CompTIA Security+ (SY0-701)
Validate baseline cybersecurity skills, risk management, cryptographic concepts, threat detection, hybrid enterprise security architecture, and operational incident response techniques.
Official Exam Specification & Quick Facts
Question Difficulty Breakdown
Exam Guidelines & Simulation Rules
Frequently Asked Questions (FAQ)
CompTIA Security+ is an ISO/ANSI accredited cybersecurity certification validating foundational skills across security concepts, threat intelligence, architecture, operations, and compliance.
The exam consists of up to 90 multiple-choice and performance-based questions (PBQs) to be completed within 90 minutes.
The passing score is 750 on a scaled score of 100 to 900 (approximately 83%).
Domains include: (1) General Security Concepts (12%), (2) Threats, Vulnerabilities, and Mitigations (22%), (3) Security Architecture (18%), (4) Security Operations (28%), and (5) Security Program Management and Oversight (20%).
The CIA Triad stands for Confidentiality (preventing unauthorized disclosure), Integrity (preventing unauthorized modification), and Availability (ensuring timely and reliable access to data and services).
Zero Trust operates on the principle of 'never trust, always verify', enforcing continuous authentication, least privilege access, micro-segmentation, and dynamic context evaluation for every connection.
Symmetric encryption (e.g. AES) uses a single shared key for encryption and decryption, offering high speed. Asymmetric encryption (e.g. RSA, ECC) uses a public/private keypair, facilitating key exchange and digital signatures.
MFA requires two or more distinct authentication factors: Something you know (password, PIN), Something you have (smartcard, TOTP token), Something you are (biometrics), Somewhere you are (geolocation), or Something you do (behavior).
A vulnerability assessment scans and catalogs known security weaknesses. A penetration test actively exploits vulnerabilities to simulate real-world attacks and evaluate defensive posture.
Security Information and Event Management (SIEM) aggregates, correlates, and analyzes log data across an enterprise. Security Orchestration, Automation, and Response (SOAR) automates incident response workflows and threat containment playbooks.
Defense in Depth implements multiple overlapping layers of administrative, physical, and technical security controls (firewalls, EDR, MFA, training) so if one fails, others protect the asset.
Entry-level to intermediate cybersecurity analysts, system administrators, network engineers, and IT specialists seeking baseline cybersecurity credentials or DoD 8570/8140 compliance.