Free study guide

CompTIA Security+ SY0-701 Study Guide

CompTIA Security+ SY0-701

CompTIA Security+ (SY0-701) is a widely recognised first security certification. It covers security concepts, threats and vulnerabilities, security architecture, security operations, and security program management. It suits IT staff moving into security and is asked for in many entry-level security roles.

  • Exam code SY0-701
  • Core level
  • 5 exam domains

This guide is free, with no sign-up. It explains every CompTIA Security+ SY0-701 exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 5chapters
  • 42topics
  • 14diagrams and exhibits
  • 2 h 51 minfast track
Start with General Security Concepts
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth this share of the exam, so spend your study time in proportion. Select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1General Security Concepts7 topics · 29 min fast trackControl types, security basics, change management, encryption, hashing and PKI.
  1. 1Security Control Categories and Types4 min
  2. 2CIA Triad, AAA and Non-repudiation4 min
  3. 3Zero Trust, Physical Security and Deception4 min
  4. 4Change Management and Security Impact4 min
  5. 5Encryption and Key Management5 min
  6. 6Hashing, Signatures and Obfuscation4 min
  7. 7PKI and Digital Certificates4 min
Read the chapter overview →
2Threats, Vulnerabilities, and Mitigations9 topics · 36 min fast trackActors, vectors, weaknesses, attacks, indicators and mitigations.
  1. 1Threat Actors and Motivations4 min
  2. 2Threat Vectors and Attack Surfaces4 min
  3. 3Social Engineering Techniques4 min
  4. 4Application, OS and Web Vulnerabilities4 min
  5. 5Hardware, Cloud, Mobile and Supply Chain Risks4 min
  6. 6Malware and Physical Attacks4 min
  7. 7Network and Password Attacks4 min
  8. 8Application Attacks and Indicators4 min
  9. 9Mitigation and Hardening Techniques4 min
Read the chapter overview →
3Security Architecture6 topics · 26 min fast trackArchitecture models, secure infrastructure, data protection, resilience and recovery.
  1. 1Cloud and Infrastructure Models4 min
  2. 2Specialized Systems and Design Factors4 min
  3. 3Network Design and Security Appliances5 min
  4. 4Firewalls, VPNs and Secure Access5 min
  5. 5Data Protection Strategies4 min
  6. 6Resilience and Recovery Planning4 min
Read the chapter overview →
4Security Operations13 topics · 52 min fast trackHardening, assets, vulnerabilities, monitoring, identity, automation and response.
  1. 1Secure Baselines and Hardening Targets4 min
  2. 2Wireless and Mobile Device Security4 min
  3. 3Application Security Techniques4 min
  4. 4Asset Management and Disposal4 min
  5. 5Vulnerability Management4 min
  6. 6Security Monitoring and Alerting4 min
  7. 7Network Security Capabilities and Protocols4 min
  8. 8Endpoint, Email and Data Security Tools4 min
  9. 9Identity Lifecycle and Federation4 min
  10. 10Access Control Models and Authentication4 min
  11. 11Automation and Orchestration4 min
  12. 12Incident Response Process4 min
  13. 13Digital Forensics and Data Sources4 min
Read the chapter overview →
5Security Program Management and Oversight7 topics · 28 min fast trackGovernance, risk, vendors, compliance, audits and awareness.
  1. 1Governance, Policies and Roles4 min
  2. 2Risk Assessment and Analysis4 min
  3. 3Risk Strategies and Business Impact Analysis4 min
  4. 4Third-Party Risk Management4 min
  5. 5Compliance and Privacy4 min
  6. 6Audits, Assessments and Penetration Testing4 min
  7. 7Security Awareness Programs4 min
Read the chapter overview →

Ready for more practice?

The full CompTIA Security+ SY0-701 question bank has 848 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.