Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by CompTIA
Exam Format
90 min
Maximum of 90
750
Entry-Level to Intermediate
Registration
$392 USD
Pearson VUE or online proctoring
English, Japanese, Portuguese, Spanish +1 more
Validity
3 years
Earn 50 Continuing Education Units (CEUs) within 3 years; Pass a higher-level CompTIA certification (e.g., CySA+, PenTest+, CASP+); Complete CompTIA CertMaster CE
SY0-701 Exam Topics and Domains
SY0-701 is organized into 5 weighted domains.
1
General Security Concepts
12%
Compare and contrast various types of security controls
Security Control CategoriesControl Types
Summarize fundamental security concepts
CIA TriadAAA FrameworkZero Trust ArchitecturePhysical SecurityDeception and Disruption Technology
Explain the importance of change management processes and the impact to security
Business ProcessesTechnical ImplicationsDocumentation and Version Control
Explain the importance of using appropriate cryptographic solutions
Public Key Infrastructure (PKI)Encryption MethodsCryptographic ToolsData ObfuscationHashing and Digital SignaturesBlockchain and Ledger
2
Threats, Vulnerabilities, and Mitigations
22%
Compare and contrast common threat actors and motivations
Threat Actor TypesActor AttributesMotivations
Explain common threat vectors and attack surfaces
Message-Based VectorsVoice and Physical VectorsSoftware VulnerabilitiesNetwork VectorsSupply Chain VectorsHuman Vectors/Social Engineering
Explain various types of vulnerabilities
Application VulnerabilitiesWeb-Based VulnerabilitiesOperating System VulnerabilitiesHardware VulnerabilitiesVirtualization and Cloud VulnerabilitiesMobile and Supply Chain Vulnerabilities
Given a scenario, analyze indicators of malicious activity
Malware AttacksNetwork AttacksApplication AttacksCryptographic AttacksPassword AttacksPhysical AttacksAttack Indicators
Explain the purpose of mitigation techniques used to secure the enterprise
Network Segmentation and Access ControlSystem HardeningOperational Mitigations
3
Security Architecture
18%
Compare and contrast security implications of different architecture models
Cloud ArchitectureInfrastructure ModelsNetwork InfrastructureSpecialized SystemsArchitecture Considerations
Given a scenario, apply security principles to secure enterprise infrastructure
Infrastructure ConsiderationsNetwork AppliancesPort SecurityFirewall TypesSecure Communication/Access
Compare and contrast concepts and strategies to protect data
Data Types and ClassificationsData States and ConsiderationsMethods to Secure Data
Explain the importance of resilience and recovery in security architecture
High AvailabilitySite ConsiderationsContinuity and Capacity PlanningTestingBackups and RecoveryPower
4
Security Operations
28%
Given a scenario, apply common security techniques to computing resources
Secure BaselinesHardening TargetsMobile SolutionsWireless Security SettingsApplication Security
Explain the security implications of proper hardware, software, and data asset management
Acquisition/ProcurementAssignment/AccountingDisposal/Decommissioning
Explain various activities associated with vulnerability management
Identification MethodsAnalysisResponse and RemediationValidation and Reporting
Explain security alerting and monitoring concepts and tools
Monitoring Computing ResourcesMonitoring ActivitiesMonitoring Tools
Given a scenario, modify enterprise capabilities to enhance security
Firewall ConfigurationIDS/IPS ManagementWeb FilteringOperating System SecuritySecure ProtocolsEmail SecurityAdvanced Security Capabilities
Given a scenario, implement and maintain identity and access management
User Account ManagementFederation and SSOAccess Control ModelsMultifactor AuthenticationPassword ConceptsPrivileged Access Management
Explain the importance of automation and orchestration related to secure operations
Use CasesBenefitsConsiderations
Explain appropriate incident response activities
Incident Response ProcessTraining and TestingInvestigation ActivitiesDigital Forensics
Given a scenario, use data sources to support an investigation
Log DataOther Data Sources
5
Security Program Management and Oversight
20%
Summarize elements of effective security governance
Guidelines and PoliciesStandards and ProceduresExternal ConsiderationsGovernance StructuresRoles and Responsibilities
Explain elements of the risk management process
Risk Identification and AssessmentRisk AnalysisRisk RegisterRisk Tolerance and AppetiteRisk Management StrategiesRisk Reporting and BIA
Explain the processes associated with third-party risk assessment and management
Vendor AssessmentVendor SelectionAgreement TypesVendor Monitoring
Summarize elements of effective security compliance
Compliance ReportingConsequences of Non-ComplianceCompliance MonitoringPrivacy
Explain types and purposes of audits and assessments
AttestationInternal AuditsExternal AuditsPenetration Testing
Given a scenario, implement security awareness practices
Phishing AwarenessAnomalous Behavior RecognitionUser Guidance and TrainingReporting and MonitoringProgram Development and Execution
How do I earn this certification?
Passing SY0-701 earns the CompTIA Security+ certification. It sits in the Cybersecurity track.
Next Level Options
- CS0-003 - CompTIA CySA+ (Cybersecurity Analyst)For cyber professionals focused on incident detection, prevention, and response
- PT0-003 - CompTIA PenTest+ (Penetration Testing)For penetration testers and ethical hackers
- CAS-005 - CompTIA SecurityX (formerly CASP+)For security architects and senior security engineers
Alternative Paths
- XK0-005 - CompTIA Linux+Complementary Linux security and administration skills
- SK0-005 - CompTIA Server+Server hardening and security administration
- CV0-004 - CompTIA Cloud+Cloud security and hybrid environment skills
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for SY0-701.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023-11-07
- Announcement date: 2023-07-01
Who should take this exam?
This exam is typically taken by Security Administrator and Security Specialist/Technician.
- CompTIA Network+ or equivalent knowledge
- Minimum of 2 years of experience in IT administration with a focus on security
- Hands-on experience with technical information security
- Broad knowledge of security concepts