CompTIA SecAI+ (CY0-001)

Study plan 8 weeks · 5-7 hrs/week

1. Week 1

   Domain 1

   • ML, deep learning, NLP terms; AI uses in security; AI-driven threats (automated phishing, polymorphic malware, adversarial ML).
2. Week 2

   Domain 2 (part 1)

   • Securing data, models and infrastructure; on-prem/cloud/hybrid deployment security.
3. Week 3

   Domain 2 (part 2) + labs

   • Adversarial attacks on models, pipelines and inference; hands-on labs (prompt injection, model access control).
4. Week 4

   LLM application security deep dive

   • Work through the OWASP Top 10 for LLM Applications and MITRE ATLAS; for each, name a preventive and a detective control.
   • Lab: test a sandboxed chatbot for prompt injection and data leakage, then add guardrails.
5. Week 5

   Domains 3-4

   • AI for detection, triage, SOAR; AI governance frameworks (GDPR, NIST AI RMF), GRC across the AI life cycle.
6. Week 6

   AI-assisted security labs

   • Use AI tooling for log summarisation, alert triage and detection-rule drafting; verify the outputs manually.
   • Document the limits: hallucinations, data exposure to third-party models, and the need for human review.
7. Week 7

   Practice

   • Performance-based question drills; timed 60-minute practice tests.
8. Week 8

   Final review

   • Go through every exam objective in the official objectives PDF and mark your confidence.
   • Re-drill weak objectives and take one final timed practice test.