CompTIA Security+
Exam-aligned guide • SY0-701
Concepts • labs • troubleshooting • original practice questions •
explained answers
INDEPENDENT STUDY GUIDE
This publication is not affiliated with or endorsed by CompTIA. CompTIA and certification names are
trademarks of their respective owner. Exam objectives and policies change; confirm the current official
objectives before scheduling. No publication can guarantee a passing score.
,CompTIA Security+ SY0-701
Contents
How to use this guide 3
Exam snapshot 3
Weighted domain map 3
Diagnostic 3
Domain lessons 4
1.0 General Security Concepts (12%) 4
2.0 Threats, Vulnerabilities, and Mitigations (22%) 5
3.0 Security Architecture (18%) 7
4.0 Security Operations (28%) 8
5.0 Security Program Management and Oversight (20%) 10
Decision frameworks 11
Threat-to-control chain 11
Architecture choice 11
Crypto choice 11
Safe labs and tabletop exercises 11
Common traps 12
Six-week study plan 13
Exam-day strategy 13
40 original practice questions 13
Questions 13
Detailed answer key 15
Glossary 16
Objective coverage checklist 17
Sources and further reading 18
Independent study guide • verify current objectives before testing 2
, CompTIA Security+ SY0-701
Independent study resource. This original guide is not affiliated with, endorsed by, or authorized by CompTIA.
CompTIA and Security+ are trademarks of CompTIA, Inc. No study guide can guarantee a passing result. Confirm
objectives, policies, pricing, and scheduling with CompTIA before testing. The questions below are original
practice—not recalled or real exam items.
How to use this guide
Read once for structure, then study by objective. For each lesson, explain the concept without notes, make the
associated decision, and complete a safe lab. Record misses by objective code rather than merely counting
scores. “Given a scenario” means selecting or applying the best control under stated constraints; memorize less
and practice trade-offs more.
Exam snapshot
Item Current exam
Certification / code CompTIA Security+ SY0-701, version 7
Launch November 7, 2023
Format Maximum 90 multiple-choice and performance-based questions
Time 90 minutes
Passing score 750 on a 100–900 scale
Recommended background Network+ and about two years in a security/systems
administrator role
Retirement shown by CompTIA English: June 11, 2027; listed translations: August 13, 2027
CompTIA’s current certification page is the authority for these details.[1]
Weighted domain map
Domain Weight Objectives Study implication
1.0 General Security Concepts 12% 1.1–1.4 Know vocabulary and why a
control fits.
2.0 Threats, Vulnerabilities, 22% 2.1–2.5 Connect actor, vector,
and Mitigations indicator, flaw, and mitigation.
3.0 Security Architecture 18% 3.1–3.4 Compare models and design
for data protection and
recovery.
4.0 Security Operations 28% 4.1–4.9 Highest priority: configuration,
IAM, monitoring, vulnerability
and incident workflows.
5.0 Security Program 20% 5.1–5.6 Distinguish governance
Management and Oversight artifacts, risk decisions,
assurance, privacy, and
awareness.
Diagnostic
Score each statement 0 (cannot explain), 1 (recognize), or 2 (can apply). A score below 16/24 suggests
beginning with fundamentals; 16–20 suggests targeted review; above 20 suggests timed mixed practice.
Independent study guide • verify current objectives before testing 3
Exam-aligned guide • SY0-701
Concepts • labs • troubleshooting • original practice questions •
explained answers
INDEPENDENT STUDY GUIDE
This publication is not affiliated with or endorsed by CompTIA. CompTIA and certification names are
trademarks of their respective owner. Exam objectives and policies change; confirm the current official
objectives before scheduling. No publication can guarantee a passing score.
,CompTIA Security+ SY0-701
Contents
How to use this guide 3
Exam snapshot 3
Weighted domain map 3
Diagnostic 3
Domain lessons 4
1.0 General Security Concepts (12%) 4
2.0 Threats, Vulnerabilities, and Mitigations (22%) 5
3.0 Security Architecture (18%) 7
4.0 Security Operations (28%) 8
5.0 Security Program Management and Oversight (20%) 10
Decision frameworks 11
Threat-to-control chain 11
Architecture choice 11
Crypto choice 11
Safe labs and tabletop exercises 11
Common traps 12
Six-week study plan 13
Exam-day strategy 13
40 original practice questions 13
Questions 13
Detailed answer key 15
Glossary 16
Objective coverage checklist 17
Sources and further reading 18
Independent study guide • verify current objectives before testing 2
, CompTIA Security+ SY0-701
Independent study resource. This original guide is not affiliated with, endorsed by, or authorized by CompTIA.
CompTIA and Security+ are trademarks of CompTIA, Inc. No study guide can guarantee a passing result. Confirm
objectives, policies, pricing, and scheduling with CompTIA before testing. The questions below are original
practice—not recalled or real exam items.
How to use this guide
Read once for structure, then study by objective. For each lesson, explain the concept without notes, make the
associated decision, and complete a safe lab. Record misses by objective code rather than merely counting
scores. “Given a scenario” means selecting or applying the best control under stated constraints; memorize less
and practice trade-offs more.
Exam snapshot
Item Current exam
Certification / code CompTIA Security+ SY0-701, version 7
Launch November 7, 2023
Format Maximum 90 multiple-choice and performance-based questions
Time 90 minutes
Passing score 750 on a 100–900 scale
Recommended background Network+ and about two years in a security/systems
administrator role
Retirement shown by CompTIA English: June 11, 2027; listed translations: August 13, 2027
CompTIA’s current certification page is the authority for these details.[1]
Weighted domain map
Domain Weight Objectives Study implication
1.0 General Security Concepts 12% 1.1–1.4 Know vocabulary and why a
control fits.
2.0 Threats, Vulnerabilities, 22% 2.1–2.5 Connect actor, vector,
and Mitigations indicator, flaw, and mitigation.
3.0 Security Architecture 18% 3.1–3.4 Compare models and design
for data protection and
recovery.
4.0 Security Operations 28% 4.1–4.9 Highest priority: configuration,
IAM, monitoring, vulnerability
and incident workflows.
5.0 Security Program 20% 5.1–5.6 Distinguish governance
Management and Oversight artifacts, risk decisions,
assurance, privacy, and
awareness.
Diagnostic
Score each statement 0 (cannot explain), 1 (recognize), or 2 (can apply). A score below 16/24 suggests
beginning with fundamentals; 16–20 suggests targeted review; above 20 suggests timed mixed practice.
Independent study guide • verify current objectives before testing 3
