Added 797 external MCQs from 5 MIT/CC-BY-NC sources: - RaccoonFacts (75), jealarue/exam90 (145), CyBirdSecurity (125), htlin222/notes (332), OddDuckMoose/cert-prep (120) Each question carries source + source_url and objective shows origin. Wired as 5 per-source banks + 1 mega combined bank (797) under new 'External Banks' nav group, plus quiz bank remains. PBQs: added 8 external simulations from northgreensecurity/PBQs as standalone HTML under public/external_pbqs/ with new PBQ Lab 2 page (src/chapters/pbq_external.js) linked from nav. All questions show source in the question header for traceability. |
||
|---|---|---|
| public | ||
| src | ||
| .gitignore | ||
| index.html | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||
| vite.config.js | ||
CompTIA Security+ SY0-701 Study Guide
An interactive, self-contained study guide for the CompTIA Security+ SY0-701 exam. No account required. Works offline.
What's Inside
| Content | Count |
|---|---|
| Domain chapters with notes, tables & examples | 5 |
| Chapter practice tests (A + B banks) | 10 × 30 = 300 questions |
| Comprehensive final exam | 100 questions |
| Interactive PBQ simulations | 10 |
| Exam cheat sheet sections | 10 |
| Total practice questions | 400+ |
Domain Coverage
| Domain | Weight | Sections |
|---|---|---|
| 1.0 — General Security Concepts | 12% | 1.1 Controls · 1.2 Concepts · 1.3 Change Mgmt · 1.4 Cryptography |
| 2.0 — Threats, Vulnerabilities & Mitigations | 22% | 2.1 Threat Actors · 2.2 Vectors · 2.3 Vulnerabilities · 2.4 Indicators · 2.5 Mitigations |
| 3.0 — Security Architecture | 18% | 3.1 Architecture · 3.2 Considerations · 3.3 Infrastructure · 3.4 Network · 3.5 Data · 3.6 HA |
| 4.0 — Security Operations | 28% | 4.1–4.9 Hardening · Vuln Mgmt · IAM · IR · Forensics · Automation |
| 5.0 — Security Program Management & Oversight | 20% | 5.1 Governance · 5.2 Risk · 5.3 Third-Party · 5.4 Compliance · 5.5 Audits · 5.6 Awareness |
Exam Cheat Sheet Covers
Ports & Protocols · Cryptography algorithms · Wireless standards · Auth protocols · Attack types · OWASP Top 10 · Regulations (GDPR/HIPAA/PCI DSS/SOX) · Security tools · Risk formulas · 120+ acronym glossary
Getting Started
Run with Vite dev server
npm install
npm run dev
Then open http://localhost:5173.
Build for production
npm run build
Output goes to dist/. Drop it on any static host (Netlify, Vercel, GitHub Pages).
Preview the production build
npm run preview
Project Structure
.
├── index.html # App shell — nav + main container
├── src/
│ ├── main.js # Router, lazy section loader, init
│ ├── components/
│ │ ├── QuestionCard.js # Renders one question, handles answer selection
│ │ ├── TestSection.js # Renders a full test (30 or 100 questions)
│ │ └── Navbar.js # Sidebar nav with active state
│ ├── chapters/
│ │ ├── chapter1/ # intro.js · sec11.js · sec12.js · sec13.js · sec14.js
│ │ ├── chapter2/ # intro.js · sec21.js – sec25.js
│ │ ├── chapter3/ # intro.js · sec31.js – sec36.js
│ │ ├── chapter4/ # intro.js · sec41.js – sec48.js
│ │ ├── chapter5/ # intro.js · sec51.js – sec56.js
│ │ ├── pbq.js # PBQ HTML + all 10 interactive simulation functions
│ │ ├── cheatsheet.js # Full exam cheat sheet
│ │ └── coming.js # Coming soon placeholder
│ ├── styles/
│ │ ├── variables.css # CSS custom properties + global resets
│ │ ├── layout.css # Shell, sidebar, main area, section, nav
│ │ ├── components.css # Content, cards, tables, alerts, test/question/PBQ styles
│ │ └── cheatsheet.css # All .cs-* cheat sheet classes
│ └── data/
│ ├── ch1_TestA.json # 30 questions — Domain 1.0 Test A
│ ├── ch1_TestB.json # 30 questions — Domain 1.0 Test B
│ ├── ch2_TestA.json
│ ├── ch2_TestB.json
│ ├── ch3_TestA.json
│ ├── ch3_TestB.json
│ ├── ch4_TestA.json
│ ├── ch4_TestB.json
│ ├── ch5_TestA.json
│ ├── ch5_TestB.json
│ └── finalExam.json # 100 questions — all 5 domains
├── vite.config.js
└── package.json
Question Data Format
Each question in the JSON files follows this schema:
{
"id": "t2q1",
"objective": "QUESTION 1 OF 30 · Objective 2.1",
"question": "Which threat actor type is characterized by...",
"options": {
"A": "Script kiddie",
"B": "Nation-state",
"C": "Hacktivist",
"D": "Organized crime"
},
"correct": "B",
"explanation": "Nation-state actors are characterized by..."
}
To add questions, edit the relevant JSON file in src/data/ and follow this schema.
Deploying to GitHub Pages
- Install the gh-pages helper:
npm install -D gh-pages - Add to
package.jsonscripts:"deploy": "gh-pages -d dist" - Build and deploy:
npm run build
npm run deploy
Or use Netlify / Vercel — point them at this repo, set build command to npm run build and publish directory to dist.
Exam Tips
- The real SY0-701 exam is 90 questions, 90 minutes, passing score 750/900
- Expect 3–5 Performance-Based Questions (PBQs) at the start
- Study the Cheat Sheet before your exam day — especially ports, crypto algorithms, and the risk formulas (SLE = AV × EF, ALE = SLE × ARO)
- Score 80%+ consistently on the practice tests before booking the exam
Contributing
- Fork the repo
- Add or fix questions in the relevant
src/data/*.jsonfile - Follow the question schema above
- Open a PR with a description of what you changed and why
Please verify any added questions against the official CompTIA SY0-701 exam objectives.
License
MIT — free to use, share, and modify. If this helps you pass the exam, a star on the repo is appreciated.