CompTIA Security+ SY0-701 Study Guide: Domains, Format and Cost

CompTIA Security+ SY0-701 is a vendor-neutral entry-to-intermediate security exam with up to 90 questions in 90 minutes, a passing score of 750 on a 100-900 scale, and five domains led by security operations at 28 percent. The fastest way to prepare is to download the official exam objectives, weight your study time by domain percentage, and practise performance-based questions as well as multiple-choice ones. This guide turns those objectives into a plan you can follow.

Who this is for and what you will have at the end

This guide is for people moving into security analyst, security engineer or systems administrator roles, which are the roles CompTIA associates with the certification, and for IT staff who need a recognised baseline in security. CompTIA recommends Network+ and about two years of experience in a security or systems administrator role, but those are recommendations, not entry requirements.

By the end you will know the exam format, how the five domains are weighted, what each domain covers, how renewal works and what to check about cost. You will also have a study plan you can adapt to four, eight or twelve weeks.

Exam format at a glance

The details below come from CompTIA's Security+ SY0-701 page, checked on 2026-10-25.

The page lists a retirement date of August 13, 2027 for the Japanese, Portuguese, Spanish and Thai versions. Check the current retirement date for your language before you book.

Performance-based questions put you in a simulated scenario, such as configuring a rule or analysing evidence, rather than asking you to pick an answer. The exact number of them varies, so practise tasks in labs rather than relying on recall alone.

Version timing: V7 and V8

CompTIA's Security+ page states that Security+ V8 is expected around November 17, 2026, and describes it as expanding coverage of AI-related risks, security operations and modern environments. Exam objectives for V8 are separate from V7, so confirm which version you are sitting before buying a book or video course. A course written for the 2023 objectives will not cover V8 changes, and the reverse is also true.

If you are close to ready, sitting SY0-701 before its retirement date is a valid choice. If you are starting from zero and will not be ready for several months, read the V8 objectives first and compare them with the V7 list before choosing.

The five domains and how to weight your time

CompTIA publishes these domains and weights on the SY0-701 page.

The weights show how much of the exam draws on each domain, not how hard each domain is. A reasonable starting point is to allocate study hours in roughly the same proportions, then shift time toward your weak areas after your first practice test.

Domain 1: General security concepts (12%)

This domain covers security controls, fundamental concepts such as the CIA triad, non-repudiation, AAA and zero trust, change management, and cryptographic solutions including PKI, encryption, hashing and digital signatures. It is the shortest domain, but cryptography vocabulary is used in every other domain, so learn it first.

Domain 2: Threats, vulnerabilities, and mitigations (22%)

Expect threat actors and their motivations, threat vectors and attack surfaces, vulnerability types, and malicious activity such as malware, password, application, network and cryptographic attacks. It also covers mitigation techniques. For each attack, learn what it looks like, what it exploits and which control reduces it.

Domain 3: Security architecture (18%)

This domain covers architecture models, including on-premises, cloud, virtualization, IoT, ICS and infrastructure as code, along with enterprise infrastructure, data protection, and resilience and recovery. Draw network diagrams from memory: where a firewall, segmentation or backup sits matters for scenario questions.

Domain 4: Security operations (28%)

The largest domain covers computing resources, asset management, vulnerability management, alerting and monitoring, enterprise security tools such as firewalls, IDS/IPS, DLP, NAC and EDR/XDR, identity and access management, automation and orchestration, incident response, and data sources. Because it is nearly a third of the exam, this is where hands-on practice pays back most.

Domain 5: Security program management and oversight (20%)

This domain covers security governance, risk management, third-party risk, compliance, audits and assessments, and security awareness. These topics are less technical and more definition-heavy. Flashcards work well here: risk responses, policy types, assessment types and compliance terms.

Step-by-step study plan

The plan below is eight weeks at roughly ten hours per week. Compress or stretch it to fit your experience.

1. Week 1: get the source material. Download the official SY0-701 exam objectives from CompTIA's site and treat the bullet list as your checklist. Mark each line as strong, shaky or new.
2. Weeks 2 and 3: domains 1 and 2. Learn cryptography and control categories, then work through attack types. Write a one-line "what it is, what stops it" note for each.
3. Week 4: domain 3. Study architecture models and data protection. Sketch a segmented network and mark where each control sits.
4. Weeks 5 and 6: domain 4. Spend the most lab time here. Work with a firewall rule set, read logs, step through an incident response process and practise identity and access concepts.
5. Week 7: domain 5. Cover governance, risk and compliance vocabulary and take a first full-length practice exam under timed conditions.
6. Week 8: close gaps. Review every question you missed, redo labs for weak objectives and take a second timed practice exam.

Practise performance-based questions

Because performance-based items appear alongside multiple-choice ones, build practice around tasks: interpret a log excerpt, choose the right control for a scenario, order the steps of incident response. Free virtual machines, a home lab and trial tiers of security tools let you do this without extra cost.

Use the objectives as the boundary

Third-party books and videos add useful explanation, but the objectives are the boundary of the exam. If a resource spends hours on a topic not in the objectives, skim it. If an objective is thin in your materials, find another source.

Cost and renewal

CompTIA's SY0-701 page points to a Buy Now section with exam vouchers and bundles that include Retake Assurance, but does not list a price on the page. Prices vary by region and change over time, so check CompTIA's store for the current figure instead of relying on a blog post. Training materials, practice exams and any retake are additional costs.

Validity and continuing education

CompTIA states that Security+ is valid for three years from the date you pass. You can extend it for another three years through the continuing education (CE) program. The official renewal options include:

• Earning continuing education units (CEUs) through qualifying activities. CompTIA's blog states renewal requires 50 CEUs.
• Completing the CertMaster CE Security+ course.
• Passing the latest release of the exam, or earning a higher-level CompTIA certification.

CompTIA's renewal fee page lists the Security+ CE fee at $150 for the three-year period. Fees are not charged annually and should only be paid if you renew by uploading CEUs. You owe no CE fee if you renew by passing the latest exam, earning a higher-level certification or completing CertMaster CE. CompTIA's renewal policy mentions a 30-day grace period to pay outstanding fees or submit CEUs earned within the original cycle. If the certification lapses, you must pass the latest exam version to regain it.

Troubleshooting common study problems

Practice scores stall below passing. Sort missed questions by domain. If most come from domain 4, add lab time; if they come from domain 5, add flashcards. Re-reading chapters you already know rarely helps.

You know the terms but fail scenario questions. Practise explaining why each wrong option is wrong. Many questions ask for the best answer among plausible controls.

Acronym overload. Build a single sheet of acronyms grouped by domain and review a few every day instead of cramming.

Material mismatch. If your course mentions topics that do not appear in the objectives, or omits ones that do, check its version. It may target a different release.

Exam-week checklist

• Confirm the exam version on your booking matches your study materials.
• Re-read the objectives list and mark any line you cannot explain aloud.
• Complete one last timed practice exam at least two days before.
• Read CompTIA's testing rules for the delivery method you chose before exam day.
• Plan your time: with up to 90 questions in 90 minutes, flag long performance-based items and return to them after the multiple-choice questions.
• After passing, note your certification date, because the three-year renewal window runs from it, and start logging CE activities early.

If you are also weighing Microsoft security certifications, the SC-200 study guide and the SC-300 study guide cover role-based paths that build on the vendor-neutral concepts here.

References

• CompTIA Security+ certification page: https://www.comptia.org/en-us/certifications/security/
• CompTIA Security+ SY0-701 (V7) page: https://www.comptia.org/en-us/certifications/security/v7/
• CompTIA continuing education renewal fees: https://www.comptia.org/en-us/resources/ce/learn/continuing-education-renewal-fees/
• CompTIA certification renewal policy: https://www.comptia.org/en-us/resources/test-policies/continuing-education-policies/certification-renewal-policy/
• CompTIA, How long does the Security+ certification last: https://www.comptia.org/en-us/blog/how-long-does-the-comptia-security-certification-last/