Prep
How to get Security+ in one paragraph
If you want to know how to get Security+, the short version is: pick an exam version, study the official objectives, practise until you score well on timed sets, buy a voucher from CompTIA or a listed partner, book the exam with Pearson VUE (at a test centre or online), and pass it. There is no application, no experience check and no required course. CompTIA recommends Network+ and two years of experience in a security or systems administrator role, but you can book the exam without them.
The checklist below covers each step in order. Later sections answer the two questions most people ask next: how hard is Security+, and is it worth it?
| SY0-701 (V7) | SY0-801 (V8) | |
|---|---|---|
| Available | Since November 7, 2023; English retires June 11, 2027 | From on or around November 17, 2026 |
| Questions and time | Up to 90 in 90 minutes | Up to 90 in 90 minutes |
| Passing score | 750 (100-900) | 750 (100-900) |
| Languages | English, Japanese, Portuguese, Spanish, Thai | English |
| Largest domain | Security operations (28%) | Security Operations (27%) |
| Price (US) | US$439 (secondary source) | Not published; assumed the same |
The Security+ checklist, step by step
- Check your starting point. Can you explain TCP/IP, ports, DNS and basic Windows and Linux administration? If not, start with networking basics; our Network+ study guide covers that ground.
- Choose SY0-701 or SY0-801. Use the decision table in the next section. Your choice decides which objectives and materials you use.
- Download the official exam objectives for that version from CompTIA. They are free and list every topic that can appear.
- Map your gaps. Go through every objective and mark it green, amber or red. Study the red items in the heaviest domains first.
- Study with one main resource plus a lab. One complete study guide or video course for your exam version, and a small home lab (a couple of virtual machines) for firewall rules, log review and account hardening, because performance-based questions are hands-on.
- Practise under exam conditions. Take timed sets of up to 90 questions in 90 minutes and review every miss against the objectives.
- Buy the voucher and book. Buy only from CompTIA or a CompTIA partner, then schedule with Pearson VUE. Book a date 2 to 4 weeks out once your practice scores are steady. A fixed date keeps the last stretch of study focused.
- Pass, then plan renewal. Security+ is valid for three years. See our Security+ renewal guide for the options.
SY0-701 or SY0-801: the timing decision
CompTIA is in the middle of a version change. Both exams have up to 90 questions, 90 minutes and a 750 pass mark, and both lead to the same Security+ certification. The differences are the content and the dates:
| Your situation | Our recommendation |
|---|---|
| Already studying for SY0-701 and can test within a few months | Stay on SY0-701. English remains available until June 11, 2027. |
| Need the exam in Japanese, Portuguese, Spanish or Thai | SY0-701 (those languages retire August 13, 2027). CompTIA lists SY0-801 in English only so far. |
| Starting from scratch in November 2026 or later | SY0-801. It will be current for longer, and new study materials will follow its objectives. |
| Plan to test after June 11, 2027 in English | SY0-801. SY0-701 will no longer be available. |
| Want the most material available right now | SY0-701. It has been out since November 2023, so books, labs and question banks are mature. |
The domain weights shift between versions. SY0-801 gives more weight to general security concepts (16% versus 12%) and threats (24% versus 22%), and less to security program management and oversight (14% versus 20%). CompTIA's V8 objectives also include security risks associated with artificial intelligence.
What the exam covers
Both versions have five domains. Spend your study time roughly in line with the weights:
| Domain | SY0-701 weight | SY0-801 weight |
|---|---|---|
| General security concepts | 12% | 16% |
| Threats, vulnerabilities and mitigations (V8: and attacks) | 22% | 24% |
| Security architecture | 18% | 19% |
| Security operations | 28% | 27% |
| Security program management and oversight | 20% | 14% |
On either version, security operations and threats together make up about half the exam. Those are also the domains where performance-based questions tend to feel most practical: reading logs, choosing a response step, or picking the control that stops a described attack. Governance topics such as risk responses, agreements and compliance look easy but are full of similar terms, so make flashcards for them early and review them often.
A sensible order for most people is general concepts first, then threats, architecture and operations, and program management last, with practice questions after each domain.
Booking and exam day
You can take Security+ at a Pearson VUE test centre or online with a remote proctor. Online testing saves travel but has strict rules about your room, desk and webcam, so run the system test well before exam day. A test centre is the safer choice if your internet connection or home is unpredictable.
On the day, answer the multiple-choice questions you are sure of quickly to bank time. If a performance-based question is taking too long, flag it and come back. Your score report shows pass or fail and the result on the 100-900 scale.
How much it costs
CompTIA's store loads prices dynamically, so we could not read the price on an official page. According to CompTIA partner Total Seminars, the US list price rose from US$425 to US$439 per attempt in mid-2026. We assume SY0-801 costs the same, but CompTIA has not published a separate figure. Prices vary by country.
Add the cost of one study resource and, if you choose the CEU route, the US$150 CE fee per three-year renewal cycle. Our Security+ exam cost page breaks this down.
How hard is Security+?
Security+ is an entry-to-intermediate exam. People with a year or two of IT experience usually find the concepts manageable. What makes it hard is:
- Performance-based questions. You may have to configure settings, match controls to scenarios or analyse logs in a simulated environment.
- Scenario wording. Many multiple-choice questions describe a situation and ask for the best control, where two answers look plausible. You need to understand why one fits better.
- Breadth. Five domains run from cryptography and identity to incident response, risk management and compliance.
- Time. Up to 90 questions in 90 minutes leaves about a minute each, and performance-based items take longer.
The pass mark is 750 on a 100-900 scale. CompTIA does not publish pass rates, so we cannot give you one. As a rough guide, people with an IT background often prepare in 6 to 10 weeks of part-time study; career changers usually need longer.
Is Security+ worth it?
For most people moving into security, yes. Reasons we think it earns its cost:
- It is a recognised baseline. CompTIA lists security analyst, security engineer and systems administrator as the job roles it targets.
- Government and contractor roles. CompTIA states that Security+ is approved under the US Department of Defense's DoDM 8140.03 workforce qualification program. If you want DoD-related work, check the specific role's requirements, because approved certifications differ by work role.
- It fits a path. Security+ sits before CySA+, PenTest+ and SecurityX, and earning one of those renews Security+. See our cybersecurity certification roadmap.
It is less useful if you already hold a senior certification such as CISSP, or if your target employers never mention it. It does not replace hands-on skills, and it will not on its own get you a senior job. We do not quote salary figures because we could not find an authoritative source that isolates the effect of Security+.
Start practising
Practice questions are the fastest way to find your gaps. Take our free Security+ practice test before you start studying to see where you stand, then again every couple of weeks. Our guide on the testing effect explains why that works better than rereading.
Not sure whether to take Network+ first? Read our Network+ vs Security+ comparison.