Hero Cyber/Cybersecurity & AI/Security+
Security Hero Official Course Logo

CompTIA Security+ Preparation

Think BeyondThe Threat.

Know what needs protection, what could go wrong, and which safeguard fits. Build your Security+ foundation around the decisions that connect people, systems, and risk.

Start My 30 Day Trial Watch The Walkthrough

30 days free with Hero Access. Then $149/month until canceled.

Five Connected Security Course Areas
A technology professional seen through a display of informationYour Next Chapter Starts Here
Your First 30 Days
$0Today

Explore the course. Find your rhythm. See how you like to learn.

Hero Access · Security+
Empowerment Through Knowledge.Hero Cyber / Security+
28Course Lessons5 Connected Course Areas
1,512FlashcardsReview The Concepts And Distinctions
1,344Practice Questions & ActivitiesMove From Recall To Application
24/7On-Demand StudyYour Schedule. Your Selected Plan.

01 The Work Behind The Credential

Learn Why The Safeguard Matters.

Security Hero connects the five Security+ course areas to the work of protecting systems and data. Learn the terms, compare the controls, and work through the situations where the right response depends on context.

01Recognize The Threat

Relate common threat indicators and vulnerabilities to appropriate mitigation and response choices.

02Connect The Controls

Explain how identity, encryption, segmentation, and resilience protect enterprise systems and data.

03Make Risk Understandable

Connect security operations to risk management, governance, third party oversight, and evidence.

Read More About Security Hero

Security work starts with understanding what needs protection and how it can be harmed. Security Hero connects the purpose of a control to the threat, system, or business process it supports. Across 28 lessons, you move from foundational principles and cryptography to vulnerabilities, architecture, identity, monitoring, incident response, and security governance. A suspicious sign in, exposed service, or missing backup becomes a reason to examine context and choose a proportionate response. The course builds the vocabulary and reasoning needed to describe those connections clearly.

Five course areas keep the material organized: General Security Concepts; Threats, Vulnerabilities, and Mitigations; Security Architecture; Security Operations; and Security Program Management and Oversight. Detailed lessons are supported by 1,512 flashcards, 1,344 practice items, and eight performance based questions. Revisit the distinction between authentication and authorization, compare preventive and detective controls, or work through the sequence of an incident response. These different forms of practice help you see where recalling a term is enough and where you need to apply it to a security situation.

Colleagues reviewing information on a computer screen
Build The Skills Behind The CredentialThreats. Controls. Better Decisions.
Keep The Whole Subject In ViewThreatsIdentityArchitectureOperationsRisk

02 Inside The Student Center

Your Security+ Tools, In Action.

Take a look before you enroll. Choose a tool to play its Security Hero walkthrough, then jump to the part you want to explore.

Security Hero / Student Center6 Walkthroughs · Captions Included

Your Security Hero Student Center

See how My Learning keeps your selected course, lesson, flashcards, and practice together.

Jump To A Moment
Read The Walkthrough Transcript
Open The Student Center

03 Your Complete Course Map

See What You Will Actually Study.

Every Security Hero lesson is listed below. Open a course area, explore a lesson, and see its chapter outline and linked study activities.

CompTIA Security+ Certification Mark
Preparation For Security+Training from Hero Cyber. Certification is awarded separately by its issuing organization.
28 Of 28 LessonsLessons · Flashcards · Practice
01General Security Concepts4 Lessons
1.1Types of Security Controls

Compare and contrast various types of security controls.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Security Control Foundations

  1. Purpose of Security Controls
  2. Security Control Categories
  3. Technical Controls
  4. Managerial Controls
  5. Operational Controls
  6. Physical Controls
  7. How Controls Protect Assets
  8. Layering Controls Across the Environment
  9. Scenario-Based Quiz

Managerial and Operational Controls

  1. Policies and Procedures
  2. Security Planning and Oversight
  3. Governance and Accountability
  4. Personnel-Focused Security Controls
  5. Day-to-Day Operational Processes
  6. Monitoring and Account Reviews
  7. Incident Response Procedures
  8. Applying Human-Driven Controls
  9. Scenario-Based Quiz

Technical and Physical Controls

  1. Automated Security Enforcement
  2. Multi-Factor Authentication
  3. Firewalls and Access Technologies
  4. Encryption and Secure Data Handling
  5. System Hardening and Secure Configuration
  6. Facility and Asset Protection
  7. Locks, Cameras, Guards, and Barriers
  8. Matching Technical and Physical Controls to Risk
  9. Scenario-Based Quiz

Security Control Types and Response Logic

  1. Preventive Controls
  2. Deterrent Controls
  3. Detective Controls
  4. Corrective Controls
  5. Compensating Controls
  6. Directive Controls
  7. Selecting Controls by Timing and Purpose
  8. Applying Controls in Real-World Scenarios
  9. Scenario-Based Quiz
1.2Fundamental Security Concepts

Summarize fundamental security concepts.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Core Security Principles and Authentication

  1. Confidentiality, Integrity, and Availability
  2. Confidentiality and Data Protection
  3. Integrity and Data Trust
  4. Availability and Service Continuity
  5. Non-Repudiation
  6. Authenticating People
  7. Authenticating Systems
  8. Authentication Models
  9. Scenario-Based Quiz

Access Control and Gap Analysis

  1. Attribute-Based Access Control
  2. Discretionary Access Control
  3. Access Decisions After Authentication
  4. Gap Analysis Purpose
  5. Establishing the Current Baseline
  6. Defining the Target State
  7. Conducting the Gap Analysis
  8. Prioritizing Security Improvements
  9. Scenario-Based Quiz

Zero Trust and Policy-Driven Security

  1. Zero Trust Fundamentals
  2. Never Trust, Always Verify
  3. Least Privilege Access
  4. Microsegmentation
  5. Adaptive Identity
  6. Threat Scope Reduction
  7. Policy Engine
  8. Subject and System Access Requests
  9. Scenario-Based Quiz

Physical Security and Deception Technologies

  1. Physical Security Foundations
  2. Bollards, Fencing, and Perimeter Barriers
  3. Access Control Vestibules
  4. Video Surveillance and Security Guards
  5. Physical Security Sensors
  6. Deception and Disruption Technology
  7. Honeypots and Honeynets
  8. Honeyfiles and Honeytokens
  9. Scenario-Based Quiz
1.3Change Management Processes

Explain the importance of change management processes.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Change Management Foundations

  1. Purpose of Change Management
  2. Business Processes
  3. Ownership and Accountability
  4. Impact Analysis
  5. Security Requirements for Change
  6. Test Results and Validation
  7. Change Approval and Documentation
  8. Change Management Risk Reduction
  9. Scenario-Based Quiz

Change Planning and Implementation Controls

  1. Maintenance Windows
  2. Standard Operating Procedures
  3. Allow Lists
  4. Deny Lists
  5. Restricted Activities
  6. Downtime Planning
  7. Service Restart
  8. Application Restart
  9. Scenario-Based Quiz

Technical Impacts and Environment Dependencies

  1. Legacy Applications
  2. Application and System Dependencies
  3. Network and System Diagrams
  4. Architecture Diagrams
  5. Data Flow Diagrams
  6. Security Control Dependencies
  7. Compatibility and Regression Risk
  8. Backout Planning
  9. Scenario-Based Quiz

Documentation, Policy Updates, and Version Control

  1. Policies and Procedures
  2. Updating Policies and Procedures
  3. Regulatory and Compliance Updates
  4. Lessons Learned After Security Events
  5. Version Control Fundamentals
  6. Major, Minor, and Patch Versions
  7. Change Records and Audit Trails
  8. Continuous Improvement Through Controlled Change
  9. Scenario-Based Quiz
1.4Cryptographic Solutions

Explain the importance of using appropriate cryptographic solutions.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Public Key Infrastructure and Encryption Foundations

  1. Public Key Infrastructure
  2. Public and Private Keys
  3. Key Escrow
  4. Encryption Purpose
  5. Full-Disk Encryption
  6. Partition Encryption
  7. Volume Encryption
  8. Database Encryption
  9. Scenario-Based Quiz

Encryption Types, Algorithms, and Key Exchange

  1. Transport and Communication Encryption
  2. Asymmetric Encryption
  3. Asymmetric Encryption Characteristics
  4. Symmetric Encryption
  5. Symmetric Encryption Characteristics
  6. Key Exchange
  7. Diffie-Hellman Key Exchange
  8. Encryption Algorithms and Key Length
  9. Scenario-Based Quiz

Cryptographic Tools and Data Protection Techniques

  1. Cryptographic Tools
  2. Trusted Platform Module
  3. Key Management System
  4. Hardware Security Module
  5. Obfuscation
  6. Steganography
  7. Tokenization
  8. Data Masking
  9. Scenario-Based Quiz

Hashing, Digital Signatures, and Certificate Trust

  1. Hashing
  2. Salting
  3. Key Stretching
  4. Digital Signatures
  5. Open Public Ledger
  6. Certificates
  7. Certificate Authority
  8. Certificate Revocation and Certificate Types
  9. Scenario-Based Quiz
02Threats, Vulnerabilities, and Mitigations5 Lessons
2.1Common Threat Actors and Motivations

Compare and contrast common threat actors and motivations.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Threat Actor Types and Profiles

  1. Threat Actor Overview
  2. Nation-State Actors
  3. Organized Crime
  4. Hacktivists
  5. Unskilled Attackers
  6. Insider Threats
  7. Internal Actors
  8. External Actors
  9. Scenario-Based Quiz

Actor Access, Resources, and Capability

  1. Shadow IT
  2. Legitimate Access Abuse
  3. Unauthorized External Access
  4. Resources and Funding
  5. Well-Funded Actors
  6. Limited-Funding Actors
  7. Level of Sophistication and Capability
  8. High- and Low-Sophistication Actors
  9. Scenario-Based Quiz

Data, Financial, and Disruption Motivations

  1. Understanding Threat Actor Motivations
  2. Data Exfiltration
  3. Financial Gain
  4. Blackmail
  5. Service Disruption
  6. Disruption and Chaos
  7. Revenge
  8. Motivation-to-Impact Mapping
  9. Scenario-Based Quiz

Ideological, Espionage, and Strategic Motivations

  1. Espionage
  2. Philosophical and Political Beliefs
  3. Ethical Motivations
  4. War
  5. Cyber Sabotage
  6. Critical Infrastructure Targeting
  7. Predicting Actor Behavior
  8. Applying Threat Actor Analysis
  9. Scenario-Based Quiz
2.2Common Threat Vectors and Attack Surfaces

Explain common threat vectors and attack surfaces.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Communication and Content-Based Threat Vectors

  1. Messaging-Based Threat Overview
  2. Email
  3. Short Message Service (SMS)
  4. Instant Messaging
  5. Image-Based Attacks
  6. File-Based Attacks
  7. Voice Calls
  8. Removable Devices
  9. Scenario-Based Quiz

Software and Network Attack Surfaces

  1. Client-Based Vulnerable Software
  2. Agentless Vulnerable Software
  3. Unsupported Systems and Applications
  4. Unsecured Wireless Networks
  5. Unsecured Wired Networks
  6. Unsecured Bluetooth Connections
  7. Open Service Ports
  8. Default Credentials
  9. Scenario-Based Quiz

Third-Party and Supply Chain Attack Surfaces

  1. Managed Service Providers
  2. Vendors
  3. Suppliers
  4. Third-Party Solution Integration
  5. Service Provider Compromise
  6. Supplier Security Failures
  7. Supply Chain Attack Propagation
  8. Reducing Third-Party Attack Surfaces
  9. Scenario-Based Quiz

Human Vectors and Social Engineering Attacks

  1. Human Vectors and Social Engineering
  2. Phishing
  3. Vishing
  4. Smishing
  5. Misinformation and Disinformation
  6. Impersonation and Business Email Compromise
  7. Pretexting and Watering Hole Attacks
  8. Brand Impersonation and Typosquatting
  9. Scenario-Based Quiz
2.3Various Types of Vulnerabilities

Explain various types of vulnerabilities.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Software and Application Vulnerabilities

  1. Software Vulnerability Foundations
  2. Memory Injection
  3. Buffer Overflow
  4. Race Conditions
  5. Time-of-Check and Time-of-Use
  6. Malicious Updates
  7. Structured Query Language Injection
  8. Cross-Site Scripting
  9. Scenario-Based Quiz

Hardware, Firmware, and Legacy Vulnerabilities

  1. Hardware Vulnerability Foundations
  2. Firmware Vulnerabilities
  3. End-of-Life Hardware
  4. Legacy Systems
  5. Unsupported Software
  6. Missing Security Updates
  7. Hardware-Based Persistence
  8. Reducing Legacy System Risk
  9. Scenario-Based Quiz

Virtualization, Cloud, and Supply Chain Vulnerabilities

  1. Virtualization Vulnerability Foundations
  2. Virtual Machine Escape
  3. Resource Reuse
  4. Cloud-Specific Security Weaknesses
  5. Supply Chain Security
  6. Service Provider Risk
  7. Hardware Provider Risk
  8. Software Provider Risk
  9. Scenario-Based Quiz

Cryptographic, Mobile, and Zero-Day Vulnerabilities

  1. Cryptographic Misconfiguration
  2. Encryption and Key Management Weaknesses
  3. Sideloading
  4. Jailbreaking
  5. Mobile Device Security Exposure
  6. Zero-Day Vulnerabilities
  7. Patch Availability and Defensive Timing
  8. Prioritizing High-Risk Vulnerabilities
  9. Scenario-Based Quiz
2.4Indicators of Malicious Activity

Given a scenario, analyze indicators of malicious activity.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Malware and Host-Based Indicators

  1. Indicators of Malicious Activity
  2. Malware
  3. Trojan
  4. Worm
  5. Virus
  6. Logic Bomb
  7. Rootkit
  8. Bloatware
  9. Scenario-Based Quiz

Network and Wireless Attack Indicators

  1. Physical Attacks and Brute Force
  2. RFID Cloning
  3. Distributed Denial-of-Service
  4. Reflected Attacks
  5. Domain Name System Attacks
  6. DNS Spoofing
  7. Evil Twin
  8. Wi-Fi Spoofing
  9. Scenario-Based Quiz

Code, Session, and Protocol Attack Indicators

  1. On-Path Attacks
  2. Malicious Code
  3. Buffer Overflow
  4. Replay Attack
  5. Forgery
  6. Downgrade Attacks
  7. Collision Attacks
  8. Password Spraying
  9. Scenario-Based Quiz

Behavioral, Log, and Threat Intelligence Indicators

  1. Account Lockout
  2. Concurrent Session Usage
  3. Blocked Content
  4. Impossible Travel
  5. Resource Consumption
  6. Resource Inaccessibility
  7. Out-of-Cycle Logging
  8. Published Indicators and Missing Logs
  9. Scenario-Based Quiz
2.5Mitigation Techniques to Secure the Enterprise

Explain the purpose of mitigation techniques used to secure the enterprise.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Network Segmentation and Access Control

  1. Segmentation
  2. Segmenting Systems by Business Function
  3. Access Control
  4. Access Control Lists
  5. Permissions
  6. Least Privilege
  7. Policy-Based Access Decisions
  8. Reducing Unauthorized Access
  9. Scenario-Based Quiz

Application Control and Enterprise Maintenance

  1. Application Allow List
  2. Isolation
  3. Patching
  4. Patch Prioritization
  5. Configuration Enforcement
  6. Standardized Security Settings
  7. Decommissioning
  8. Reducing Enterprise Attack Surface
  9. Scenario-Based Quiz

Encryption, Monitoring, and Defensive Visibility

  1. Encryption
  2. Data at Rest Protection
  3. Data in Transit Protection
  4. Monitoring
  5. Detecting Unusual Activity
  6. Identifying Security Incidents
  7. Monitoring for Threat Impact
  8. Applying Defensive Visibility Across the Enterprise
  9. Scenario-Based Quiz

Endpoint Protection and System Hardening

  1. System Hardening
  2. Installation of Endpoint Protection
  3. Host-Based Firewall
  4. Host-Based Intrusion Prevention System
  5. Disabling Ports and Protocols
  6. Default Password Changes
  7. Removal of Unnecessary Software
  8. Hardening Hosts Against Attack
  9. Scenario-Based Quiz
03Security Architecture4 Lessons
3.1Security Implications of Different Architecture Models

Compare and contrast security implications of different architecture models.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Architecture and Cloud Deployment Models

  1. Architecture and Infrastructure Concepts
  2. Cloud Architecture
  3. Shared Responsibility Model
  4. Responsibility Matrix
  5. Hybrid Considerations
  6. Cloud Service Dependencies
  7. Cloud-Based Security Tradeoffs
  8. Architecture Risk Evaluation
  9. Scenario-Based Quiz

Modern Infrastructure and Application Architecture

  1. Infrastructure as Code
  2. IaC Security Risks
  3. Serverless Architecture
  4. Serverless Security Responsibilities
  5. Microservices Architecture
  6. Microservice APIs and Access Control
  7. Modular Service Dependencies
  8. Securing Modern Application Architecture
  9. Scenario-Based Quiz

Network and Enterprise Architecture Models

  1. Network Infrastructure
  2. Logical Segmentation
  3. Segmentation and Lateral Movement Control
  4. Software-Defined Networking
  5. SDN Control Plane Considerations
  6. On-Premises Architecture
  7. Centralized Architecture
  8. Decentralized Architecture
  9. Scenario-Based Quiz

Virtualization, IoT, and Operational Technology Architecture

  1. Virtualization
  2. Virtual Machine Escape Risk
  3. Internet of Things
  4. IoT Processing and Security Limitations
  5. Industrial Control Systems and SCADA
  6. ICS/SCADA Availability and Safety
  7. Real-Time Operating Systems
  8. Security Implications of Time-Sensitive Systems
  9. Scenario-Based Quiz
3.2Security Principles to Secure Enterprise Infrastructure

Given a scenario, apply security principles to secure enterprise infrastructure.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Infrastructure Placement and Security Architecture

  1. Device Placement
  2. Security Zones
  3. Attack Surface
  4. Connectivity
  5. Failure Modes
  6. Device Attributes
  7. Inline Security Devices
  8. Tap and Monitor Deployments
  9. Scenario-Based Quiz

Access Gateways and Network Security Devices

  1. Jump Server
  2. Proxy Server
  3. Intrusion Prevention System
  4. Intrusion Detection System
  5. Load Balancer
  6. Network-Based Sensors
  7. Host-Based Sensors
  8. Securing Traffic Through Infrastructure Devices
  9. Scenario-Based Quiz

Network Access Control and Firewall Technologies

  1. 802.1X
  2. Extensible Authentication Protocol
  3. Firewall Types
  4. Stateful Firewalls
  5. Web Application Firewall
  6. Next-Generation Firewalls
  7. Layer 4 Firewalls
  8. Layer 7 Firewalls
  9. Scenario-Based Quiz

Secure Communication and Control Selection

  1. Secure Communication and Access
  2. Remote Access
  3. Tunneling
  4. Internet Protocol Security
  5. Software-Defined Wide Area Network
  6. Selecting Effective Controls
  7. Matching Controls to Enterprise Risk
  8. Applying Infrastructure Security Principles
  9. Scenario-Based Quiz
3.3Concepts and Strategies to Protect Data

Compare and contrast concepts and strategies to protect data.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Data Types and Regulatory Context

  1. Concepts and Strategies to Protect Data
  2. Data Types and Risk
  3. Regulated Data
  4. Personally Identifiable Information
  5. Protected Health Information
  6. Trade Secrets
  7. Intellectual Property
  8. Legal and Financial Information
  9. Scenario-Based Quiz

Data Readability and Classification Foundations

  1. Human-Readable Data
  2. Non-Human-Readable Data
  3. Data Classification Purpose
  4. Classification Levels
  5. Data Sensitivity and Handling Requirements
  6. Access Controls by Classification
  7. Encryption and Monitoring Requirements
  8. Applying Classification to Data Protection
  9. Scenario-Based Quiz

Data Classification Levels

  1. Sensitive Data
  2. Confidential Data
  3. Public Data
  4. Restricted Data
  5. Private Data
  6. Critical Data
  7. Comparing Classification Labels
  8. Prioritizing Critical and Regulated Data
  9. Scenario-Based Quiz

Protection Strategy and Data Handling Controls

  1. Aligning Protection to Data Type
  2. Protecting Regulated Data
  3. Securing Sensitive and Confidential Data
  4. Restricting Private and Restricted Data
  5. Protecting Critical Business Data
  6. Preventing Unauthorized Disclosure
  7. Monitoring Data Access and Sharing
  8. Applying Data Protection Strategies
  9. Scenario-Based Quiz
3.4Resilience and Recovery in Security Architecture

Explain the importance of resilience and recovery in security architecture.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Availability and Redundancy Foundations

  1. Resilience and Recovery Architecture
  2. High Availability
  3. Redundancy
  4. Failover
  5. Load Balancing
  6. Workload Distribution
  7. Clustering
  8. Reducing Single Points of Failure
  9. Scenario-Based Quiz

Recovery Site Strategies

  1. Disaster Recovery Site Planning
  2. Hot Site
  3. Hot Site Replication
  4. Cold Site
  5. Cold Site Activation
  6. Warm Site
  7. Warm Site Tradeoffs
  8. Selecting Recovery Site Options
  9. Scenario-Based Quiz

Geographic and Platform Resilience

  1. Geographic Dispersion
  2. Regional Disaster Risk Reduction
  3. Platform Diversity
  4. Hardware and Software Diversity
  5. Multi-Cloud Systems
  6. Cloud Provider Dependency Reduction
  7. Replication Across Environments
  8. Architecture Diversity for Fault Tolerance
  9. Scenario-Based Quiz

Continuity of Operations and Recovery Planning

  1. Continuity of Operations Planning
  2. Critical Function Identification
  3. Personnel and Process Continuity
  4. Communication During Disruption
  5. Resource and Dependency Planning
  6. Recovery Activation Decisions
  7. Maintaining Operations During a Disaster
  8. Applying Resilience and Recovery Controls
  9. Scenario-Based Quiz
04Security Operations9 Lessons
4.1Common Security Techniques to Computing Resources

Given a scenario, apply common security techniques to computing resources.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Secure Baselines

  1. Purpose of Secure Baselines
  2. Standard Configuration Requirements
  3. Establishing Baselines
  4. Minimum Security Controls
  5. Deploying Baselines
  6. Automated Baseline Deployment
  7. Maintaining Baselines
  8. Detecting Configuration Drift
  9. Scenario-Based Quiz

Device Hardening Foundations

  1. Device Hardening Purpose
  2. Reducing the Attack Surface
  3. Disabling Unnecessary Services and Ports
  4. Removing Unnecessary Software
  5. Least Privilege for User Accounts
  6. Strong Authentication Requirements
  7. Endpoint Security Tools
  8. Patching and Security Updates
  9. Scenario-Based Quiz

Endpoint and Mobile Resource Security

  1. Mobile Device Security
  2. Encryption for Data at Rest and Transit
  3. Strong Mobile Authentication
  4. Trusted Application Sources
  5. Mobile Operating System and App Updates
  6. Workstation Security
  7. Antivirus and Anti-Malware Software
  8. Full-Disk Encryption for Workstations
  9. Scenario-Based Quiz

Network Device Hardening

  1. Switch Security
  2. Changing Default Passwords
  3. VLAN Segmentation
  4. Port Security
  5. Router Security
  6. Firmware Updates
  7. Disabling Unused Interfaces
  8. Secure Administrative Access and Firewall Rules
  9. Scenario-Based Quiz
4.2Security Implications of Proper Asset Management

Explain the security implications of proper hardware, software, and data asset management.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Asset Acquisition and Accountability

  1. Asset Management Foundations
  2. Acquisition and Procurement Process
  3. Vendor and Product Evaluation
  4. Hardware, Software, and Data Intake
  5. Assignment of Assets
  6. Accounting for Asset Details
  7. Purchase Dates, Costs, and Documentation
  8. Security Implications of Asset Accountability
  9. Scenario-Based Quiz

Ownership and Classification

  1. Asset Ownership
  2. Owner Responsibilities
  3. Lifecycle Accountability
  4. Classification Purpose
  5. Classifying Hardware Assets
  6. Classifying Software Assets
  7. Classifying Data Assets
  8. Applying Protection Based on Sensitivity
  9. Scenario-Based Quiz

Monitoring, Tracking, and Inventory

  1. Monitoring and Asset Tracking
  2. Continuous Asset Visibility
  3. Detecting Unauthorized Access
  4. Identifying Abnormal Asset Behavior
  5. Inventory Management
  6. Hardware Inventory
  7. Software Inventory
  8. Tracking Assets Connected to the Network
  9. Scenario-Based Quiz

Enumeration, Disposal, and Decommissioning

  1. Enumeration
  2. Identifying Assets by Category
  3. Quantifying Assets Across the Network
  4. Vulnerability and Risk Assessment Support
  5. Disposal Planning
  6. Secure Data Removal
  7. Decommissioning Hardware and Software
  8. Reducing Data Leakage After Retirement
  9. Scenario-Based Quiz
4.3Vulnerability Management Activities

Explain various activities associated with vulnerability management.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Vulnerability Scanning and Discovery

  1. Vulnerability Management Activity Foundations
  2. Vulnerability Scan Purpose
  3. Systematic Security Weakness Review
  4. Known Vulnerability Identification
  5. Potential Vulnerability Discovery
  6. Insecure Software Configurations
  7. Outdated Software Versions
  8. Security Patch Assessment
  9. Scenario-Based Quiz

Static and Dynamic Analysis

  1. Code Analysis Foundations
  2. Static Analysis
  3. Static Application Security Testing
  4. Source Code Vulnerability Review
  5. Secure Coding Standard Validation
  6. Dynamic Analysis
  7. Dynamic Application Security Testing
  8. Runtime Behavior and Exploitation Testing
  9. Scenario-Based Quiz

Package Monitoring and Software Component Risk

  1. Package Monitoring Purpose
  2. Software Library Tracking
  3. Application Package Inventory
  4. Outdated Package Identification
  5. Known Component Vulnerabilities
  6. Software Dependency Risk
  7. Package Maintenance Status
  8. Reducing Third-Party Component Exposure
  9. Scenario-Based Quiz

Threat Feeds and Remediation Prioritization

  1. Threat Feed Purpose
  2. Real-Time Threat Information
  3. Cyber Threat Source Monitoring
  4. Emerging Vulnerability Awareness
  5. Linking Threat Feeds to Vulnerability Scanners
  6. Prioritizing Active Threats
  7. Remediation Decision Support
  8. Applying Intelligence to Vulnerability Management
  9. Scenario-Based Quiz
4.4Security Alerting and Monitoring Concepts

Explain security alerting and monitoring concepts and tools.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Monitoring Computing Resources

  1. Security Alerting and Monitoring Foundations
  2. Monitoring Computing Resources
  3. Detecting Threats Before Harm Occurs
  4. Monitoring System Behavior
  5. Monitoring Applications and Programs
  6. Monitoring Networks and Infrastructure
  7. Identifying Performance and Security Issues
  8. Reducing Attack Impact Through Monitoring
  9. Scenario-Based Quiz

System Monitoring

  1. System Monitoring Purpose
  2. Servers and Workstations
  3. Network Devices
  4. Suspicious Activity Detection
  5. Unauthorized Change Detection
  6. Firewall and Antivirus Status
  7. Resource Usage and Service Uptime
  8. Authentication Failures and Unauthorized Access
  9. Scenario-Based Quiz

Application Monitoring

  1. Application Monitoring Purpose
  2. Software Behavior Monitoring
  3. Unexpected Data Access
  4. Unusual Transaction Activity
  5. Login Attempts and API Calls
  6. Database Query Monitoring
  7. Sensitive Data and Customer-Facing Services
  8. Runtime Errors and Application Anomalies
  9. Scenario-Based Quiz

Infrastructure Monitoring

  1. Infrastructure Monitoring Purpose
  2. Routers and Switches
  3. Virtual Machines and Storage
  4. Network Traffic Monitoring
  5. Bandwidth and Latency Issues
  6. Hardware Failure Detection
  7. Unusual Routing and Access Paths
  8. Infrastructure Anomalies and Attack Detection
  9. Scenario-Based Quiz
4.5Enterprise Capabilities to Enhance Security

Given a scenario, modify enterprise capabilities to enhance security.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Firewall Foundations and Traffic Filtering

  1. Enterprise Security Capability Foundations
  2. Firewall Purpose
  3. Traffic Monitoring
  4. Incoming and Outgoing Traffic Filtering
  5. Security Policy Enforcement
  6. Firewall Placement Between Private Networks and the Internet
  7. Packet Inspection Basics
  8. Allow and Block Decisions
  9. Scenario-Based Quiz

Firewall Rules and Policy Enforcement

  1. Firewall Rule Purpose
  2. Allow Rules
  3. Deny Rules
  4. Source IP Criteria
  5. Destination IP Criteria
  6. Port-Based Rules
  7. Rule Processing Order
  8. Default Deny Logic
  9. Scenario-Based Quiz

Access Lists and Network Access Control

  1. Access Control List Purpose
  2. Router and Firewall ACL Use
  3. Network and Subnetwork Access Control
  4. Allowed and Denied Access Entries
  5. IP Address Filtering
  6. Port Number Filtering
  7. Protocol-Based Filtering
  8. Using ACLs to Limit Access
  9. Scenario-Based Quiz

Ports, Protocols, and Service Control

  1. Ports and Protocols
  2. Ports as Data Connection Points
  3. Protocols as Communication Rules
  4. HTTP on Port 80
  5. HTTPS on Port 443
  6. Common Service Port Mapping
  7. Enabling Only Necessary Ports and Services
  8. Controlling Traffic Flow Across the Enterprise
  9. Scenario-Based Quiz
4.6Identity and Access Management

Given a scenario, implement and maintain identity and access management.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Identity and Access Management Foundations

  1. Identity and Access Management Purpose
  2. User Identity in Enterprise Systems
  3. Access Management Responsibilities
  4. Authentication and Access Decisions
  5. People, Systems, and Resource Access
  6. Security Risks from Poor IAM
  7. Access Control Across Business Roles
  8. Applying IAM to Enterprise Security
  9. Scenario-Based Quiz

Provisioning and De-Provisioning User Accounts

  1. User Account Provisioning
  2. Creating Access for New Users
  3. Assigning Initial Resource Access
  4. Role Changes and Access Updates
  5. User Account De-Provisioning
  6. Removing Access After Departure
  7. Preventing Orphaned Accounts
  8. Maintaining Security Through Account Lifecycle Control
  9. Scenario-Based Quiz

Permission Assignments and Access Implications

  1. Permission Assignment Purpose
  2. Read, Write, and Delete Permissions
  3. Resource-Level Access Control
  4. Permission Alignment to Job Roles
  5. Least Privilege Access
  6. Excessive Permissions and Privilege Creep
  7. Permission Review and Auditing
  8. Security Implications of Incorrect Permissions
  9. Scenario-Based Quiz

IAM Governance and Continuous Access Control

  1. Identity Lifecycle Governance
  2. Access Request Review
  3. Approval Workflows
  4. Access Recertification
  5. Monitoring Account Activity
  6. Detecting Unauthorized Access
  7. Correcting Access Misconfigurations
  8. Applying IAM Controls in Real-World Scenarios
  9. Scenario-Based Quiz
4.7Automation and Orchestration

Explain the importance of automation and orchestration related to secure operations.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Automation and Scripting Foundations

  1. Automation and Orchestration in Secure Operations
  2. Use Cases of Automation and Scripting
  3. Repetitive Security Task Automation
  4. Reducing Human Error
  5. Workflow Consistency
  6. Automated Threat Detection Support
  7. Automated Response Support
  8. Applying Automation to Security Operations
  9. Scenario-Based Quiz

Provisioning, Access, and Workflow Automation

  1. User Provisioning
  2. Resource Provisioning
  3. Security Group Management
  4. Ticket Creation
  5. Escalation
  6. Enabling and Disabling Services
  7. Enabling and Disabling Access
  8. Automating Policy-Based Operational Workflows
  9. Scenario-Based Quiz

Integration, Baselines, and Infrastructure Automation

  1. Continuous Integration and Testing
  2. Security Testing in CI/CD Pipelines
  3. Integrations and APIs
  4. Security Tool Interoperability
  5. Enforcing Baselines
  6. Standard Infrastructure Configurations
  7. Configuration Drift Reduction
  8. Automating Secure Deployment Practices
  9. Scenario-Based Quiz

Automation Benefits, Risks, and Supportability

  1. Employee Retention
  2. Reaction Time
  3. Complexity
  4. Documentation and Change Control
  5. Single Point of Failure
  6. Technical Debt
  7. Ongoing Supportability
  8. Balancing Automation Value and Risk
  9. Scenario-Based Quiz
4.8Appropriate Incident Response Activities

Explain appropriate incident response activities.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Incident Response Lifecycle

  1. Incident Response Process
  2. Preparation
  3. Detection
  4. Analysis
  5. Containment
  6. Eradication
  7. Recovery
  8. Lessons Learned
  9. Scenario-Based Quiz

Readiness, Training, and Response Exercises

  1. Incident Response Training
  2. Response Roles and Responsibilities
  3. Communication Plans
  4. Tabletop Exercises
  5. Simulation Exercises
  6. Response Plan Validation
  7. Root Cause Analysis
  8. Continuous Incident Response Improvement
  9. Scenario-Based Quiz

Threat Hunting and Digital Forensics

  1. Threat Hunting
  2. Proactive Threat Identification
  3. Digital Forensics
  4. Evidence Identification
  5. Evidence Collection
  6. Evidence Processing
  7. Evidence Analysis
  8. Investigation Support
  9. Scenario-Based Quiz

Legal, Evidence, and Reporting Activities

  1. Legal Hold
  2. Chain of Custody
  3. Acquisition
  4. Preservation
  5. Reporting
  6. Internal Review
  7. Regulatory and Legal Evidence
  8. E-Discovery
  9. Scenario-Based Quiz
4.9Data Sources to Support an Investigation

Given a scenario, use data sources to support an investigation.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Log Sources and Investigation Foundations

  1. Data Sources for Investigations
  2. Log Purpose
  3. Event Reconstruction
  4. Firewall Logs
  5. Allowed and Denied Traffic
  6. Source and Destination Details
  7. Ports, IP Addresses, and Timestamps
  8. Suspicious Firewall Activity
  9. Scenario-Based Quiz

Host and Application Investigation Sources

  1. Application Logs
  2. User Logins and Transactions
  3. Application Configuration Changes
  4. Abnormal Application Behavior
  5. Endpoint Logs
  6. Device-Level Security Events
  7. System Changes and User Activity
  8. Malware and Intrusion Indicators on Endpoints
  9. Scenario-Based Quiz

Operating System, IDS, and Network Evidence

  1. OS-Specific Security Logs
  2. User Account Activity
  3. System Errors and Policy Changes
  4. Service and Resource Access Events
  5. IPS and IDS Logs
  6. Signature and Anomaly Alerts
  7. Network Logs
  8. Traffic Direction and Flow Analysis
  9. Scenario-Based Quiz

Supporting Evidence and Investigation Analysis Tools

  1. Metadata
  2. Email Metadata and Communication Context
  3. Vulnerability Scan Results
  4. Known Weaknesses and Entry Points
  5. Automated Reports
  6. Security Dashboards
  7. Packet Captures
  8. Confirming Malicious Traffic and Data Exfiltration
  9. Scenario-Based Quiz
05Security Program Management and Oversight6 Lessons
5.1Elements of Effective Security Governance

Summarize elements of effective security governance.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Governance Foundations, Guidelines, and Policies

  1. Security Governance Purpose
  2. Guidelines in Security Governance
  3. Flexible Guidance and Decision Support
  4. Policies in Security Governance
  5. Policy Expectations and Requirements
  6. Aligning Policies with Business Goals
  7. Policy Enforcement and Review
  8. Applying Governance Documents
  9. Scenario-Based Quiz

Acceptable Use and Information Security Policies

  1. Acceptable Use Policy Purpose
  2. Approved Use of IT Resources
  3. Email, Internet, and Software Use
  4. User Behavior and Safe Computing
  5. Information Security Policy Purpose
  6. Data Protection Requirements
  7. Network Security and User Access
  8. Keeping Security Policies Current
  9. Scenario-Based Quiz

Continuity, Disaster Recovery, and Incident Response

  1. Business Continuity Purpose
  2. Maintaining Essential Functions
  3. Risk Assessments and Critical System Identification
  4. Disaster Recovery Purpose
  5. Recovery Objectives, Backups, and Testing
  6. Incident Response Policy Purpose
  7. Detection, Containment, Eradication, and Recovery
  8. Lessons Learned and Response Improvement
  9. Scenario-Based Quiz

Secure Development and Change Management Governance

  1. Software Development Lifecycle Governance
  2. Secure Application Requirements
  3. Secure Development Process Controls
  4. Security Testing Before Release
  5. Change Management Purpose
  6. Requesting, Approving, and Testing Changes
  7. Documentation and Version Control
  8. Preventing Outages, Security Gaps, and Conflicts
  9. Scenario-Based Quiz
5.2Elements of the Risk Management Process

Explain elements of the risk management process.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Risk Identification Foundations

  1. Elements of the Risk Management Process
  2. Risk Identification Purpose
  3. Valuable Asset Identification
  4. Data, Hardware, Software, and Infrastructure
  5. Vulnerability Identification
  6. Threat Identification
  7. Employee Training and Human Factors
  8. Building the Risk Identification Baseline
  9. Scenario-Based Quiz

Risk Assessment Approaches

  1. Risk Assessment Purpose
  2. Impact and Likelihood Evaluation
  3. Prioritizing Risks by Impact
  4. Ad Hoc Assessments
  5. Recurring Assessments
  6. One-Time Assessments
  7. Continuous Monitoring and Assessment
  8. Selecting the Appropriate Assessment Type
  9. Scenario-Based Quiz

Risk Analysis Methods

  1. Risk Analysis Purpose
  2. Turning Risk Data Into Actionable Insight
  3. Qualitative Analysis
  4. Qualitative Ratings and Risk Matrices
  5. Quantitative Analysis
  6. Numerical Risk Values
  7. Comparing Qualitative and Quantitative Methods
  8. Applying Analysis to Risk Prioritization
  9. Scenario-Based Quiz

Quantitative Risk Calculations and Decision Support

  1. Single Loss Expectancy
  2. Asset Value
  3. Exposure Factor
  4. Calculating Single Loss Expectancy
  5. Estimating Monetary Loss From Events
  6. Cost, Probability, and Financial Risk
  7. Using Calculations to Support Security Investment
  8. Applying Risk Data to Management Decisions
  9. Scenario-Based Quiz
5.3Third-Party Risk Assessment and Management

Explain the processes associated with third-party risk assessment and management.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Third-Party Risk Identification Foundations

  1. Third-Party Risk Assessment and Management
  2. Third-Party Risk Identification Purpose
  3. Vendor and Supplier Asset Identification
  4. Data, Hardware, Software, and Dependencies
  5. Third-Party Vulnerability Identification
  6. Third-Party Threat Identification
  7. Human Factors and Vendor Training Gaps
  8. Building the Third-Party Risk Baseline
  9. Scenario-Based Quiz

Third-Party Risk Assessment Approaches

  1. Third-Party Risk Assessment Purpose
  2. Impact and Likelihood Evaluation
  3. Prioritizing Vendor Risks by Impact
  4. Ad Hoc Third-Party Assessments
  5. Recurring Third-Party Assessments
  6. One-Time Third-Party Assessments
  7. Continuous Vendor Monitoring
  8. Selecting the Appropriate Assessment Type
  9. Scenario-Based Quiz

Third-Party Risk Analysis Methods

  1. Third-Party Risk Analysis Purpose
  2. Turning Vendor Risk Data Into Actionable Insight
  3. Qualitative Analysis
  4. Qualitative Ratings and Risk Matrices
  5. Quantitative Analysis
  6. Numerical Risk Values
  7. Comparing Qualitative and Quantitative Vendor Risk Methods
  8. Applying Analysis to Third-Party Risk Prioritization
  9. Scenario-Based Quiz

Third-Party Risk Management and Decision Support

  1. Third-Party Risk Management Decisions
  2. Vendor Risk Acceptance
  3. Vendor Risk Mitigation
  4. Vendor Risk Transfer
  5. Vendor Risk Avoidance
  6. Using Risk Results to Guide Security Requirements
  7. Supporting Vendor Oversight With Risk Data
  8. Applying Third-Party Risk Decisions
  9. Scenario-Based Quiz
5.4Elements of Effective Security Compliance

Summarize elements of effective security compliance.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Compliance Reporting Foundations

  1. Elements of Effective Security Compliance
  2. Compliance Reporting Purpose
  3. Evidence and Documentation
  4. Laws, Regulations, Standards, and Policies
  5. Governance, Risk, and Compliance Alignment
  6. Compliance Status Visibility
  7. Audit and Stakeholder Readiness
  8. Building a Compliance Reporting Process
  9. Scenario-Based Quiz

Internal and External Reporting

  1. Internal Reporting
  2. Reporting to Organizational Leadership
  3. CISO and Compliance Officer Reporting
  4. Internal Policy and Procedure Evidence
  5. External Reporting
  6. Regulator, Partner, and Customer Reporting
  7. Security Certifications and Audit Results
  8. Demonstrating Transparency and Accountability
  9. Scenario-Based Quiz

Consequences of Non-Compliance

  1. Non-Compliance Outcomes
  2. Fines
  3. Regulatory Penalties
  4. Sanctions
  5. Business Operation Restrictions
  6. Reputational Damage
  7. Loss of License
  8. Contractual Impacts
  9. Scenario-Based Quiz

Due Diligence, Due Care, and Compliance Assurance

  1. Due Diligence
  2. Due Care
  3. Responsible Compliance Review
  4. Reasonable Safeguards and Preventive Action
  5. Checking Compliance Against Requirements
  6. Documentation for Accountability
  7. Using Compliance Results to Improve Controls
  8. Applying Compliance Decisions in Real-World Scenarios
  9. Scenario-Based Quiz
5.5Types and Purposes of Audits and Assessments

Explain types of audits and assessments.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Security Audits and Attestation Foundations

  1. Types and Purposes of Audits and Assessments
  2. Security Audit Purpose
  3. Systematic Security Evaluation
  4. Control Effectiveness Review
  5. Technical, Physical, and Compliance Scope
  6. Attestation Purpose
  7. Formal Confirmation of Security Practices
  8. Building Trust Through Attestation
  9. Scenario-Based Quiz

Compliance Audits and Audit Governance

  1. Compliance Audit Purpose
  2. Laws, Regulations, Standards, and Contracts
  3. Compliance Documentation Review
  4. Internal Compliance Audits
  5. External Compliance Audits
  6. Audit Committee Purpose
  7. Board and Senior Leadership Oversight
  8. Audit Findings, Transparency, and Accountability
  9. Scenario-Based Quiz

Self-Assessments and Regulatory Audits

  1. Self-Assessment Purpose
  2. Internal Control Review
  3. Proactive Risk Identification
  4. Questionnaires and Control Checklists
  5. Accountability Across Large Organizations
  6. Regulatory Audit Purpose
  7. Mandatory Reporting Requirements
  8. Consequences of Regulatory Audit Failure
  9. Scenario-Based Quiz

Examinations and Comprehensive Assessments

  1. Examination Purpose
  2. Industry-Specific Review
  3. Standard and Guideline Compliance
  4. Financial and Operational Examination Context
  5. Security Assessment Purpose
  6. External Assessment Parties
  7. Policies, Procedures, and Control Review
  8. Implementation Findings and Improvement Actions
  9. Scenario-Based Quiz
5.6Implement Security Awareness Practices

Given a scenario, implement security awareness practices.

Open LessonReview FlashcardsOpen Practice
Explore The Lesson’s 4 Sections

Security Awareness and Phishing Defense

  1. Security Awareness Practice Foundations
  2. Phishing
  3. Phishing Campaigns
  4. Recognizing a Phishing Attempt
  5. Suspicious Domains, Urgency, and Information Requests
  6. Responding to Reported Suspicious Messages
  7. Reporting to IT or the Security Team
  8. Reducing Message-Based Social Engineering Risk
  9. Scenario-Based Quiz

User Behavior, Policies, and Insider Risk

  1. Risky Behavior Recognition
  2. Unusual Network Traffic and Failed Login Attempts
  3. Unexpected Behavior Recognition
  4. Configuration Changes and Unauthorized Software
  5. Unintentional Behavior Recognition
  6. Policies and Handbooks
  7. Insider Threat Awareness
  8. Encouraging Reporting of Suspicious Activity
  9. Scenario-Based Quiz

Everyday Security Hygiene and Work Environment Practices

  1. Password Management
  2. Strong Password Creation
  3. Password Sharing Risks
  4. Removable Media and Cables
  5. USB Device Risk
  6. Operational Security
  7. Protecting Company Operations and Sensitive Information
  8. Hybrid and Remote Work Environments
  9. Scenario-Based Quiz

Awareness Program Design, Monitoring, and Execution

  1. Social Engineering Awareness
  2. Social Engineering Examples and Response
  3. Initial Reporting and Monitoring
  4. Recurring Reporting and Monitoring
  5. Security Awareness Program Development
  6. Training Alignment to Risk Profile
  7. Security Awareness Execution
  8. Continuous Improvement Through Feedback and Metrics
  9. Scenario-Based Quiz

Course links open the Hero Cyber learning resources in a new tab. A student sign-in or eligible enrollment may be required. Security Hero also includes eight performance based questions.

04 Try A Course-Style Question

What Would You Do Next?

Try the decision, not just the definition. Choose a response to see the reasoning behind it. This is an original study example, not an exam question.

Security+ / A Study Scenario

A Password Is No Longer Private.

  • 1An employee’s password has been exposed.
  • 2The account currently relies on a password alone.
  • 3Existing sessions also need to be reviewed.

Read the context. Consider the dependency. Then choose.

Which response addresses both access and the immediate exposure?

Select an answer to reveal the explanation.

A Concept Worth RememberingMultifactor Authentication
Hands working on a laptop keyboard

One Focused Session.

01Read With Purpose
02Test Your Recall
03Apply The Idea

05 A Routine You Can Return To

Make The Concept Stick. Then Apply It.

Choose a lesson within the five course areas and read its overview. Identify the asset, threat, control, or process at the center of the topic before reviewing individual terms.

Watch The Study Planning Walkthrough

06 Your Course. Your Kind Of Support.

A Clear Plan.
A Clear Price.

Start with 30 days free on Hero Access, or choose more guidance from the beginning.

Your Course. Your Schedule.

Hero Access

Build your own study routine with the complete Security Hero course.

$0For Your First 30 Days

Then $149/month until canceled.

Start My 30 Day Trial

Your Core Study Tools

  • Full Access To Your Selected Course
  • Lessons, Flashcards & Practice Exams
  • Notes, Highlights & Progress Tools
  • Student Center & Career Resources
  • Self-Paced Learning, Available 24/7

Course Access: While Subscribed

Add A Little More Direction.

Hero Guided

Keep your course and add regular instructor guidance and a personal roadmap.

$199Per Month

Monthly billing. Access while subscribed.

Choose Hero Guided

Hero Access Tools, Plus

  • Monthly Instructor Q&A & Guided Review
  • Personalized Study Roadmap
  • Priority Student Support
  • Readiness Tracking & Exam Guidance

Course Access: While Subscribed

Your Most Supported Option.

Certification Prep

A longer preparation window with structured reviews and an eligible Live Online class.

$2,495One-Time Payment

12 months of course and Student Center access.

Enroll In Certification Prep

Course Tools And Personal Support

  • 12 Months Of Course & Student Center Access
  • Personal Certification Study Plan
  • Six Group Certification Review Sessions
  • Two Individual Readiness Reviews
  • Priority Support & Career Preparation Resources
  • One Eligible Full Live Online Class Seat

Course Access: 12 Months

Hero Access is free for the first 30 days, then $149/month until canceled. Hero Guided is $199/month until canceled. Certification Prep is a one-time payment. Confirm the current billing terms and any credential-specific examination or voucher coverage before enrollment.

Compare Every Plan Inclusion
What Is IncludedHero AccessHero GuidedCertification Prep
Lessons, Flashcards & PracticeIncludedIncludedIncluded
Student Center, Notes & ProgressIncludedIncludedIncluded
Course AccessWhile SubscribedWhile Subscribed12 Months
Instructor Q&A & Guided ReviewNot IncludedMonthlySix Group Review Sessions
Personal Study RoadmapNot IncludedIncludedPersonal Certification Study Plan
Priority Student SupportNot IncludedIncludedIncluded
Individual Readiness ReviewsNot IncludedNot IncludedTwo Reviews
Eligible Full Live Online Class SeatNot IncludedNot IncludedOne Class Starting Within 12 Months
BillingMonthly After The TrialMonthlyOne-Time Payment
A project team reviewing a shared document in a meeting
Study Independently. Bring Your Questions.Your Course Can Include More Conversation.

07 Make Room For A Real Conversation

Work Through The “Why” With An Instructor.

Some ideas become clearer when you can talk through them. Choose the support that fits the way you study Security+, then arrive with the questions your practice brings up.

Regular Guided Review

Hero Guided adds monthly instructor Q&A, guided review, a personalized study roadmap, and priority student support.

A Full Live Online Class

Certification Prep includes six group certification reviews, two individual readiness reviews, and one eligible full Live Online class seat.

See Live Online Dates

The eligible class must start within 12 months of enrollment. A full class seat and individual appointments are not included in the monthly plans.

Military & Government

A Dedicated Enrollment Option For Eligible Learners.

Eligible military and government learners can enroll in Certification Prep for $2,000. Confirm eligibility and the course-specific enrollment details with Hero Cyber.

$2,000One-Time Payment
Military & Government Enrollment
A professional walking outside an office building
The Work Behind Your Next StepSecurity Hero

08 Connect The Learning To The Work

Build Your Security Starting Point.

Use the course as a foundation for conversations about the work you want to do. Explore role responsibilities in the Student Center’s Career Lab and identify the experience you still need to build.

01

Security Support Specialist

Account safeguards, endpoint protection, security awareness, and escalation.

02

Junior Security Analyst

Security events, control concepts, basic investigation, and reporting.

03

IT Administrator With Security Duties

Identity, hardening, backups, access reviews, and protection of data.

These are related role areas to research, not guaranteed employment outcomes. Requirements vary by employer, experience, and credential.

Explore The Career Lab Walkthrough

09 Keep Your Options Open

One Membership.
Nine Ways Forward.

IT, cybersecurity, AI, projects, and people. All Access brings all nine Hero Cyber programs and the Student Center into one membership, so your next subject does not need a separate course subscription.

All Access
$299/ month

Monthly billing. Access continues while subscribed.

Choose All Access

All Access Guided: $449 / month
Add Monthly Q&A And A Study Roadmap

Explore All Nine Programs

All Access Guided adds monthly instructor Q&A, a study roadmap, and priority guidance. Full Live Online class seats and individual readiness appointments are separate from All Access memberships.

10 Before You Enroll

Good Questions.
Clear Answers.

Know what you are studying, how access works, and which support belongs to your chosen plan.

Talk With Hero Cyber
01What Does Security Hero Cover?

Security Hero prepares learners for CompTIA Security+ across five course areas: general security concepts; threats, vulnerabilities, and mitigations; security architecture; security operations; and security program management and oversight. Its 28 lessons connect foundational controls and cryptography to identity, monitoring, incident response, risk, governance, and the everyday work of protecting systems and data.

02Is This A Suitable Starting Point?

Security Hero is a foundation focused course for learners beginning in cybersecurity or moving from general IT into security. Familiarity with computers and networks helps you connect the material to real systems. Start with the foundational security lessons, then return to them as you study architecture, operations, and risk so the terminology stays connected to its purpose.

03What Practice Does The Course Include?

Security Hero includes 1,512 flashcards, 1,344 practice items, and eight performance based questions. Its 28 lessons contain 112 sections, 896 instructional chapters, and 112 scenario quiz blocks. Use these resources to move between reviewing terminology, comparing answer choices, and applying security concepts to situations that require more than recalling a definition.

04How Long Does Course Access Last?

Hero Access and Hero Guided provide course access while your subscription remains active. Certification Prep provides 12 months of course and Student Center access. Choose the enrollment option that fits your study schedule and desired support; the twelve month access period belongs to Certification Prep and does not describe the duration of a monthly subscription.

05How Do The Three Plans Differ?

Hero Access is $149 per month with a 30 day free trial. Hero Guided is $199 per month and adds monthly instructor Q&A, guided review, a study roadmap, and priority support. Both provide access while subscribed. Certification Prep is $2,495 with 12 months of access, six group reviews, two individual readiness reviews, and an eligible Live Online class seat.

06Can I Attend A Live Online Class?

Certification Prep includes one full eligible Live Online class seat for Security Hero, with the class starting within 12 months of enrollment. Review the available schedule and enrollment details when choosing your class. The monthly Hero Access and Hero Guided memberships do not include a full class seat or individual readiness appointments as part of their plans.

07Is The Security+ Exam Voucher Included?

The listed course plans do not make a general exam voucher promise. Confirm any exam purchase or voucher arrangement in your enrollment quote before paying, so you know exactly what your selection includes. Course access, review sessions, and an eligible Live Online seat are separate inclusions from the certification exam itself.

08How Should I Use The Performance Based Questions?

Use the eight performance based questions after studying the related lessons so the exercise tests your understanding of the situation. When you struggle, return to the controls, system context, or response sequence behind the task. Combine that review with flashcards and practice sets, then explain the reasoning for your next attempt in your own notes.

Your Next Chapter / Security+

A Stronger SecurityFoundation Starts Here.

Security Hero brings the course, the practice, and your next study session together. Start with 30 days free on Hero Access.

Start My 30 Day TrialThen $149/month until canceled. Review the billing terms at checkout.
A learner concentrating on a laptop beside a window
Security Hero30 Days Free · Then $149/Month
Start Free Trial