CompTIA Security+ Guide: Exam Format, Domains, Cost and Study Plan
CompTIA Security+ is one of the most widely recognised entry-level cybersecurity certifications. The current exam, SY0-701, has up to 90 questions in 90 minutes, including performance-based simulations, with a passing score of 750 on a 100–900 scale. A voucher costs about US$425 when bought directly in the US. The certification is valid for three years, and it is a common first step into roles such as SOC analyst.
Key takeaways
- It covers security concepts, threats, architecture, operations and governance at entry level.
- Performance-based questions test practical skills, not just memory.
- Some networking knowledge first makes it far easier.
- Pair it with hands-on labs for interviews.
Security+ exam at a glance
| Detail | |
|---|---|
| Exam code | SY0-701 (check CompTIA for the current version) |
| Questions | Up to 90: multiple-choice and performance-based |
| Time | 90 minutes |
| Passing score | 750 (scale 100–900) |
| Cost | about US$425 (US, single voucher) |
| Validity | 3 years, renewable through continuing education |
| Recommended background | CompTIA suggests prior IT experience with a security focus, or Network+ knowledge |
What the exam covers (SY0-701 domains)
- General security concepts: controls, the CIA triad, zero trust, cryptography basics
- Threats, vulnerabilities and mitigations: malware, social engineering, attack indicators
- Security architecture: secure network and cloud design, resilience
- Security operations: monitoring, incident response, identity and access, vulnerability management
- Security programme management and oversight: governance, risk, compliance, third parties
Download CompTIA’s official exam objectives. They are the definitive checklist.
An 8-week study plan
| Week | Focus |
|---|---|
| 1 | Exam objectives; networking refresher (ports, protocols, OSI) |
| 2 | General security concepts and cryptography |
| 3 | Threats and attack types |
| 4 | Security architecture, including cloud |
| 5 | Security operations: identity, monitoring, incident response |
| 6 | Governance, risk, compliance |
| 7 | Performance-based question practice and labs |
| 8 | Full practice exams; review weak domains |
Tips for performance-based questions
- PBQs often appear first. Many candidates flag them and return later to protect their time.
- Practise configuring firewall rules, matching attacks to mitigations, and reading logs.
- Partial credit may be given, so attempt every part.
Is Security+ worth it?
For entry-level security candidates, yes. It is recognised by employers and listed in many job descriptions. It doesn’t replace hands-on skills: interviewers will ask how you’d investigate an alert. Build a home lab alongside your study, as described in how to start a career in cybersecurity.
New to IT altogether? Start with IT certifications for beginners. Weighing security against cloud? See AWS Cloud Practitioner.
Prepare live
Tutopiya is planning a live Cybersecurity Essentials cohort covering the Security+ domains through labs and mentor-led sessions. It is independent of CompTIA and isn’t running yet. Join the cybersecurity waitlist. Nothing is charged.
Sources
Frequently asked questions
What is the passing score for Security+? +
750 on a scale of 100 to 900.
How many questions are on the Security+ exam? +
A maximum of 90 questions in 90 minutes, including multiple-choice and performance-based questions (PBQs) that simulate real tasks.
How much does Security+ cost? +
A single exam voucher bought directly from CompTIA costs about US$425 in the US. Prices vary by region and discounted bundles exist.
Does Security+ expire? +
Yes. It is valid for three years and can be renewed through CompTIA's continuing education programme, by earning continuing education units or passing a higher-level certification.
Is Security+ worth it? +
For beginners in cybersecurity, yes. It is widely recognised, appears in many entry-level job descriptions, and meets baseline requirements for some government and defence roles. It's most effective combined with hands-on lab experience.
Founding cohorts · nothing charged
Want to learn this live, with a mentor?
Tutopiya is planning small, mentor-led online cohorts in English test prep, data & AI, business & finance and digital careers. Tell us which one you want. The programmes with the most interest open first, and the people on the waitlist hear about them first.
See the planned programmesWritten by
Tutopiya Careers Desk
Professional courses & career skills research · Tutopiya
The Tutopiya team researching which professional and certificate programmes to build next. We have taught live online since 2015. These guides answer the questions our waitlist asks most, with sources linked so every claim can be checked.
Related Articles
AWS Cloud Practitioner Guide: CLF-C02 Exam, Cost, Domains and Study Plan
AWS Certified Cloud Practitioner (CLF-C02) explained: who it's for, exam format, 700 passing score, US$100 fee, the four domains and a study plan.
AWS vs Azure vs Google Cloud Certifications: Which Cloud Should You Learn First?
AWS vs Azure vs Google Cloud certifications compared: entry-level exams, certification paths, job demand by employer type, and how to choose your first cloud.
Digital Marketing Career Guide: Roles, Paths and How to Get Your First Job
A digital marketing career guide: the main specialisms, entry roles, how to build proof with no experience, and how careers progress.