Kubernetes Objects Explained: Pods, Deployments, Services and More
What each core Kubernetes object does, per the kubernetes.io docs: workloads, Service types, ConfigMaps, Secrets, Namespaces, volumes and Ingress.
Category Study topics
Incident Response Steps in Order: The Sequence Security Exams Test
The Security+ incident response order, NIST SP 800-61 Rev. 2 and Rev. 3, and the SANS six steps compared, with the ordering traps to avoid.
Symmetric vs Asymmetric Encryption, Hashing and Salting Explained
What encryption, hashing and salting each do, which algorithms belong where, how key exchange and signatures work, and which algorithms are retired.
Data States and Data Classification Levels for Security Exams
Data at rest, in transit and in use, US classification levels, the SY0-701 labels and data roles, as NIST, the exam objectives and the EDPB define them.
CVSS Scores Explained: Metrics, Severity Ratings and What Changed in v4.0
CVSS v3.1 base metrics, severity bands, vector strings and a worked score, plus what FIRST changed in CVSS v4.0.
Business Continuity vs Disaster Recovery: How Security Exams Separate Them
BCP versus DRP scope in NIST SP 800-34 Rev. 1, the three-step business impact analysis, MTD, RTO and RPO, test types, and who owns each plan.
Azure RBAC vs Microsoft Entra ID Roles: The Difference That Trips People Up
Azure roles control Azure resources, Microsoft Entra roles control the directory. Scopes, built-in roles, custom roles and elevated access explained.
The AWS Shared Responsibility Model: Who Secures What
How AWS splits security of the cloud from security in the cloud, and how your share changes across EC2, RDS, Lambda and S3.
Access Control Models: DAC, MAC, RBAC and ABAC Compared
How discretionary, mandatory, role-based, rule-based and attribute-based access control decide who gets in, plus least privilege and separation of duties.