CIA Triad, AAA, Zero Trust Explained — Security+ SY0-701 Objective 1.2

Master CompTIA Security+ SY0-701 Objective 1.2 — Summarize Fundamental Security Concepts. This is the foundation every other domain rests on. The CIA triad. Triple-A. Authentication factors. Authorization models. Zero trust. Non-repudiation. Gap analysis. Physical security. Honeypots. The whole framework that lets you read a breach scenario and know — in two seconds — which property was violated and which control should have stopped it.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📚 WHAT YOU'LL LEARN
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

✅ The CIA triad — confidentiality, integrity, availability
✅ Real breaches mapped to each leg — OPM, SolarWinds, ransomware
✅ Why hashing = integrity and encryption = confidentiality
✅ Non-repudiation — digital signatures, PKI, audit logs
✅ Triple-A — authentication, authorization, accounting
✅ The 4 authentication factors ranked weakest to strongest
✅ Why MFA means DIFFERENT factor types (not two passwords)
✅ The 4 authorization models — RBAC / ABAC / MAC / DAC
✅ The SIEM as where modern accounting lives
✅ Gap analysis — the 4-step process auditors love
✅ Zero trust — never trust, always verify, microsegmentation
✅ Physical controls — bollards, mantraps, badge readers, locks
✅ Deception — honeypot, honeynet, honeyfile, honeytoken

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⏱ @:00 Intro
00:08 COLD OPEN · 2024 INCIDENT
01:07 THE FRAMEWORK · MEMORIZE THIS COLD
01:50 CONFIDENTIALITY · WRONG EYES OFF YOUR DATA
02:43 INTEGRITY · DATA HASN'T BEEN TAMPERED
03:51 AVAILABILITY · UP WHEN AUTHORIZED USERS NEED IT
04:56 NONREPUDIATION · CAN'T DENY DOING IT
05:49 TRIPLEA · 3 STEPS · OFTEN 3 SYSTEMS
06:35 4 AUTH FACTORS · RANKED WEAKEST → STRONGEST
07:48 AUTHZ MODELS · 4 OF THEM · KNOW THE MAPPING
08:59 ACCOUNTING · WITHOUT LOGS · NO INVESTIGATION
09:54 GAP ANALYSIS · CURRENT vs DESIRED
10:43 ZERO TRUST · NEVER TRUST · ALWAYS VERIFY
12:18 PHYSICAL · DON'T GENERALIZE THE CONTROLS
13:39 DECEPTION · LURE · DETECT · STUDY
14:45 EXAM SCENARIOS · DRILL THESE REFLEXES
15:51 QUICK RECAP · YOUR EXAM RUNBOOK

0:00 Intro — the foundation everything else rests on
0:32 Cold open — $23M Florida hospital ransomware
1:38 The CIA triad — three properties
2:42 Confidentiality — OPM 2015 case study
3:46 Integrity — SolarWinds 2020 case study
5:13 Availability — redundancy, backups, clustering, UPS
6:17 Non-repudiation — digital signatures and the proof property
7:08 Triple-A — authentication, authorization, accounting
8:08 The 4 authentication factors ranked
9:23 The 4 authorization models — RBAC, ABAC, MAC, DAC
10:31 Accounting and the SIEM
11:18 Gap analysis — the auditor's favorite process
11:55 Zero trust — three principles + components
13:36 Physical security — bollards, mantraps, badges
14:51 Deception — honeypots and the honey-everything family
15:54 Exam scenarios — drill the reflexes
16:53 Recap — the eleven-item runbook
17:51 Up next — Objective 1.3 Change Management

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🎯 EXAM QUICK REFERENCE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

THE CIA TRIAD
• Confidentiality — privacy — encryption, access control, MFA
• Integrity — correctness — hashing, digital signatures, FIM
• Availability — access — redundancy, backups, clustering, UPS

NONREPUDIATION
• A property, not a single control
• Achieved primarily through digital signatures
• Reinforced by audit logs, timestamps, video surveillance

TRIPLEA
• Authentication — who are you (login prompt)
• Authorization — what can you do (permission check)
• Accounting — what did you do (audit log)

AUTHENTICATION FACTORS (ranked weakest → strongest)
1. Something you know — passwords, PINs
2. Something you have — token, smart card, OTP, phone
3. Something you are — biometrics
4. Somewhere you are — geofencing, GPS

MFA REQUIRES DIFFERENT FACTOR TYPES
• Two passwords ≠ MFA
• Password + PIN ≠ MFA (both are "know")
• Password + phone = MFA

AUTHORIZATION MODELS
• RBAC — role-based — runs the enterprise
• ABAC — attribute-based — auditors love it (time, dept, resource)
• MAC — mandatory — government and military classifications
• DAC — discretionary — owner decides — your laptop

ZERO TRUST PRINCIPLES
• Verify explicitly — every request, every time
• Least privilege — just-in-time + just-enough
• Assume breach — microsegmentation limits lateral movement

PHYSICAL CONTROL KEYWORDS
• Bollards — vehicle ramming (NOT general perimeter)
• Mantrap / access control vestibule — tailgating

DECEPTION FAMILY
• Honeypot — 1 fake system
• Honeynet — network of honeypots
• Honeyfile — fake file with enticing name
• Honeytoken — fake credential planted in real systems

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔗 Full Security+ SY0-701 course: https://secplus.it-learn.io
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

▶ SUBSCRIBE for the rest of the series — every objective, every domain.
▶ COMING NEXT: Objective 1.3 — Change Management

#SecurityPlus #SY0-701 #CompTIA #Cybersecurity #CIATriad #ZeroTrust #MFA #SecurityFundamentals #ITLearn #SecurityEngineer #InfoSec

Видео CIA Triad, AAA, Zero Trust Explained — Security+ SY0-701 Objective 1.2 канала it-learn