CompTIA Security+ (V7 / SY0-701) Exam Guide 2026: Domains, Format, and How to Prepare

What the CompTIA Security+ (V7 / SY0-701) exam covers

The CompTIA Security+ (V7 / SY0-701) exam is organized into five domains, each carrying a specific, fixed weight toward the final score. These weightings are set by CompTIA and reflect how much exam content comes from each area.

• General security concepts — 12% Foundational terminology and concepts: security controls, fundamental security principles (confidentiality, integrity, availability), change management processes, and cryptographic basics.

• Threats, vulnerabilities, and mitigations — 22% The second-largest domain. Covers threat actors and motivations, attack surfaces, common attack types (malware, social engineering, application attacks), vulnerability types, and the mitigation techniques used to address them.

• Security architecture — 18% Focuses on architecture and design: security implications of different architecture models (cloud, on-premises, hybrid), securing enterprise infrastructure, data protection strategies, and resilience/recovery concepts.

• Security operations — 28% The single heaviest-weighted domain. Covers day-to-day operational tasks: applying security techniques to computing resources, security implications of hardware/software/data asset management, vulnerability management, alerting and monitoring, incident response, and identity and access management.

• Security program management and oversight — 20% Covers governance, risk management, third-party risk, compliance, audits and assessments, and security awareness practices.

Together these five domains total 100% of the exam. Every question maps back to one of them, so understanding the relative weight of each is a useful guide for allocating study time.

How the exam is scored

CompTIA Security+ (V7 / SY0-701) uses a scaled cutoff scoring model. Candidates' raw performance across the exam is converted to a scaled score, and a candidate passes if their scaled score meets or exceeds the cutoff of 750.

A few practical implications of this model:

• Not all questions necessarily carry identical weight in every exam form, since scaled scoring is designed to make different exam versions comparable.
• There is a single pass/fail threshold (750) — there's no separate minimum required per domain, but because the domains are weighted so differently, doing well on the heavier domains (like Security operations at 28%) has a larger impact on your overall scaled score than the lighter ones.
• CompTIA does not publish a simple "percentage of questions correct" equivalent for this cutoff, so candidates should treat 750 as the target scaled score rather than trying to reverse-engineer a raw percentage.

For authoritative, up-to-date details on scoring methodology, exam format, and any changes over time, consult CompTIA's official certification page: https://www.comptia.org/en-us/certifications/security/

How much to study

There is no single official study-hour requirement, and any number quoted here should be treated as a reasoned estimate, not a fact. That said, the domain structure gives a useful way to plan:

• With five domains and a top weight of 28% (Security operations) versus a low weight of 12% (General security concepts), study time should scale roughly with weight rather than being split evenly five ways.
• A common approach for candidates with some IT/security background is to budget somewhere in the range of 40–80 total hours of focused study and practice, spread over several weeks, with proportionally more time on Security operations (28%) and Threats, vulnerabilities, and mitigations (22%) than on General security concepts (12%).
• Candidates newer to security concepts generally need more time on the foundational General security concepts domain first, since later domains (especially Security architecture and Security operations) build on that vocabulary.
• Regardless of total hours, most candidates benefit from finishing with a dedicated review pass across all five domains plus practice questions, since the exam draws from all of them.

Because pricing, registration windows, and exact exam logistics change over time, candidates should confirm current details directly on CompTIA's official page: https://www.comptia.org/en-us/certifications/security/

How to prepare

Given the uneven domain weighting, preparation strategy should be deliberate rather than uniform:

• Prioritize Security operations (28%) and Threats, vulnerabilities, and mitigations (22%) first. Together these two domains make up exactly half the exam. Weakness here has an outsized effect on your scaled score relative to the cutoff of 750.
• Don't neglect General security concepts (12%) despite its low weight. It's the smallest domain, but it establishes terminology (controls, CIA triad, cryptographic basics) that reappears throughout Security architecture and Security operations questions. A shaky foundation here can cost points in domains worth far more.
• Treat Security architecture (18%) and Security program management and oversight (20%) as a connected pair. Architecture decisions (cloud, hybrid, on-premises) and governance/risk/compliance concepts often intersect in scenario-based questions, so studying them together can reinforce both.
• Use domain weight to pace your practice sessions. For example, if you run 100 practice questions, roughly 28 should relate to Security operations and 22 to Threats, vulnerabilities, and mitigations, mirroring the real exam's emphasis rather than spending equal time on all five.
• Practice with questions that test application, not just recall. Security+ scenario questions typically ask you to apply a concept to a situation. CandiCerts practice questions are written independently from the public exam blueprint, not sourced from the certification body's proprietary exam content — useful for reinforcing domain concepts and identifying weak areas before exam day.
• Finish with a full-domain review pass. Since the scaled cutoff of 750 reflects performance across the whole exam, a final review that touches all five domains — even briefly on the lighter-weighted ones — helps avoid easily preventable losses on smaller domains.

For the most current exam objectives, official practice resources, and registration information, refer to CompTIA's official certification page: https://www.comptia.org/en-us/certifications/security/