CompTIA Security+ (SY0-701) — Overview¶

📚 There's now a full Security+ study hub → ../security-plus/ — the five domains taught in depth, exam prep, practice questions, cheat sheet, and a long acronym/glossary reference. This page stays as a one-screen orientation.

CompTIA Security+ is a vendor-neutral, foundational cybersecurity certification from CompTIA (the Computing Technology Industry Association). It validates the core knowledge needed for entry-level security roles and is one of the most widely requested baseline credentials in job postings. This page covers SY0-701 (V7 page), which retires for English on 2027-06-11 (Japanese, Portuguese, Spanish, Thai 2027-08-13). Its successor SY0-801 (V8 page) launches on or around 2026-11-17, English only at launch — see the hub's version notice.

Unofficial & no fabrication. Not affiliated with or endorsed by CompTIA. Exam specifics below are from CompTIA's official Security+ page; anything volatile (price, exam code, retirement date) should be re-checked there before you rely on it. Compiled 2026-06-18; exam facts re-checked 2026-09-29.

Learning objectives¶

Describe what Security+ is and where it sits (vendor-neutral, foundational, defensive-leaning).
Identify who Security+ is for and what experience CompTIA recommends.
Summarise the five exam domains and their weightings.
State the verified exam format and note which details change over time.
Place Security+ in a sysadmin-to-security path and relate it to this repo's CEH and PAM (identity-security) material.

What it is¶

Attribute	Detail
Provider	CompTIA (vendor-neutral)
Level	Foundational / entry-level
Style	Broad security fundamentals with a defensive (blue-team) lean
Current exam	SY0-701, launched 2023-11-07; retires English 2027-06-11, other languages 2027-08-13. Successor SY0-801 from on or around 2026-11-17
Vendor-neutral?	Yes — not tied to any product

Security+ is breadth, not depth: it surveys threats, architecture, operations, and governance at a working level rather than drilling into one platform or into hands-on exploitation.

Who it's for¶

Sysadmins, network admins, and help-desk staff making a first move into security.
Anyone needing a recognised baseline credential to clear job-posting filters.
US federal and defence-contractor staff who need a DoD 8140-aligned baseline (see below).

CompTIA's recommended (not mandatory) experience is CompTIA Network+ and two years of experience working in a security / systems administrator job role (SY0-701). A sysadmin's networking and operating-system background maps directly onto this material.

Domains / scope¶

Five domains, with CompTIA's published SY0-701 weightings (V7 page) and, for comparison, the SY0-801 weightings (V8 page):

Domain (SY0-701 name)	SY0-701	SY0-801
General Security Concepts	12%	16%
Threats, Vulnerabilities, and Mitigations (SY0-801: "Threats, Vulnerabilities, and Attacks")	22%	24%
Security Architecture	18%	19%
Security Operations	28%	27%
Security Program Management and Oversight	20%	14%

Exam format (verified)¶

Item	Detail	Source note
Exam code	SY0-701 (SY0-801 has the same question cap, duration, and passing score)	CompTIA V7 / V8 pages
Questions	Maximum 90, mix of multiple-choice and performance-based questions (PBQs)	CompTIA official page
Duration	90 minutes	CompTIA official page
Passing score	750 on a scale of 100–900	CompTIA official page
Languages	English, Japanese, Portuguese, Spanish, Thai	CompTIA official page
Price / renewal (CEUs)	Not quoted here — verify on CompTIA (price and the Continuing Education / CEU renewal terms change)	omitted to avoid stale figures

Performance-based questions are interactive simulations (e.g., configuring a setting or analysing output), not just multiple choice — they are why hands-on familiarity helps.

DoD 8140 / 8570 relevance¶

Security+ is long-established as a United States Department of Defense (DoD) baseline credential. CompTIA states Security+ aligns with multiple DoD Directive 8140 cyber work roles (e.g., cyber defense analyst, incident responder, vulnerability analyst, security control assessor). DoD 8140 is the current cyber workforce framework that succeeded the older DoD 8570 information-assurance baseline, under which Security+ was a staple. This DoD alignment is a major reason Security+ appears so often in US government and defence-contractor job requirements.

Verify current status on the DoD cyber workforce site — approved-certification lists and role mappings are revised over time: US DoD Cyber Workforce — https://public.cyber.mil/ (verify on DoD / CompTIA — specifics change).

How it fits a cyber path¶

Security+ is typically a first or early security certification — the breadth baseline you earn before choosing an offensive or defensive track.

Relative to this repo's CEH hub: Security+ and CEH (EC-Council Certified Ethical Hacker) are both vendor-neutral and breadth-focused, but Security+ leans defensive/foundational while CEH adds the offensive lens on top. A common order is Security+ then CEH. See ../ceh/README.md and the CEH career & adjacent certs page.
Relative to Privileged Access Management (PAM): Security+ gives you the access-control, identity, and least-privilege concepts that PAM products operationalise — useful background before working with a specific PAM platform.
Next steps: depth-focused hands-on certs follow once you pick a track — see the offensive siblings oscp.md and pnpt.md.

flowchart LR
    Sysadmin(["Sysadmin / IT background"]) --> SecPlus["Security+<br/>(foundational, defensive lean)"]
    SecPlus --> CEHnode["CEH<br/>(breadth, offensive lens)"]
    CEHnode --> Hands["Hands-on offensive<br/>PNPT / OSCP"]
    SecPlus -.->|"identity & least-privilege concepts"| PAM["PAM / identity security"]

Study resources¶

Official: CompTIA Security+ page — exam objectives PDF, CertMaster Learn/Labs/Practice.
Recommended experience: CompTIA Network+ plus two years in a security / systems administrator job role.
Practice: download the current exam objectives and work performance-based labs; a sysadmin home lab covering networking, identity, and logging maps well to the Security Operations domain.
In this repo: the CEH labs and reference glossary reinforce shared fundamentals.

Sources¶

CompTIA — Security+ official certification page (DoD 8140 alignment, objectives download): https://www.comptia.org/en-us/certifications/security/
CompTIA — Security+ V7 (SY0-701) page (launch 2023-11-07, max 90 questions, 90 minutes, 750/100–900 passing score, domain weightings, languages, recommended experience, retirement dates; checked 2026-09-29): https://www.comptia.org/en-us/certifications/security/v7/
CompTIA — Security+ V8 (SY0-801) page (launch on or around 2026-11-17, English only, format, domain weightings; checked 2026-09-29): https://www.comptia.org/en-us/certifications/security/v8/
US DoD Cyber Workforce, Directives 8140 / 8570 (verify current Security+ mapping): https://public.cyber.mil/
Related in this repo: ../ceh/README.md · ../ceh/career/ceh-career-and-adjacent-certs.md · oscp.md · pnpt.md
Verify volatile specifics not quoted here (price, CEU renewal) on CompTIA's site — programs change.