Free study guide

CompTIA Security+ SY0-801 Study Guide

CompTIA Security+ SY0-801

CompTIA Security+ (SY0-801) is the V8 version of CompTIA's widely recognized first security certification, launching on or around November 17, 2026. It covers security concepts, threats, vulnerabilities and attacks, including new content on the risks of AI usage, security architecture, security operations, and security program management. It suits IT staff moving into security.

  • Exam code SY0-801
  • Core level
  • 5 exam domains

This guide is free, with no sign-up. It explains every CompTIA Security+ SY0-801 exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 5chapters
  • 45topics
  • 13diagrams and exhibits
  • 3 h 44 minfast track
Start with General Security Concepts
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth this share of the exam, so spend your study time in proportion. Select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1General Security Concepts7 topics · 35 min fast trackCIA, Zero Trust, control types, change management, PKI, encryption and hashing.
  1. 1CIA Triad, AAA and Non-repudiation4 min
  2. 2Defense in Depth, Zero Trust and Least Privilege5 min
  3. 3Security Control Categories and Types5 min
  4. 4Change Management and Security Impact5 min
  5. 5PKI and Digital Certificates6 min
  6. 6Encryption and Key Management5 min
  7. 7Hashing, Signatures and Obfuscation5 min
Read the chapter overview →
2Threats, Vulnerabilities, and Attacks10 topics · 49 min fast trackActors, vectors, weaknesses, attacks, indicators and AI threats.
  1. 1Characteristics of Threats and Vulnerabilities5 min
  2. 2Threat Actors and Motivations5 min
  3. 3Message, File, Browser and Network Vectors5 min
  4. 4Endpoint, Supply Chain, Human and Physical Vectors5 min
  5. 5System and Software Vulnerabilities5 min
  6. 6Attack Surfaces and Exposures5 min
  7. 7Malware Attacks and Indicators of Compromise5 min
  8. 8Social Engineering and Physical Attacks4 min
  9. 9Network, Application and Credential Attacks5 min
  10. 10Threats and Vulnerabilities of AI Usage5 min
Read the chapter overview →
3Security Architecture7 topics · 37 min fast trackArchitecture models, infrastructure, Zero Trust, data protection and resilience.
  1. 1Cloud and Infrastructure Models6 min
  2. 2Technical and Business Design Considerations5 min
  3. 3Secure Infrastructure Design and Zero Trust6 min
  4. 4Secure Communication, Access and Identity5 min
  5. 5Data Types, States and Protection Methods5 min
  6. 6Data Roles, Handling, Life Cycle and Compliance5 min
  7. 7Resilience and Recovery Planning5 min
Read the chapter overview →
4Security Operations14 topics · 1 h 10 min fast trackMitigations, assets, vulnerabilities, monitoring, identity, automation and response.
  1. 1Mitigation and Hardening Techniques5 min
  2. 2Sandboxing and Deception Technology5 min
  3. 3Intrusion Prevention, Firewalls and Content Filters5 min
  4. 4Endpoint, Access and Email Security5 min
  5. 5Application and Repository Security5 min
  6. 6Asset Management Life Cycle5 min
  7. 7Vulnerability Management Tasks5 min
  8. 8Security Monitoring and Alerting5 min
  9. 9Monitoring Tools and Protocols5 min
  10. 10Identity Lifecycle, Federation and Account Types5 min
  11. 11Access Control Models, MFA and Passwords5 min
  12. 12Automation, Orchestration and AI in SecOps5 min
  13. 13Incident Response Activities5 min
  14. 14Investigation Data, Artifacts and Sources5 min
Read the chapter overview →
5Security Program Management and Oversight7 topics · 33 min fast trackGRC artifacts, risk, vendors, compliance, audits and awareness.
  1. 1Governance Policies, Standards and Procedures5 min
  2. 2Risk Assessment and Analysis4 min
  3. 3Risk Treatment and Business Impact5 min
  4. 4Third-Party Risk Management5 min
  5. 5Compliance and Privacy5 min
  6. 6Audits, Assessments and Penetration Testing5 min
  7. 7Security Awareness Programs4 min
Read the chapter overview →

Ready for more practice?

The full CompTIA Security+ SY0-801 question bank has 998 questions, with timed practice exams and an explanation for every answer.

Get Full AccessTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.