CompTIA Security+ Practice Exam & Full Question Bank
Practice CompTIA Security+ (SY0-701) questions across all 5 official blueprint domains. Test your knowledge under timed 90-minute Pearson VUE conditions with real-time scoring at the 750 / 900 scaled benchmark, or drill individual domains with step-by-step distractor autopsies and primary NIST/ISO references.
Select Your Practice Mode
Prepare with 90 authentic, scenario-based questions matching the official CompTIA Security+ (SY0-701) blueprint. Features strict 90-minute timing, realistic 750/900 passing threshold, full 4-option distractor autopsies, and primary NIST/OWASP/RFC cybersecurity standards sourcing.
Full 90-Question Mock Exam
Pearson VUE BenchmarkSimulates the full certification exam with 90 timed scenario questions proportioned exactly to the 5 blueprint domains.
- ⏱️ 90 Minutes Timer
- 🎯 750 / 900 Passing Score Threshold
- 📊 Domain 1: 11 Qs | Domain 2: 20 Qs | Domain 3: 16 Qs | Domain 4: 25 Qs | Domain 5: 18 Qs
25-Question Quick Diagnostic
DiagnosticA fast, targeted assessment across all 5 domains to identify weak areas before committing to a full 90-question test.
- ⏱️ 25 Minutes Timer
- 🎯 Proportional 5-domain sample (3 / 6 / 4 / 7 / 5)
- 🔍 Immediate domain readiness scorecard
CompTIA Security+ (SY0-701) 5-Domain Structure
The 90 questions on the Security+ exam map proportionally to 5 core domains:
General Security Concepts
Core cybersecurity principles including the CIA triad, non-repudiation, AAA framework, zero trust architecture, security control categories (managerial, operational, technical) and types (preventative, detective, corrective, compensating), change management governance, and cryptographic foundations (symmetric vs. asymmetric encryption, hashing, digital signatures, PKI certificates, key lifecycle management).
- Security Control Categories & Types
- Fundamental Concepts (CIA, Non-Repudiation, AAA, Zero Trust)
- Change Management & Secure Configuration
Threats, Vulnerabilities, and Mitigations
Comprehensive analysis of threat actor types (APTs, hacktivists, script kiddies, insider threats, state-sponsored actors), threat vectors and attack surfaces, vulnerability classifications (zero-day, misconfigurations, injection flaws, memory buffer overflows, cryptographic weaknesses), indicators of compromise (malware, ransomware, beaconing, lateral movement), and defense-in-depth mitigation strategies.
- Threat Actor Motivations & Attack Vectors
- Security Vulnerabilities (OWASP Top 10, Hardware, Supply Chain)
- Malware Classifications & Malicious Activity Indicators
Security Architecture
Enterprise security architecture models across cloud (IaaS/PaaS/SaaS), on-premises, and hybrid environments. Network segmentation and secure topology design (VLANs, DMZ, air gaps, zero trust microsegmentation), perimeter security appliances (next-gen firewalls, IDS/IPS, WAF, proxies, load balancers), data protection solutions (DLP, tokenization, masking, retention), and system resilience (high availability, fault tolerance, RAID, DR sites).
- Enterprise Architecture Models & Cloud Deployments
- Secure Network Infrastructure & Segmentation
- Data Protection Strategies (DLP, Masking, Encryption)
Security Operations
Practical execution of day-to-day security operations: systems and endpoint hardening (OS baselines, mobile MDM, IoT/embedded security), robust Identity and Access Management (IAM/PAM, MFA factors, federation via SAML/OAuth/OIDC), vulnerability scanning and CVSS vulnerability prioritization, telemetry monitoring (SIEM, SOAR, EDR/XDR, log parsing), and structured incident response procedures (preparation through lessons learned).
- System Baseline Hardening & Endpoint Security
- Identity & Access Management (IAM, MFA, Federation, PAM)
- Vulnerability Management & CVSS Prioritization
Security Program Management and Oversight
Enterprise cybersecurity governance frameworks (NIST CSF 2.0, ISO/IEC 27001, CIS Controls), regulatory compliance standards (HIPAA, PCI-DSS, GDPR, SOX), qualitative and quantitative risk analysis (SLE, ARO, ALE calculation, risk register, risk appetite, risk treatment options), third-party vendor supply chain risk management (SLAs, MOUs, SOC reports), and continuous security auditing and employee awareness training.
- Cybersecurity Governance & Compliance Frameworks
- Quantitative & Qualitative Risk Management
- Third-Party Vendor & Supply Chain Governance
Master SY0-701 with All Learning Tools
Combine our timed simulator with the 20-lesson modular curriculum, high-yield cram cheat sheet, and 6-week structured study schedule.
Frequently Asked Questions: CompTIA Security+ Examination
What is the format, duration, and passing score of the CompTIA Security+ (SY0-701) exam?
The CompTIA Security+ (SY0-701) examination consists of a maximum of 90 multiple-choice and performance-based questions (PBQs) administered over 90 minutes. The passing score is 750 on a scale of 100 to 900 (approximately 83.3% raw accuracy).
How is the SY0-701 exam weighted across CompTIA's 5 blueprint domains?
The exam is proportioned strictly across 5 domains: Domain 1.0 General Security Concepts (12%, ~11 Qs); Domain 2.0 Threats, Vulnerabilities, and Mitigations (22%, ~20 Qs); Domain 3.0 Security Architecture (18%, ~16 Qs); Domain 4.0 Security Operations (28%, ~25 Qs); and Domain 5.0 Security Program Management and Oversight (20%, ~18 Qs).
What are the main changes between SY0-601 and SY0-701?
SY0-701 streamlines content from 35 to 28 exam objectives, cutting legacy cryptography and obsolete forensics tools while deeply expanding Zero Trust architecture (ZTA), cloud-native security, AI/ML security considerations, automation/SOAR runbooks, and supply chain third-party risk management.
What functional control types are tested on the Security+ exam?
CompTIA tests 5 primary functional types: Preventative (blocks before occurrence, e.g., IPS, biometric locks), Detective (identifies during/after, e.g., SIEM, CCTV), Corrective (remediates damage, e.g., backup restore), Compensating (alternative workaround when primary is unfeasible), and Deterrent (discourages violation, e.g., warning banners).
What is the passing score and how is it scored?
The exam is scored on a scaled range from 100 to 900. Candidates must achieve at least 750/900 to pass. All questions are scored deterministically by Pearson VUE.