CompTIA Security+ is one of the most widely recognized entry-level cybersecurity certifications. Employers use it as a baseline for security analyst, systems administrator, help desk and network roles, and it meets the requirements for many government and defense positions.
This guide gives you a complete study plan: what the exam covers, how to study each area, and week-by-week schedules you can follow.
Check the exam version. At the time of writing, the current exam code is SY0-701. CompTIA updates its exams roughly every three years, so check CompTIA's official site for the current version and its official exam objectives before you buy any study material.
Exam format at a glance
| Security+ (SY0-701) | |
|---|---|
| Questions | Up to 90 |
| Question types | Multiple choice and performance-based |
| Time | 90 minutes |
| Passing score | 750 on a scale of 100 to 900 |
| Recommended experience | CompTIA Network+ and about two years of IT experience with a security focus (recommended, not required) |
| Delivery | Pearson VUE test centers or online proctored |
| Renewal | Every three years, via continuing education or a higher certification |
What the exam covers
SY0-701 is organized into five domains (weightings from CompTIA's official objectives):
- General Security Concepts (12%): security controls, the CIA triad, zero trust, physical security, change management, and cryptography fundamentals including PKI, hashing and encryption.
- Threats, Vulnerabilities and Mitigations (22%): threat actors and motivations, attack vectors, social engineering, malware, application and network attacks, indicators of compromise, and mitigation techniques.
- Security Architecture (18%): cloud, on-premises and hybrid architectures, network infrastructure security, data protection, resilience and recovery.
- Security Operations (28%): hardening, asset management, vulnerability management, monitoring, identity and access management, automation, incident response and digital forensics basics.
- Security Program Management and Oversight (20%): governance, risk management, third-party risk, compliance, audits and security awareness.
Security Operations is the largest domain, so it deserves the most practice time.
Before you start: assess your baseline
Your study plan should depend on what you already know:
- New to IT: take the 12-week plan, and consider studying networking basics first (Network+ material is very helpful).
- Some IT experience: the 8-week plan is realistic.
- Working in security already: you may need only four to six weeks focused on objectives you don't use day to day, plus practice tests.
Take a short diagnostic practice test before you begin. Don't worry about the score; use it to see which domains are weakest.
The study method that works
1. Use the official objectives as your checklist
Download CompTIA's exam objectives PDF. Every exam question maps to an objective. Tick each one off as you can explain it in your own words.
2. Use one main course and one supporting resource
Pick a primary resource (a video course or a study guide) and one secondary resource for topics that don't click. Using too many resources at once wastes time.
3. Learn by comparing
Many Security+ questions ask you to choose between similar options. Make comparison tables:
- Symmetric vs asymmetric encryption
- Hashing vs encryption
- IDS vs IPS
- Vulnerability scan vs penetration test
- Risk acceptance vs transference vs mitigation vs avoidance
- RTO vs RPO, MTTR vs MTBF
4. Practice hands-on
Performance-based questions (PBQs) ask you to configure, match or analyze, for example placing firewall rules, matching attacks to descriptions, or reading log entries. Free virtual labs, a home lab using virtual machines, and simulation-style practice questions all help.
5. Practice tests, then review every answer
Practice tests are most useful in the review. For each question, including the ones you got right by guessing, make sure you understand why the correct answer is right and why each wrong answer is wrong.
8-week Security+ study plan
Plan for about 8 to 10 hours per week.
| Week | Focus | Goal |
|---|---|---|
| 1 | Domain 1: security controls, CIA, zero trust, physical security | Explain every Domain 1 objective |
| 2 | Domain 1: cryptography and PKI | Comparison tables for crypto concepts |
| 3 | Domain 2: threat actors, social engineering, malware | Recognize attacks from descriptions |
| 4 | Domain 2: application and network attacks, indicators, mitigations | Match attacks to mitigations |
| 5 | Domain 3: architecture, network security, cloud, resilience | Draw a secure network diagram from memory |
| 6 | Domain 4: hardening, IAM, vulnerability management, monitoring | Hands-on labs and log reading |
| 7 | Domain 4 continued (incident response, forensics) and Domain 5 | Know governance and risk terminology |
| 8 | Full practice exams and review of weak areas | Consistently score 85% or higher on practice tests |
12-week Security+ study plan
Plan for about 6 to 8 hours per week. This is better if you're new to IT.
| Weeks | Focus |
|---|---|
| 1–2 | Networking and IT fundamentals: ports, protocols, the OSI model, basic network devices |
| 3–4 | Domain 1: security concepts and cryptography |
| 5–6 | Domain 2: threats, vulnerabilities and mitigations |
| 7 | Domain 3: security architecture |
| 8–9 | Domain 4: security operations, with hands-on labs |
| 10 | Domain 5: program management and oversight |
| 11 | Full practice exams; review weak areas |
| 12 | Final review, PBQ practice and booking your exam |
Ports and protocols: a common weak spot
Many candidates lose easy marks on ports. Learn the common secure and insecure pairs, for example:
| Insecure | Secure alternative |
|---|---|
| Telnet (23) | SSH (22) |
| HTTP (80) | HTTPS (443) |
| FTP (20/21) | SFTP (22) or FTPS (989/990) |
| LDAP (389) | LDAPS (636) |
| SNMP v1/v2 (161) | SNMPv3 |
Exam-day strategy
- Flag PBQs and come back. PBQs usually appear first and can take a long time. Many candidates answer the multiple-choice questions first, then return to the PBQs.
- Read the last sentence first. It tells you what's being asked, for example "BEST", "FIRST" or "MOST likely".
- Eliminate. Rule out options that are true but don't answer the question.
- Watch your time. 90 minutes for up to 90 questions; check your progress at the halfway point.
- For online proctoring, run the system test in advance and prepare a clear, quiet room.
Am I ready?
You're likely ready when you consistently score 85% or higher on quality practice tests you haven't seen before, you can explain every objective in your own words, and you're comfortable with PBQ-style tasks.
Frequently asked questions
Is Security+ hard?
It's an entry-level certification, but it's broad. Candidates without networking knowledge usually find it harder, which is why Network+ (or equivalent knowledge) is recommended first.
How long should I study for Security+?
Typically 6 to 12 weeks, depending on experience and weekly study time.
Do I need Network+ first?
It isn't required, but networking knowledge makes Security+ much easier.
How do I renew Security+?
Security+ is valid for three years. You renew through CompTIA's continuing education program or by earning a higher-level qualifying certification.
Get structured help
We offer Security+ study plans built around your schedule, one-to-one tutoring on difficult domains, and exam-readiness reviews. You sit the exam yourself; our job is to get you ready for it. See our academic integrity policy.