CompTIA Security+ (SY0-701) Exam Questions *2024*

Test Details

Required Exam: SY0-701

Number of Questions: Up to 90

Question Types: Multiple-choice and performance-based

Test Duration: 90 minutes

Recommended Experience: At least 2 years of IT administration experience with a focus on security, including hands-on experience with technical information security and a broad understanding of security concepts

Exam Objectives (Domains)

Domain Percentage of Examination

1.0 General Security Concepts 12%

2.0 Threats, Vulnerabilities, and Mitigations 22%

3.0 Security Architecture 18%

4.0 Security Operations 28%

5.0 Security Program Management and Oversight20%

Total 100%

1.0 General Security Concepts

1.1 Compare and contrast various types of security controls.

1.2 Summarize fundamental security concepts.

1.3 Explain the importance of change management processes and the impact to security.

1.4 Explain the importance of using appropriate cryptographic solutions.

2.0 Threats, Vulnerabilities, and Mitigations

2.1 Compare and contrast common threat actors and motivations.

2.2 Explain common threat vectors and attack surfaces.

2.3 Explain various types of vulnerabilities

2.4 Given a scenario, analyze indicators of malicious activity

2.5 Explain the purpose of mitigation techniques used to secure the enterprise.

3.0 Security Architecture

3.1 Compare and contrast security implications of different architecture models

3.2 Given a scenario, apply security principles to secure enterprise infrastructure.

3.3 Compare and contrast concepts and strategies to protect data.

3.4 Explain the importance of resilience and recovery in security architecture.

4.0 Security Operations

4.1 Given a scenario, apply common security techniques to computing resources.

4.2 Explain the security implications of proper hardware, software, and data asset management.

4.3 Explain various activities associated with vulnerability management.

4.4 Explain security alerting and monitoring concepts and tools.

4.5 Given a scenario, modify enterprise capabilities to enhance security.

4.6 Given a scenario, implement and maintain identity and access management.

4.7 Explain the importance of automation and orchestration related to secure operations

4.8 Explain appropriate incident response activities

4.9 Given a scenario, use data sources to support an investigation

5.0 Security Program Management and Oversight

5.1 Summarize elements of effective security governance.

5.2 Explain elements of the risk management process.

5.3 Explain the processes associated with third-party risk assessment and management.

5.4 Summarize elements of effective security compliance

5.5 Explain types and purposes of audits and assessments.

5.6 Given a scenario, implement security awareness practices