Sign in with GitHub to keep your levels across devices
CompTIA Security+ SY0-701
The exam's own five domains, the podcast episode for each objective, and a timed challenge per domain when you want to grind.
- Exam code
- SY0-701
- Questions
- up to 90, multiple choice and performance based
- Time
- 90 minutes
- Passing score
- 750 on a scale of 100 to 900
The official page
What the exam is, from the people who write it.
The objectives
The published objectives document.
Take this exam for free
The Washington State Library pays for the course, the practice tests, the exam and the proctor.
The other prep pages
IT Specialist JavaIT Specialist Java, on this site.
IT Specialist AIIT Specialist Artificial Intelligence, on this site.
How a level is earned
A challenge draws its questions at random from that domain's bank. Earn the level by getting enough of them right before the time runs out. Levels come in order, one domain at a time.
| Level | Questions | Right to earn it | Time |
|---|---|---|---|
| 1 | 5 | 5 | 10 minutes |
| 2 | 5 | 5 | 5 minutes |
| 3 | 10 | 9 | 5 minutes |
| 4 | 10 | 9 | 2 minutes |
| 5 | 10 | 9 | 1 minute |
This browser stores your level for each domain and your last few attempts. Nothing else. It is practice, not a grade, and no score here reaches anyone. Signing in copies those same levels to your own account so another device can read them, and nothing more: your email address is not stored in this browser, and nobody else can see your levels. Signing out leaves the levels on this browser where they are.
Domain 1: General Security Concepts12 percent of the exam
- 1.1 Security controlsCompare and contrast various types of security controlsListen: lessonBonus: ten practice questions
- 1.2 Fundamental security conceptsSummarize fundamental security conceptsListen: lessonBonus: ten practice questions
- 1.3 Change managementExplain the importance of change management processes and the impact to securityListen: lessonBonus: ten practice questions
- 1.4 Cryptographic solutionsExplain the importance of using appropriate cryptographic solutionsListen: lessonBonus: ten practice questions
Not started
Domain 2: Threats, Vulnerabilities, and Mitigations22 percent of the exam
- 2.1 Threat actors and motivationsCompare and contrast common threat actors and motivations(coming soon)
- 2.2 Threat vectors and attack surfacesExplain common threat vectors and attack surfaces(coming soon)
- 2.3 Types of vulnerabilitiesExplain various types of vulnerabilities(coming soon)
- 2.4 Indicators of malicious activityGiven a scenario, analyze indicators of malicious activity(coming soon)
- 2.5 Mitigation techniquesExplain the purpose of mitigation techniques used to secure the enterprise(coming soon)
coming soon
Domain 3: Security Architecture18 percent of the exam
- 3.1 Architecture modelsCompare and contrast security implications of different architecture models(coming soon)
- 3.2 Securing enterprise infrastructureGiven a scenario, apply security principles to secure enterprise infrastructure(coming soon)
- 3.3 Protecting dataCompare and contrast concepts and strategies to protect data(coming soon)
- 3.4 Resilience and recoveryExplain the importance of resilience and recovery in security architecture(coming soon)
coming soon
Domain 4: Security Operations28 percent of the exam
- 4.1 Securing computing resourcesGiven a scenario, apply common security techniques to computing resources(coming soon)
- 4.2 Asset managementExplain the security implications of proper hardware, software, and data asset management(coming soon)
- 4.3 Vulnerability managementExplain various activities associated with vulnerability management(coming soon)
- 4.4 Alerting and monitoringExplain security alerting and monitoring concepts and tools(coming soon)
- 4.5 Enterprise security capabilitiesGiven a scenario, modify enterprise capabilities to enhance security(coming soon)
- 4.6 Identity and access managementGiven a scenario, implement and maintain identity and access management(coming soon)
- 4.7 Automation and orchestrationExplain the importance of automation and orchestration related to secure operations(coming soon)
- 4.8 Incident responseExplain appropriate incident response activities(coming soon)
- 4.9 Data sources for investigationsGiven a scenario, use data sources to support an investigation(coming soon)
coming soon
Domain 5: Security Program Management and Oversight20 percent of the exam
- 5.1 Security governanceSummarize elements of effective security governance(coming soon)
- 5.2 Risk managementExplain elements of the risk management process(coming soon)
- 5.3 Third-party riskExplain the processes associated with third-party risk assessment and management(coming soon)
- 5.4 Security complianceSummarize elements of effective security compliance(coming soon)
- 5.5 Audits and assessmentsExplain types and purposes of audits and assessments(coming soon)
- 5.6 Security awarenessGiven a scenario, implement security awareness practices(coming soon)
coming soon
Where this page and the vendor's own pages disagree, the vendor is right.