CompTIA Security+ SY0-701

CompTIA Security+ (SY0-701) covers general security concepts, threats and vulnerabilities, security architecture, security operations, and security program management. These pages break the exam down objective by objective, with explained practice questions and memory hooks so you can see exactly where you stand before you book.

• Exam code: SY0-701
• 90 questions
• Passing score: 750
• 90 minutes

Exam domains

General Security Concepts 12%

• 1.1 - Security control categories and types
• 1.2 - Fundamental security concepts
• 1.3 - Change management in security
• 1.4 - Cryptographic solutions

Threats, Vulnerabilities & Mitigations 22%

• 2.1 - Threat actors and attack surfaces
• 2.2 - Social engineering attacks
• 2.3 - Vulnerability types
• 2.4 - Malicious activity: attacks and malware
• 2.5 - Mitigation techniques

Security Architecture 18%

• 3.1 - Security architecture and network devices
• 3.2 - Securing enterprise infrastructure
• 3.3 - Data protection: classification, tokenization and masking
• 3.4 - Resilience and recovery

Security Operations 28%

• 4.1 - Secure baselines and protocols
• 4.2 - Secure configuration and automation
• 4.3 - Vulnerability management
• 4.4 - Security monitoring and alerting
• 4.5 - Enterprise security tools (EDR, IPS, MDM)
• 4.6 - Identity and access management
• 4.7 - SIEM and security automation
• 4.8 - The incident response process

Security Program Management & Oversight 20%

• 5.1 - Security governance and policies
• 5.2 - Risk management strategies
• 5.3 - Third-party agreements (SLA, SOW, NDA)
• 5.4 - Compliance, BIA and business continuity
• 5.5 - Vendor management, audits and assessments
• 5.6 - Security awareness and insider threats