Open the Door to Your Cybersecurity Career with CompTIA Security+
Launch a successful cybersecurity career
Build a solid foundation of necessary abilities to set the stage for a successful career. Compared to other certifications in the industry, Security+ is used for baseline cybersecurity abilities in more employment roles.
Assess on-the-job skills
With practical, performance-based test questions, Security+ is the most popular ISO/ANSI-accredited early career cybersecurity certification available. These hands-on questions evaluate your abilities to solve problems in real-world scenarios and show prospective employers that you are knowledgeable right away.
Embrace the latest trends
Recognize and apply the latest developments in cybersecurity terminology, methods, and resources. You may succeed in the constantly changing cybersecurity field by learning early career skills in the newest trends, like automation, zero trust, risk analysis, operational technology, and IoT.
About the exam
The most up-to-date and advanced cybersecurity certification is the new CompTIA Security+ (SY0-701), which covers the most sought-after competencies in areas including risk, automation, zero trust, IoT, and current threats. After obtaining your certification, employers will see that you possess the fundamental abilities required to thrive in the workplace. The Security+ test confirms that you possess the abilities and knowledge needed to:
- Evaluate an enterprise environment’s security posture and suggest and put into practice suitable security measures.
- Keep an eye on and safeguard hybrid settings, such as those including cloud, mobile, IoT, and operational technologies.
- Be mindful of all relevant rules and guidelines, especially those pertaining to risk, governance, and compliance.
- Recognize, evaluate, and address security issues and events.
The U.S. DoD has authorized CompTIA Security+ to satisfy Directive 8140.03M requirements, and it complies with ISO 17024 standards. Because ANSI accreditation instills confidence and trust in the results of an accredited program, regulators and the government rely on it. Since January 1, 2011, more than 3 million CompTIA ISO/ANSI-accredited tests have been distributed.
| Exam Code | SY0-701 | |
| Launch Date | November 7, 2023 | |
| Exam Description | The CompTIA Security+ certification exam will verify the successful candidate has the knowledge and skills required to assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; monitor and secure hybrid environments, including cloud, mobile, and IoT; operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; identify, analyze, and respond to security events and incidents | |
| Number of Questions | Maximum of 90 questions | |
| Type of Questions | Multiple choice and performance-based | |
| Length of Test | 90 minutes | |
| Passing Score | 750 (on a scale of 100-900) | |
| Recommended Experience | CompTIA Network+ and two years of experience working in a security/ systems administrator job role | |
| Languages | English, with Japanese, Portuguese and Spanish to follow | |
| Retirement | TBD – Usually three years after launch | |
| DoD 8140 Approved Work Roles | To view approved work roles click here. For more information on 8140, click here. | |
| Testing Provider | Pearson VUE
|
|
Curriculum
- 5 Sections
- 35 Lessons
- 30 Days
- Threats, Attacks, and Vulnerabilities8
- 1.0Compare and contrast different types of social engineering techniques.
- 1.1Given a scenario, analyze potential indicators to determine the type of attack.
- 1.2Given a scenario, analyze potential indicators associated with application attacks.
- 1.3Given a scenario, analyze potential indicators associated with network attacks.
- 1.4Explain different threat actors, vectors, and intelligence sources.
- 1.5Explain the security concerns associated with various types of vulnerabilities.
- 1.6Summarize the techniques used in security assessments.
- 1.7Explain the techniques used in penetration testing.
- Architecture and Design8
- 2.0Explain the importance of security concepts in an enterprise environment.
- 2.1Summarize virtualization and cloud computing concepts.
- 2.2Summarize secure application development, deployment, and automation concepts.
- 2.3Summarize authentication and authorization design concepts.
- 2.4Given a scenario, implement cybersecurity resilience.
- 2.5Explain the security implications of embedded and specialized systems.
- 2.6Explain the importance of physical security controls.
- 2.7Summarize the basics of cryptographic concepts.
- Implementation9
- 3.0Given a scenario, implement secure protocols.
- 3.1Given a scenario, implement host or application security solutions.
- 3.2Given a scenario, implement secure network designs.
- 3.3Given a scenario, install and configure wireless security settings.
- 3.4Given a scenario, implement secure mobile solutions.
- 3.5Given a scenario, apply cybersecurity solutions to the cloud.
- 3.6Given a scenario, implement identity and account management controls.
- 3.7Given a scenario, implement authentication and authorization solutions.
- 3.8Given a scenario, implement public key infrastructure.
- Operations and Incident Response5
- 4.0Given a scenario, use the appropriate tool to assess organizational security.
- 4.1Summarize the importance of policies, processes, and procedures for incident response.
- 4.2Given an incident, utilize appropriate data sources to support an investigation.
- 4.3Given an incident, apply mitigation techniques or controls to secure an environment.
- 4.4Explain the key aspects of digital forensics.
- Governance, Risk, and Compliance5
- 5.0Compare and contrast various types of controls.
- 5.1Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture.
- 5.2Explain the importance of policies to organizational security.
- 5.3Summarize risk management processes and concepts.
- 5.4Explain privacy and sensitive data concepts in relation to security.




