How rwx works on files and directories, octal and symbolic chmod, chown and chgrp, umask masking, and SUID, SGID and sticky bits in ls -l.

What each core Kubernetes object does, per the kubernetes.io docs: workloads, Service types, ConfigMaps, Secrets, Namespaces, volumes and Ingress.

The Security+ incident response order, NIST SP 800-61 Rev. 2 and Rev. 3, and the SANS six steps compared, with the ordering traps to avoid.

What encryption, hashing and salting each do, which algorithms belong where, how key exchange and signatures work, and which algorithms are retired.

Data at rest, in transit and in use, US classification levels, the SY0-701 labels and data roles, as NIST, the exam objectives and the EDPB define them.

CVSS v3.1 base metrics, severity bands, vector strings and a worked score, plus what FIRST changed in CVSS v4.0.

BCP versus DRP scope in NIST SP 800-34 Rev. 1, the three-step business impact analysis, MTD, RTO and RPO, test types, and who owns each plan.

Azure roles control Azure resources, Microsoft Entra roles control the directory. Scopes, built-in roles, custom roles and elevated access explained.

How AWS splits security of the cloud from security in the cloud, and how your share changes across EC2, RDS, Lambda and S3.

How discretionary, mandatory, role-based, rule-based and attribute-based access control decide who gets in, plus least privilege and separation of duties.