Security+ SY0-701
CompTIA Security+ SY0-701 Exam Objectives
The Security+ SY0-701 exam is organized into five domains, each weighted differently toward your score. Knowing where the points are tells you where to spend your study time — Security Operations alone is 28% of the exam.
SY0-801 launches November 17, 2026. You can still take SY0-701 until its English exam retires on June 11, 2027.
3 practice exams free — no signup needed
SY0-701 Domains & Weights
1.0General Security Concepts
12%Security controls, the CIA triad, zero trust, physical security, and change-management and cryptographic fundamentals (PKI, hashing, encryption).
2.0Threats, Vulnerabilities & Mitigations
22%Threat actors and vectors, common vulnerabilities, indicators of malicious activity, and the techniques used to mitigate them.
3.0Security Architecture
18%Securing cloud, on-prem, and hybrid architectures; data protection; resilience and recovery in enterprise design.
4.0Security Operations
28%The largest domain: hardening, monitoring, identity and access management, automation, incident response, and digital forensics.
5.0Security Program Management & Oversight
20%Governance, risk management, third-party/vendor risk, compliance, audits, and security-awareness practices.
SY0-701 mixes multiple-choice and performance-based questions (PBQs). Practice Security+ PBQs
Security+ Objectives FAQ
How many domains are on the Security+ SY0-701 exam?
Five: General Security Concepts (12%), Threats, Vulnerabilities & Mitigations (22%), Security Architecture (18%), Security Operations (28%), and Security Program Management & Oversight (20%).
Which Security+ domain is weighted the most?
Security Operations at 28%. Threats, Vulnerabilities & Mitigations (22%) and Security Program Management & Oversight (20%) are the next largest, so those three domains together are 70% of the exam.
Practice Security+ by Domain
1,808 questions across 75 exams, weighted to match the SY0-701 domains above. 3 free — no signup.
Start Free Practice Test