CompTIA Security+ Certification Exam

Computer Security Lesson Outcomes

The most interesting thing I learned in class was the importance of data security to an organization. For instance, I realized that data security is a practice of safeguarding digital information from unauthorized theft, corruption, and access throughout its entire lifecycle. Moreover, I also learned that data security is a concept that constitutes every component of information security, from access controls, administrative controls to storage devices and hardware physical security. Besides, robust data security strategies also safeguard a company's information assets against activities of cybercriminals. Furthermore, data security also protects an organization against human error and insider threats.

Additionally, I also learned that data security involves deploying technologies and tools that enhance a company's visibility into its critical data location and use. For instance, organizations utilize protections such as sensitive file reduction, data masking, encryption, and report automation to adhere to regulatory requirements and streamline audits. Similarly, I also learned the different types of data security solutions and capabilities such as endpoint and network security monitoring, backups, patching, application security, access controls, employee education, and server and user device security.

Consequently, I learned the importance of cloud services, which protect organizations from losing important data stored in corporate data centers or premises. I also learned that access control and management help organizations grant limited access privileges to their administrative account, network and database. Moreover, I  also learned the importance of updating software to its latest version and backing critical data using logical security controls governing access to the primary system and database. Finally, I also learned that employee training is a crucial security measure since it informs workers how to safeguard data by recognizing social engineering attacks.