What this level does
Before you study any security content, you need to know the test you are preparing for. This level gives you the fixed facts about the CompTIA Security+ (SY0-701) exam, the two question formats, and the rules this course follows.
Two plain statements first:
- This course is independent. It is not affiliated with, authorized by, or endorsed by CompTIA.
- This course cannot guarantee a pass. It gives you structured coverage and practice; the result depends on your preparation.
Task 1: Memorize the exam facts
Write these on one card and keep it visible.
| Fact | Value |
|---|---|
| Exam code | SY0-701 |
| Number of questions | Maximum of 90 |
| Length of test | 90 minutes |
| Types of questions | Multiple-choice and performance-based |
| Passing score | 750 on a scale of 100-900 |
| English exam retires | 11 June 2027 |
Points to note:
- "Maximum of 90" is a ceiling. Your exam may contain fewer questions. Do not plan around exactly 90.
- The time budget is tight. 90 minutes for up to 90 questions averages about one minute per question, and some questions take much longer than that.
- 750 is a scaled score, not a percentage. The scale runs from 100 to 900. Do not convert 750 into "83% correct"; CompTIA does not publish a conversion to a number of correct answers.
- The retirement date is a deadline. If you plan to sit the English SY0-701 exam, sit it on or before 11 June 2027. After that date, this version is no longer offered in English.
Do now: Decide a target exam date before 11 June 2027 and write it down.
Task 2: Learn the five domains and their weights
CompTIA's exam objectives document (version 5.0) divides the exam into five domains. Each weight is the share of the examination that domain represents.
| Domain | Weight |
|---|---|
| 1.0 General Security Concepts | 12% |
| 2.0 Threats, Vulnerabilities, and Mitigations | 22% |
| 3.0 Security Architecture | 18% |
| 4.0 Security Operations | 28% |
| 5.0 Security Program Management and Oversight | 20% |
| Total | 100% |
How to use the weights:
- Largest: 4.0 Security Operations (28%). It gets the most study time.
- Smallest: 1.0 General Security Concepts (12%). It is still essential, because its vocabulary is used in every other domain.
- Combined: Domains 2.0 and 4.0 together make up 50% of the exam.
This course follows the same proportions. The five domains contain 28 objectives, and the course covers every one, with more levels given to heavier domains.
One caution from CompTIA's own document: the bulleted examples under each objective are not exhaustive lists. Related technologies, processes, or tasks may appear on the exam even if they are not listed. Study to understand each concept, not to memorize a list.
Do now: Recite the five domain names and weights in order without looking.
Task 3: Tell the two question formats apart
Multiple-choice questions give you a question, often a short scenario, and a set of answer options. You select the correct option, or the stated number of options.
Performance-based questions (PBQs) ask you to perform a task instead of selecting from a list. CompTIA describes them as items designed to test your ability to solve problems in real-world settings. On Security+ they are delivered as simulations: an approximation of an environment or tool, such as a firewall, a network diagram, or a terminal window, with restricted functionality.
| Multiple-choice | Performance-based | |
|---|---|---|
| What you do | Select the best option | Complete a task in a simulated tool |
| What it tests | Whether you know and can apply a concept | Whether you can carry out the work |
| Typical time | About a minute | Several minutes |
An analogy: multiple-choice is the written driving theory test; a PBQ is a short drive in a simulator.
Two practical points about simulation PBQs, from CompTIA's guidance:
- You can skip a simulation PBQ and return to it later.
- Partial credit may be given, so complete every part you can.
Do now: Plan your time. If a PBQ is consuming too much time, move on, answer the multiple-choice questions, then return.
Task 4: Apply a method to "best answer" scenario questions
Many multiple-choice questions describe a situation and ask for the BEST, MOST, or FIRST action. Several options may be technically true. Only one fits the scenario best.
Use these steps in order:
- Read the final sentence first. It states what is being asked.
- Find the qualifier. Words such as BEST, MOST, FIRST, or LEAST change the answer.
- Identify the constraints in the scenario. Examples: limited budget, a legacy system, a need to avoid downtime.
- Eliminate options that are wrong or ignore a constraint.
- Compare the remaining options against the qualifier and choose the one that answers the exact question asked.
Example of the reasoning: a question asks what a technician should do FIRST. One option is a good action that belongs at the end of the process. It is a true statement about security, and it is still the wrong answer, because the qualifier is FIRST.
Task 5: Understand the rules on study materials
CompTIA's objectives document states that it does not authorize, endorse, or condone content from unauthorized third-party training sites, also known as "brain dumps". A brain dump is a collection of exam questions taken from the live exam and shared.
The stated consequence: individuals who use such materials to prepare will have their certifications revoked and be suspended from future testing, under the CompTIA Candidate Agreement.
What this means for you:
- Every practice item in this course is original, written to practise the reasoning the objectives require. None is a real exam question, and none should be treated as a preview of one.
- If you are unsure whether a study material is unauthorized, CompTIA directs candidates to contact examsecurity@comptia.org.
- Avoid any source that claims to offer "actual" or "real" exam questions.
Task 6: Check your readiness against the recommended experience
The objectives document recommends:
- A minimum of 2 years of experience in IT administration with a focus on security
- Hands-on experience with technical information security
- Broad knowledge of security concepts
CompTIA's certification page words it as CompTIA Network+ and two years working in a security/systems administrator job role.
This is recommended experience. It is not a requirement to register. It tells you the level the questions assume.
Do now: Rate yourself honestly on each of the three points. If you know IT and networking but are new to security, expect to need more study time and more hands-on practice. This course explains every term from first principles for that reason.
What the exam asks about this
The exam does not test you on its own format. This level matters because it shapes how you study and how you sit the test:
- Weights tell you where the marks are.
- The time limit and PBQs require a pacing plan.
- Scenario questions reward careful reading of the qualifier.
Key takeaways
- SY0-701: maximum of 90 questions, 90 minutes, multiple-choice and performance-based.
- Passing score: 750 on a 100-900 scale. It is a scaled score, not a percentage.
- The English exam retires on 11 June 2027.
- Domain weights: 12%, 22%, 18%, 28%, 20%. Security Operations is the largest.
- PBQs test doing; multiple-choice tests selecting. Simulation PBQs can be skipped and revisited.
- For "best answer" items: read the question, find the qualifier, apply constraints, eliminate, compare.
- Brain dumps can lead to revoked certifications and suspension from testing.
- This course is independent of CompTIA, uses original practice items only, and promises no pass.