SY0-701 Available
CompTIA Security+ quest path
Security concepts, identity, architecture, operations, threats, and incident response practice.
Knowledge map
Practice by objective
Reviewed 2026-09-08. Topic labels summarize the linked study material; objective numbers identify the exam scope.
1.0 General Security Concepts4 objectives33 questions
Control Function And Zero Trust Decisions; Risk Management
Risk Management; Control Function And Zero Trust Decisions; Identity and Account Management; Securing The Basic LAN
Securing Individual Systems; Business Security Impact; Cryptographic Lifecycle And Change Evidence
Foundations of Cryptography; Cryptographic Lifecycle And Change Evidence; Data Stewardship And Sanitization; Secure Protocols and Applications
2.0 Threats, Vulnerabilities, and Mitigations5 objectives60 questions
Risk Management
Securing Individual Systems; Securing Dedicated and Mobile Systems; Secure Protocols and Applications; Application And Email Validation; Testing Infrastructure; Threat Evidence And Bounded Conclusions
Cryptographic Lifecycle And Change Evidence; Foundations of Cryptography; Threat Evidence And Bounded Conclusions; Securing Virtual and Cloud Environments; Securing Dedicated and Mobile Systems; Application And Email Validation
Physical Security; Phishing Resistant Authentication And Recovery; Threat Evidence And Bounded Conclusions; Securing Individual Systems; Securing The Basic LAN; Securing Wireless LANs; Securing Virtual and Cloud Environments; Secure Protocols and Applications
Physical Security; Phishing Resistant Authentication And Recovery; Tools of the Trade; Protocol And Port Awareness; Containment And Control Tradeoffs
3.0 Security Architecture4 objectives50 questions
Securing The Basic LAN; Securing Virtual and Cloud Environments; Architecture Failure Domains And Data Protection
Physical Security; Securing The Basic LAN; Containment And Control Tradeoffs; Securing Wireless LANs; Secure Protocols and Applications; Architecture Failure Domains And Data Protection
Data Stewardship And Sanitization; Tools of the Trade; Securing Individual Systems; Securing Dedicated and Mobile Systems; Architecture Failure Domains And Data Protection
Physical Security; Securing Individual Systems; Securing The Basic LAN; Architecture Failure Domains And Data Protection; Securing Virtual and Cloud Environments; Recovery Objectives And Immutable Copy Limits
4.0 Security Operations9 objectives77 questions
Foundations of Cryptography; Server Hardening Basics; Protocol And Port Awareness; Tools of the Trade; Securing Individual Systems; Wireless Identity And Platform Limits; Securing Wireless LANs; Securing Dedicated and Mobile Systems; Application And Email Validation
Data Stewardship And Sanitization; Securing Virtual and Cloud Environments; Securing Dedicated and Mobile Systems
Securing Virtual and Cloud Environments; Securing Dedicated and Mobile Systems; Application And Email Validation; Testing Infrastructure; Vulnerability Evidence And Prioritization
Risk Management; Cryptographic Lifecycle And Change Evidence; Physical Security; Tools of the Trade; Evidence Correlation And Time Normalization; Vulnerability Evidence And Prioritization; Containment And Control Tradeoffs; Securing The Basic LAN
Application And Email Validation; Secure Protocols and Applications
Identity and Account Management; Federation And Token Validation; Authentication Sessions And Revocation; Securing Dedicated and Mobile Systems; Phishing Resistant Authentication And Recovery
Tools of the Trade; Business Security Impact; Automation Guardrails And Validation
Containment And Control Tradeoffs; Securing Virtual and Cloud Environments; Dealing with Incidents; Awareness Outcomes And Response Improvement
Physical Security; Evidence Correlation And Time Normalization; Awareness Outcomes And Response Improvement
5.0 Security Program Management and Oversight6 objectives55 questions
Data Stewardship And Sanitization; Risk Management; Authentication Sessions And Revocation; Identity and Account Management; Phishing Resistant Authentication And Recovery; Risk And Governance Terms; Securing The Basic LAN; Securing Wireless LANs; Governance Assurance And Privacy Evidence; Business Security Impact; Awareness Outcomes And Response Improvement; Dealing with Incidents
Risk Management; Cryptographic Lifecycle And Change Evidence; Business Security Impact; Recovery Objectives And Immutable Copy Limits; Risk Calculations And Metric Denominators
Secure Protocols and Applications; Governance Assurance And Privacy Evidence; Dealing with Incidents
Risk Management; Securing Dedicated and Mobile Systems; Governance Assurance And Privacy Evidence; Awareness Outcomes And Response Improvement
Securing Individual Systems; Governance Assurance And Privacy Evidence; Testing Infrastructure
Securing Wireless LANs; Awareness Outcomes And Response Improvement