CompTIA · Free, ad-free audio course
A structured, audio-first learning route for CompTIA SecurityX, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
63 lessons available
Course Lessons
Listen to Master the SecurityX Exam Format, Policies, Scoring, and PBQ Time Tactics in the CompTIA SecurityX audio course.
Course Lessons
Listen to Build a Spoken Study Plan and Exam-Day Mental Models for SecurityX Success in the CompTIA SecurityX audio course.
Course Lessons
Listen to Operationalize Security Program Documentation: Policies, Standards, Procedures, Guidelines in the CompTIA SecurityX audio course.
Course Lessons
Listen to Run Security Program Management Like a Pro: Training, RACI, Reporting in the CompTIA SecurityX audio course.
Course Lessons
Listen to Apply Governance Frameworks Wisely: COBIT, ITIL, and Practical Control Mapping in the CompTIA SecurityX audio course.
Course Lessons
Listen to Control Change and Configuration Management Without Creating Security Drift in the CompTIA SecurityX audio course.
Course Lessons
Listen to Use GRC Tools for Mapping, Automation, Continuous Monitoring, and Evidence in the CompTIA SecurityX audio course.
Course Lessons
Listen to Govern Data Across Staging Environments: Dev, Test, QA, and Production in the CompTIA SecurityX audio course.
Course Lessons
Listen to Perform Impact Analysis Using Extreme-but-Plausible Scenarios That Actually Matter in the CompTIA SecurityX audio course.
Course Lessons
Listen to Execute Risk Assessments: Quantitative vs Qualitative, Appetite, Tolerance, Prioritization in the CompTIA SecurityX audio course.
Course Lessons
Listen to Manage Third-Party Risk: Supply Chain, Vendors, and Subprocessors Without Blind Spots in the CompTIA SecurityX audio course.
Course Lessons
Listen to Protect Availability: BC/DR Testing, Connected Backups, Disconnected Backups, Recovery in the CompTIA SecurityX audio course.
Course Lessons
Listen to Protect Confidentiality: Leak Response, Privileged Data Breach, Reporting, Encryption in the CompTIA SecurityX audio course.
Course Lessons
Listen to Protect Integrity: Hashing, Remote Journaling, Anti-Tampering, Interference Controls in the CompTIA SecurityX audio course.
Course Lessons
Listen to Build Privacy Into Risk Decisions: Sovereignty, Biometrics, and Data Subject Rights in the CompTIA SecurityX audio course.
Course Lessons
Listen to Explain Compliance Impacts: Industry Requirements and Cross-Jurisdiction Realities in the CompTIA SecurityX audio course.
Course Lessons
Listen to Map Standards and Frameworks: PCI DSS, ISO/IEC 27000, SOC 2, NIST CSF, CIS, CSA in the CompTIA SecurityX audio course.
Course Lessons
Listen to Threat Modeling Like You Mean It: Actors, Motivations, Resources, Capabilities in the CompTIA SecurityX audio course.
Course Lessons
Listen to Threat Modeling Frameworks in Practice: ATT&CK, CAPEC, STRIDE, Kill Chain, OWASP in the CompTIA SecurityX audio course.
Course Lessons
Listen to Determine Attack Surface Fast: Trust Boundaries, Data Flows, Code Reviews, Discovery in the CompTIA SecurityX audio course.
Course Lessons
Listen to Model Threat Applicability: Control Selection With and Without Existing Systems in the CompTIA SecurityX audio course.
Course Lessons
Listen to Secure AI Adoption: Prompt Injection, Data Poisoning, Model Theft, and Model DoS in the CompTIA SecurityX audio course.
Course Lessons
Listen to Reduce AI Risk: Guardrails, DLP, Permissions, Disclosure, and Overreliance Traps in the CompTIA SecurityX audio course.
Course Lessons
Listen to Design Resilient Systems: Component Placement for Firewalls, IDS/IPS, WAF, VPN, NAC in the CompTIA SecurityX audio course.
Course Lessons
Listen to Engineer Availability and Integrity: Scaling, Recoverability, Persistence, Geography in the CompTIA SecurityX audio course.
Course Lessons
Listen to Define Security Requirements Early: Functional, Non-Functional, and Usability Tradeoffs in the CompTIA SecurityX audio course.
Course Lessons
Listen to Build Security Through the SDLC: Coding Practices, Reviews, Testing, and Retesting in the CompTIA SecurityX audio course.
Course Lessons
Listen to Handle Supply Chain Risk in the SDLC: Software, Hardware, Assurance, and EOL in the CompTIA SecurityX audio course.
Course Lessons
Listen to Integrate Controls Into Secure Architecture: Defense-in-Depth, Hardening, Legacy Reality in the CompTIA SecurityX audio course.
Course Lessons
Listen to Enable Detection by Design: Central Logging, Monitoring, Alerting, and Sensor Placement in the CompTIA SecurityX audio course.
Course Lessons
Listen to Design Data Security Controls: Classification Models, Labeling, and Tagging Strategies in the CompTIA SecurityX audio course.
Course Lessons
Listen to Operationalize DLP Architecture: At Rest, In Transit, and Data Discovery in the CompTIA SecurityX audio course.
Course Lessons
Listen to Secure Hybrid Architectures and Third-Party Integrations Without Weak Trust Boundaries in the CompTIA SecurityX audio course.
Course Lessons
Listen to Measure Control Effectiveness: Assessments, Scanning, and Metrics That Drive Action in the CompTIA SecurityX audio course.
Course Lessons
Listen to Design Secure Access Systems: Provisioning, Deprovisioning, Federation, and SSO in the CompTIA SecurityX audio course.
Course Lessons
Listen to Apply Access Control Models Precisely: RBAC, ABAC, MAC, DAC, and Enforcement Points in the CompTIA SecurityX audio course.
Course Lessons
Listen to Build PKI Architecture That Works: CA/RA, Templates, OCSP Stapling, Certificate Types in the CompTIA SecurityX audio course.
Course Lessons
Listen to Secure Physical and Logical Access Control Systems With Auditable Decisions in the CompTIA SecurityX audio course.
Course Lessons
Listen to Securely Implement Cloud Capabilities: CASB, CI/CD, Containers, Serverless, API Security in the CompTIA SecurityX audio course.
Course Lessons
Listen to Integrate Zero Trust Into Architecture: Subjects, Objects, Zones, Perimeters, Reauth in the CompTIA SecurityX audio course.
Course Lessons
Listen to Deperimeterize Safely: SASE, SD-WAN, Software-Defined Networking, and Segmentation in the CompTIA SecurityX audio course.
Course Lessons
Listen to Troubleshoot Enterprise IAM Failures: Conditional Access, Federation, SAML, OAuth, MFA in the CompTIA SecurityX audio course.
Course Lessons
Listen to Harden Secrets Management: Tokens, Certificates, Passwords, Keys, Rotation, Deletion in the CompTIA SecurityX audio course.
Course Lessons
Listen to Enhance Endpoint and Server Security: EDR, Privilege Management, HIPS, Logging, MDM in the CompTIA SecurityX audio course.
Course Lessons
Listen to Reduce Endpoint Attack Surface: Application Control, Configuration Management, Isolation in the CompTIA SecurityX audio course.
Course Lessons
Listen to Troubleshoot Network Infrastructure Issues: DNSSEC, DKIM/SPF/DMARC, TLS, Cipher Mismatch in the CompTIA SecurityX audio course.
Course Lessons
Listen to Fix IPS/IDS and Observability Gaps: Rule Quality, Placement, False Positives, Coverage in the CompTIA SecurityX audio course.
Course Lessons
Listen to Implement Hardware Security: TPM, HSM, vTPM, Secure Boot, Measured Boot, Enclaves in the CompTIA SecurityX audio course.
Course Lessons
Listen to Defend Against Firmware and Physical TTPs: Shimming, USB Attacks, BIOS/UEFI, Memory in the CompTIA SecurityX audio course.
Course Lessons
Listen to Secure OT and IoT Systems: SCADA, ICS, Embedded, RF, Segmentation, Monitoring in the CompTIA SecurityX audio course.
Course Lessons
Listen to Secure Specialized and Legacy Systems: Constraints, Obsolescence, Unsupported Reality in the CompTIA SecurityX audio course.
Course Lessons
Listen to Use Automation to Secure the Enterprise: IaC, Triggers, Patching, SOAR, SCAP in the CompTIA SecurityX audio course.
Course Lessons
Listen to Explain Advanced Cryptography: PQC, Forward Secrecy, AEAD, Homomorphic Encryption in the CompTIA SecurityX audio course.
Course Lessons
Listen to Apply Cryptography Correctly: Use Cases, Key Management Models, and Practical Techniques in the CompTIA SecurityX audio course.
Course Lessons
Listen to Analyze Monitoring Data Like a Defender: SIEM Parsing, Retention, Baselines, Correlation in the CompTIA SecurityX audio course.
Course Lessons
Listen to Make Alerts Actionable: Prioritization Factors, Failures, and False Positive Control in the CompTIA SecurityX audio course.
Course Lessons
Listen to Incorporate Diverse Data Sources: Threat Feeds, Scans, Bounties, CSPM, Logs, DLP in the CompTIA SecurityX audio course.
Course Lessons
Listen to Analyze Vulnerabilities and Attacks: Injection, XSS, SSRF, Misconfigurations, Secrets in the CompTIA SecurityX audio course.
Course Lessons
Listen to Recommend Attack Surface Reductions: Validation, Patching, Encryption, Defense-in-Depth in the CompTIA SecurityX audio course.
Course Lessons
Listen to Apply Threat Hunting and Intelligence: Internal Sources, OSINT, Dark Web, ISACs in the CompTIA SecurityX audio course.
Course Lessons
Listen to Turn Intelligence Into Action: TIPs, IoC Sharing, STIX/TAXII, Sigma, YARA, Snort in the CompTIA SecurityX audio course.
Course Lessons
Listen to Analyze Incident Artifacts: Sandboxing, IoC Extraction, Stylometry, Reverse Engineering in the CompTIA SecurityX audio course.
Course Lessons
Listen to Perform Root Cause and Recovery Analysis: Metadata, Volatile Data, Host, and Network in the CompTIA SecurityX audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Related Cyber Wiki
AI post-deployment monitoring measures whether a released system continues to perform, comply, and behave safely in its actual environment.
AI incident responseAI-system incident response adapts preparation, detection, analysis, containment, recovery, and learning to failures and attacks involving models, data, prompts, outputs, pipelines, and automated decisions.
AI security architectureAI system trust boundaries identify where data, instructions, identities, models, tools, and authority cross between components or organizations.
AI third-party riskAI vendor control monitoring evaluates whether a provider continues to meet security, privacy, resilience, transparency, and notification commitments after onboarding.
Cryptography and trust conceptAdvanced Encryption Standard (AES) is a cryptographic or trust-management mechanism used to provide confidentiality, integrity, authenticity, non-repudiation, or secure key establishment.
Detection engineeringAlert actionability engineering designs alerts so a responder can understand the condition, impact, evidence, urgency, owner, and next safe step.
