Accessing government computers without authorization. 3. Computer-based fraud through unauthorized access. 4. Causing damage by transmitting malicious code or co...

 Lock Picking - Need to know for Pentest+ exam Lock picking is the practice of unlocking a lock by manipulating its components without using the original key. It’s commonly used in physical security assessments, locksmithing, and penetration testing. Here’s a detailed breakdown of the main methods of lock picking, especially for pin tumbler locks (the most common type): 1. Single Pin Picking (SPP) Description: The most precise and controlled method. Involves lifting each pin individually to the shear line using a hook pick while applying tension to the lock. Pros:  • High success rate with practice. • Works on high-security locks. Cons:  • Time-consuming. • Requires skill and patience. 2. Raking Description: A faster, less precise method. Uses a rake tool to scrub across the pins while applying tension, hoping to set multiple pins quickly. Pros: • Quick and effective on low-security locks. • Great for beginners. Cons: • Less effective on high-security or w...

 Hirens Boot CD PE What Is Hiren’s BootCD PE? Hiren’s BootCD PE (Preinstallation Environment) is a modern, bootable recovery toolkit based on Windows PE (Preinstallation Environment). It is designed to help users diagnose, repair, and recover Windows systems that are unbootable, infected, or otherwise malfunctioning 1 2 . Key Features and Capabilities 1. Windows PE-Based Environment Runs a lightweight version of Windows (Windows 10 or 11 PE). No installation required — boot directly from a USB or CD/DVD. Supports both Legacy BIOS and UEFI systems. 2. Comprehensive Toolset Includes a wide range of free and legal utilities for: System repair and diagnostics Disk imaging and cloning Partition management Password recovery Malware scanning Data recovery Remote access and networking Examples of Included Tools: MiniTool Partition Wizard, Macrium Reflect, AOMEI Backupper Malwarebytes, Recuva, NirSoft Utilities TeamViewer, FileZilla, PuTTY, Firefox 3. Driver Support Automatically installs ...

 Active KillDisk What Is Active@ KillDisk? Active@ KillDisk is a powerful, portable data erasure tool designed to permanently erase data on storage devices, including HDDs, SSDs, USB drives, and memory cards. It ensures that deleted files and folders cannot be recovered, even with advanced forensic tools 1 . Key Features 1. Secure Data Erasure Supports one-pass and multi-pass wiping methods, including standards such as DoD 5220.22-M and Gutmann Method 2 . Overwrites every sector of the drive with patterns (e.g., zeroes or random data), making recovery impossible. 2. Wide Device Support Works with hard drives, solid-state drives, USB flash drives, and even dynamic disks. Can be run from a bootable USB/CD/DVD, allowing erasure of system drives without OS interference 2 . 3. Advanced Disk Inspection Includes a Disk Viewer for low-level inspection. Displays SMART data for disk health monitoring 1 . 4. Verification and Logging Generates detailed logs and certificates of erasure. Offers ...

 Modular Power Supply A modular power supply is a type of computer power supply unit (PSU) designed to offer flexibility, improved airflow, and easier cable management by allowing users to attach only the cables they need. Here's a detailed breakdown of its benefits: 1. Improved Cable Management Customizable cabling: You only connect the cables required for your specific components. Less clutter: Reduces excess cables inside the case, making it easier to organize. Cleaner builds: Ideal for showcasing builds in transparent or open cases. 2. Better Airflow and Cooling Fewer cables mean less obstruction to airflow. Improved airflow helps maintain lower internal temperatures , thereby enhancing system stability and longevity. 3. Easier Maintenance and Upgrades Quick component swaps: You can easily disconnect and reconnect cables without disturbing the entire setup. Simplified troubleshooting: Easier to isolate and test individual components. 4. Aesthetic Appeal A clean, minimal cable ...

 802.1Q VLAN Tagging What is IEEE 802.1Q? IEEE 802.1Q is a networking standard that defines Virtual LAN (VLAN) tagging on Ethernet frames. It allows multiple VLANs to coexist on a single physical network link by inserting a tag into Ethernet frames to identify which VLAN the frame belongs to. Purpose of 802.1Q The primary objective of 802.1Q is to facilitate network segmentation and traffic isolation without necessitating separate physical switches or cabling for each VLAN. This improves: Security Performance Manageability How 802.1Q Works 1. VLAN Tagging 802.1Q adds a 4-byte tag to the Ethernet frame between the source MAC address and the EtherType field. This tag includes: Tag Protocol Identifier (TPID): 2 bytes, always set to 0x8100 to indicate a VLAN-tagged frame. Tag Control Information (TCI): 2 bytes, containing: Priority Code Point (PCP): 3 bits for QoS (Quality of Service) Drop Eligible Indicator (DEI): 1 bit for congestion management VLAN ID (VID): 12 bits identifyin...

 Zed Attack Proxy (ZAP) Zed Attack Proxy (ZAP) is a free, open-source security tool developed by the Open Web Application Security Project (OWASP). It is widely used for penetration testing and vulnerability scanning of web applications. ZAP is designed to be easy to use for beginners while still offering advanced features for experienced security professionals. Overview of ZAP Full Name: OWASP Zed Attack Proxy Purpose: Web application security testing Platform: Cross-platform (Windows, macOS, Linux) Interface: GUI, CLI, and API License: Open-source (Apache License 2.0) Key Features 1. Intercepting Proxy ZAP acts as a man-in-the-middle proxy, allowing testers to intercept, inspect, and modify HTTP(S) traffic between the browser and the web application. 2. Automated Scanner ZAP can automatically scan a target web application for common vulnerabilities such as: SQL Injection Cross-Site Scripting (XSS) Broken Authentication Security Misconfigurations 3. Passive and Active Scanning ...

 FIPS 140-3 (Federal Information Processing Standard Publication 140-3) FIPS 140-3 (Federal Information Processing Standard Publication 140-3) is a U.S. and Canadian government standard that defines security requirements for cryptographic modules—the hardware, software, or firmware that performs encryption, decryption, key management, and other cryptographic functions. It was published by NIST in 2019 and supersedes FIPS 140-2 1 . Purpose and Scope FIPS 140-3 ensures that cryptographic modules used to protect sensitive information meet rigorous security standards. It applies to: Federal agencies Contractors working with federal systems Private sector organizations (e.g., banks, healthcare, SaaS providers) that handle sensitive data or want to meet procurement requirements 2 . Key Components of FIPS 140-3 FIPS 140-3 builds on international standards ISO/IEC 19790:2012 and ISO/IEC 24759:2017 and includes: 1. Cryptographic Module Specification Defines the module’s architecture, crypto...

 Threat Hunting Threat hunting is a proactive cybersecurity approach that aims to detect and mitigate threats that evade traditional security defenses. Unlike reactive methods that respond to alerts, threat hunting involves actively searching for signs of malicious activity within an organization's systems and networks before an alert is triggered. Core Concepts of Threat Hunting 1. Proactive Investigation Threat hunters assume that adversaries are already inside the network and look for indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs) that may signal a breach. 2. Hypothesis-Driven Hunts often begin with a hypothesis based on threat intelligence, past incidents, or behavioral anomalies. For example: “What if an attacker is using PowerShell to move laterally across our network?” 3. Data-Driven Analysis Threat hunters analyze large volumes of data from sources like: Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM) Netwo...

 Ubiquiti U6 Enterprise  Wireless Access Point Ubiquiti UniFi U6 Enterprise Review Overview The U6 Enterprise is Ubiquiti’s flagship Wi-Fi 6E access point designed for high-performance environments. It supports tri-band connectivity (2.4 GHz, 5 GHz, and 6 GHz), making it ideal for dense client environments, modern homes, and enterprise setups. Key Features Wi-Fi 6E Support: Adds the 6 GHz band for faster speeds and reduced interference. Tri-Band AXE11000: Offers up to 4,800 Mbps on both 5 GHz and 6 GHz bands, and 600 Mbps on 2.4 GHz. 2.5Gbps PoE+ Port: Enables multi-gig connectivity, ideal for high-speed networks. Compact Design: Despite its power, it’s smaller than many competitors like the NETGEAR WAX630E. No Power Adapter: Requires PoE+ or PoE++ injector or switch; no traditional power port. Additional Features: Wireless Meshing Band Steering 802.11v BSS Transition Management 802.11r Fast Roaming 802.11k Radio Resource Management (RRM) Advanced Radio Management Passpoint...

 OOB Out-of-Band Management Out-of-band management (OOBM) is a method used in IT and network administration to remotely monitor, manage, and troubleshoot systems independently of the primary network connection. It’s beneficial when the main network is down or the system is unresponsive. Here’s a detailed breakdown: 1. What Is Out-of-Band Management? Out-of-band management refers to the use of a dedicated management channel that operates separately from the standard data network. This allows administrators to access and control devices even if the operating system is down or the network is unreachable. 2. Key Components Dedicated Management Port: Most enterprise-grade hardware (servers, switches, routers) includes a separate port for OOBM, such as: IPMI (Intelligent Platform Management Interface) iLO (Integrated Lights-Out by HP) DRAC (Dell Remote Access Controller) Cisco's Console Ports Management Network: A separate network infrastructure used solely for management traffic. It’s i...

 NIST SP 800-207 Zero Trust Architecture NIST Special Publication 800-207 , titled " Zero Trust Architecture (ZTA) ", is a foundational cybersecurity framework published by the National Institute of Standards and Technology (NIST) in August 2020. It redefines how organizations should approach security in a world where traditional network perimeters are no longer sufficient. What Is Zero Trust? Zero Trust (ZT) is a security philosophy that assumes no user, device, or system should be trusted by default, regardless of whether it is inside or outside the network perimeter. Every access request must be: Explicitly verified Continuously validated Contextually evaluated This model is a response to modern threats, remote work, BYOD (Bring Your Own Device), and cloud computing. Core Principles of NIST SP 800-207 NIST outlines seven core tenets of Zero Trust: 1. All data sources and computing services are considered resources. 2. All communication is secured, regardless of network loc...

 Spanning Tree Priority Values In the context of Spanning Tree Protocol (STP), priority values play a crucial role in determining the Root Bridge and the overall topology of a loop-free network. Here's a detailed explanation: What Are Spanning Priority Values? Spanning priority values are part of the Bridge ID , which is used to elect the Root Bridge in a network running STP. The Bridge ID consists of: Bridge Priority (2 bytes) MAC Address (6 bytes) Together, they form an 8-byte identifier unique to each switch. Role in Root Bridge Election STP uses the Bridge ID to elect the Root Bridge, which is the central switch in the spanning tree topology. The election process works as follows: Lowest Bridge ID wins. If multiple switches have the same priority, the one with the lowest MAC address becomes the Root Bridge. By default, the bridge priority is set to 32768 on most switches. You can manually configure it to influence which switch becomes the Root Bridge. Priority Value Rang...

 NIST SP 800-61r2 NIST Special Publication 800-61 Revision 2 (SP 800-61r2) , titled Computer Security Incident Handling Guide, is a foundational document published by the National Institute of Standards and Technology (NIST) to help organizations develop and implement effective incident response capabilities. Although it was officially withdrawn in April 2025 and replaced by Revision 3, Revision 2 remains widely referenced and influential 1. Here’s a detailed breakdown of its contents and guidance: Purpose and Scope SP 800-61r2 provides guidelines for incident handling and response, aiming to help organizations: Detect and analyze security incidents. Contain, eradicate, and recover from incidents. Improve incident response capabilities over time. It is platform-agnostic, meaning it applies regardless of the hardware, operating system, or application. Structure of the Document The guide is divided into four major sections: 1. Introduction Defines what constitutes a security incident...

  NIST SP 800-115 NIST SP 800-115, titled "Technical Guide to Information Security Testing and Assessment", is a foundational document published by the National Institute of Standards and Technology (NIST). It provides a structured yet flexible framework for conducting technical security assessments, including penetration testing, vulnerability scanning, and security reviews. Purpose of NIST SP 800-115 The guide helps organizations: Plan and execute security testing and assessments Analyze findings Develop mitigation strategies. It is not a comprehensive testing program but rather a framework of best practices for conducting technical security evaluations. Core Components of the Framework NIST SP 800-115 outlines a four-phase process for penetration testing and security assessments: 1. Planning Phase Define scope and objectives Establish rules of engagement Address legal and ethical considerations Finalize documentation and consent 2. Discovery Phase Information Gathering: Co...

 NMAP (Network Mapper) Nmap (short for Network Mapper) is a powerful, open-source tool used for network discovery and security auditing. It’s widely used by system administrators, network engineers, and cybersecurity professionals to map networks, identify devices, and detect vulnerabilities. What Nmap Does Nmap sends specially crafted packets to target hosts and analyzes the responses to determine: Which hosts are up What services (e.g., HTTP, FTP) they offer What operating systems they run What firewalls or filters are in place What ports are open, closed, or filtered Key Features 1. Host Discovery Identifies live hosts on a network. Example: nmap -sn 192.168.1.0/24 2. Port Scanning Detects open ports and services. Example: nmap -p 1-1000 192.168.1.1 3. Service Version Detection Determines the version of services running. Example: nmap -sV 192.168.1.1 4. OS Detection Guesses the operating system of a host. Example: nmap -O 192.168.1.1 5. Scriptable Interaction (NSE) Uses the Nmap...

 CREST (Council of Registered Ethical Security Testers) CREST (Council of Registered Ethical Security Testers) is a globally recognized not-for-profit accreditation and certification body that plays a vital role in the cybersecurity industry. Here's a detailed breakdown of what CREST is, what it does, and why it matters: What Is CREST? CREST is an international membership organization that sets rigorous standards for cybersecurity service providers and professionals. Founded in 2006, it aims to build trust in the digital world by improving the quality and consistency of cybersecurity services worldwide. Mission and Goals CREST focuses on four key pillars: Capability: Developing and measuring the skills of cybersecurity professionals. Capacity: Expanding the global pool of cybersecurity talent. Consistency: Ensuring high-quality service delivery across the industry. Collaboration: Engaging with governments, academia, and industry to share knowledge and improve standards. CREST Ce...

 ASLR Address Space Layout Randomization Address Space Layout Randomization (ASLR) is a security technique used in modern operating systems to randomize the memory addresses used by system and application components. Its primary goal is to make the exploitation of memory corruption vulnerabilities (such as buffer overflows) significantly harder for attackers. Why ASLR Matters Many attacks rely on knowing the exact location of code or data in memory. For example, if an attacker wants to execute malicious code via a buffer overflow, they need to know where to jump in memory. ASLR disrupts this by randomizing memory layout, making it unpredictable. How ASLR Works When a program is loaded into memory, ASLR randomizes the locations of: Stack Heap Shared libraries Executable code Memory-mapped files This means that each time a program runs, its memory layout is different. Example: Without ASLR: Stack always starts at address 0x7fff0000 libc always loads at 0x40000000 With ASLR: Stack mig...