Prep
How the CompTIA certification path works
The CompTIA certification path is a set of tracks rather than a single ladder. You start with a shared core, then move into the track that matches your job: infrastructure, cybersecurity or data. CompTIA describes Tech+, A+, Network+ and Security+ as its foundational certifications, with specialised pathways built on top.
Two rules make the path easier to plan:
- No exam has a formal prerequisite. CompTIA lists recommended experience for each exam, but you can book any of them.
- Higher-level certifications renew lower ones. For example, Security+ fully renews Network+ and A+, and CySA+ fully renews Security+, Network+ and A+. Climbing the path keeps your earlier certifications current.
We checked every exam code and experience recommendation below on comptia.org in November 2026. CompTIA updates exams roughly every three years, so confirm the version before you study.
| Track | Entry | Intermediate | Expert |
|---|---|---|---|
| Core | Tech+, A+ | Network+, Security+ | - |
| Infrastructure | Linux+ | Server+, Cloud+ | CloudNetX |
| Cybersecurity | Security+ | CySA+, PenTest+, SecAI+ | SecurityX |
| Data and analytics | Data+ | DataSys+ | DataAI |
The CompTIA pathway table
| Track | Certification | Current exam | CompTIA's recommended experience |
|---|---|---|---|
| Core | Tech+ | FC0-U71 | No prior experience necessary |
| Core | A+ | 220-1201 and 220-1202 | 12 months hands-on in an IT support specialist role |
| Core | Network+ | N10-009 | A+ plus 9 to 12 months as a junior network administrator or network support technician |
| Core | Security+ | SY0-701; SY0-801 from November 17, 2026 | Two years of hands-on experience as a security administrator (SY0-801); SY0-701 also recommends Network+ |
| Infrastructure | Server+ | SK0-005 | A+ or equivalent, plus two years hands-on in a server environment |
| Infrastructure | Linux+ | XK0-006 | 12 months hands-on with Linux servers; A+, Network+ or Server+ knowledge recommended |
| Infrastructure | Cloud+ | CV0-004 | 2 to 3 years as a systems administrator or cloud engineer |
| Infrastructure | CloudNetX | CNX-001 | At least 10 years in IT, including 5 as a network architect |
| Cybersecurity | CySA+ | CS0-004 | About 4 years as a SOC analyst or vulnerability analyst |
| Cybersecurity | PenTest+ | PT0-003 | 3 to 4 years as a penetration tester, with Network+ and Security+ knowledge |
| Cybersecurity | SecAI+ | CY0-001 | 3 to 4 years in IT and 2+ years hands-on cybersecurity |
| Cybersecurity | SecurityX | CAS-005 | 10 years of hands-on IT, including 5 years hands-on security |
| Data and analytics | Data+ | DA0-002 | 18 to 24 months as a data analyst or similar, with exposure to databases |
| Data and analytics | DataSys+ | DS0-002 | 2 to 3 years as a database administrator |
| Data and analytics | DataAI (formerly DataX) | DY0-001 | 5+ years in data science or a similar role |
| Professional | Project+ | PK0-005 | 6 to 12 months managing projects in a tech environment |
Track names follow CompTIA's career pathway and stackable certification pages. CompTIA's main certifications page now filters by topic (AI, Cloud, Cyber, Data, Digital Skills, Network, Tech Support) rather than showing one fixed chart, so you may see the same certification grouped differently in different places.
Step 1: the core certifications
Almost everyone on the CompTIA path starts here. The core gives you the IT fundamentals that every later exam assumes.
- Tech+ is optional. It is a short exam (up to 70 questions in 60 minutes) for people exploring IT. If you already know you want an IT career, start with A+.
- A+ is two exams, Core 1 and Core 2, each with up to 90 questions in 90 minutes. It is the usual entry point for help desk and IT support roles. See our A+ study guide.
- Network+ has up to 90 questions in 90 minutes and a passing score of 720 on a 100 to 900 scale. It is the bridge to both infrastructure and security.
- Security+ has up to 90 questions in 90 minutes and a passing score of 750. It is the gateway to the cybersecurity track.
Can you skip steps? Yes. If you already work in IT, starting at Network+ or Security+ is common. The order A+ → Network+ → Security+ is a recommendation, not a rule.
Step 2: choose a track
Infrastructure
For system, server, Linux and cloud administrators. Linux+ and Server+ both list A+ (or equivalent knowledge) among their recommendations; Cloud+ suits people with two to three years of admin or cloud work. CloudNetX is the expert-level network architecture exam at the top of this track.
Cybersecurity
For analysts, testers and security engineers. After Security+, choose CySA+ for defensive work or PenTest+ for offensive work. SecurityX is the expert-level, pass/fail exam for senior security engineers and architects. SecAI+ adds security for AI-related work. Our cybersecurity certification roadmap compares this track with ISC2 certifications such as CISSP.
Data and analytics
For analysts and database administrators. Data+ (analytics) and DataSys+ (database administration) are the starting points, and DataAI is aimed at highly experienced data scientists. This track does not depend on Security+, though Network+ knowledge helps if you work with databases.
Professional skills
Project+ covers project management in technology settings and sits outside the technical tracks. If you plan to move into project management beyond that, see our PMP vs CAPM comparison.
Stackable certifications: credit for combinations
CompTIA's stackable certifications show that you have earned a set of related CompTIA certifications. Each one gives a single title for a combination of skills. Examples from CompTIA's stackables page:
| Stackable | Level | Requires |
|---|---|---|
| IT Operations Specialist | Specialist | A+, Network+ |
| Systems Support Specialist | Specialist | A+, Linux+ |
| Secure Infrastructure Specialist | Specialist | A+, Network+, Security+ |
| Cloud Admin Professional | Professional | Network+, Cloud+ |
| Security Analytics Professional | Professional | Security+, CySA+ |
| Network Vulnerability Assessment Professional | Professional | Security+, PenTest+ |
| Security Analytics Expert | Expert | Security+, CySA+, SecurityX |
| Secure Infrastructure Expert | Expert | Security+, CySA+, PenTest+, SecurityX |
Stackables are a useful by-product, but we would not plan your path around them. Choose certifications for the job you want; the stackables follow.
Which CompTIA certification should you take first?
- No IT experience: A+. Add Tech+ first only if you are unsure IT is for you.
- Help desk or desktop support: Network+, then Security+.
- Aiming at security: Security+, with Network+ first if networking is weak.
- Aiming at networking: Network+, or a vendor exam such as CCNA. See CCNA vs Network+.
- Data analyst: Data+.
Whichever you choose, start with the official exam objectives and test yourself early. Our free Security+ practice test and free A+ practice test show where you stand in a few minutes.
Exam version changes to watch in 2026 and 2027
Several exams on the path are changing. Check these dates before you buy study material, because many guides online still cover older versions.
| Certification | What is changing |
|---|---|
| Security+ | SY0-801 (V8) launches November 17, 2026. The English SY0-701 exam retires June 11, 2027. |
| CySA+ | CS0-004 (V4) launched June 23, 2026. The English V3 exam retires December 22, 2026; translations retire March 23, 2027. |
| DataSys+ | DS0-002 (V2) launched October 13, 2026; V1 is retiring. |
| Network+, PenTest+, SecurityX | CompTIA estimates retirement of the current exams in 2027, about three years after launch. |
| A+ | The V15 exams launched March 25, 2025, with retirement estimated for 2028. Both cores must come from the same version. |
When a new version launches, finish any study plan built on the old objectives only if you can test before the retirement date; otherwise switch to the new objectives now. A new version does not cancel your certification. It stays valid for three years from the date you earned it, whichever version you passed.
Keeping your path current
Most CompTIA certifications are valid for three years. You renew by earning continuing education units (CEUs) and paying a CE fee, or with a single activity such as passing the latest version of your exam or earning a higher-level certification. CE fees are paid once per three-year cycle: US$75 for A+ and Data+, US$150 for Network+, Security+, CySA+, PenTest+, SecurityX and most others.
When you renew your highest certification, CompTIA renews the lower ones it covers automatically, so you pay only one fee. Tech+ is different: the standard FC0-U71 version does not expire. For the details on the most common case, read our Security+ renewal guide.