What Are CompTIA Security+ Objectives?

The CompTIA Security+ syllabus and exam focus on the core cybersecurity skills required for security and network administrator roles. Security work experience is beneficial but will only partially prepare candidates for exam questions.

What is CompTIA Security+ certification?

CompTIA is a nonprofit global trade organization and the world’s largest vendor-neutral IT exam developer. Their portfolio includes the CompTIA Security+ certification designed for entry-level cybersecurity professionals. CompTIA Security+ certification is valid for three years. While specific training is not required to quality for taking the certification exam, it is highly recommended that candidates identify an authorized resource for exam prep training that aligns to the most current CompTIA Security+ syllabus.

What does the CompTIA Security+ certification show employers and management?

The CompTIA Security+ exam is designed to verify your knowledge of how "...to install and configure systems to secure applications, networks, and devices; perform threat analysis and respond with appropriate mitigation techniques; participate in risk mitigation activities; and operate with an awareness of applicable policies, laws, and regulations." The CompTIA certification is a highly respected achievement for IT professionals.

What are the components of the CompTIA Security+ Exam for certification?

CompTIA Security+ Certification Exam Objectives Version 3.0 (Exam Number: SY0-601) states:

• Required title: CompTIA Security+ SY0-601
• Number of exam questions: maximum of 90
• Types of exam questions: multiple choice and performance-based
• Length of CompTIA Security+ exam: 90 minutes
• Recommended experience: At least two years of experience in IT administration with a focus on security
• Passing CompTIA Security+ exam score: 750 (on a scale of 100–900)

---

---

CompTIA Security+ Certification Exam Topics

Talk with your management about supporting your efforts to earn the CompTIA Security+ certification, as it is designed to verify your knowledge of how to "...assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; monitor and secure hybrid environments, including cloud, mobile, and IoT; operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; and identify, analyze, and respond to security events and incidents." For some roles or role advancement, CompTIA Security+ certification is a requirement.

The CompTIA Security+ certification exam includes the following domains:

1. Attacks, Threats, and Vulnerabilities
2. Architecture and Design
3. Implementation
4. Operations and Incident Response
5. Governance, Risk, and Compliance

CompTIA Security+ Certification Exam Objectives (Domains) and Weight

The CompTIA Security+ exam questions are designed to assess your knowledge of the following domains and topics:

1.0 Attacks, Threats, and Vulnerabilities | 24%

Topics:

1.1 Compare and contrast different types of social engineering techniques.

1.2 Given a scenario, analyze potential indicators to determine the type of attack.

1.3 Given a scenario, analyze potential indicators associated with application attacks.

1.4 Given a scenario, analyze potential indicators associated with network attacks.

1.5 Explain different threat actors, vectors, and intelligence sources.

1.6 Explain the security concerns associated with various types of vulnerabilities.

1.7 Summarize the techniques used in security assessments.

1.8 Explain the techniques used in penetration testing.

2.0 Architecture and Design | 21%

Topics:

2.1 Explain the importance of security concepts in an enterprise environment.

2.2 Summarize virtualization and cloud computing concepts.

2.3 Summarize secure application development, deployment, and automation concepts.

2.4 Summarize authentication and authorization design concepts.

2.5 Given a scenario, implement cybersecurity resilience.

2.6 Explain the security implications of embedded and specialized systems.

2.7 Explain the importance of physical security controls.

2.8 Summarize the basics of cryptographic concepts.

3.0 Implementation | 25%

Topics:

3.1 Given a scenario, implement secure protocols.

3.2 Given a scenario, implement host or application security solutions.

3.3 Given a scenario, implement secure network designs.

3.4 Given a scenario, install and configure wireless security settings.

3.5 Given a scenario, implement secure mobile solutions.

3.6 Given a scenario, apply cybersecurity solutions to the cloud.

3.7 Given a scenario, implement identity and account management controls.

3.8 Given a scenario, implement authentication and authorization solutions.

3.9 Given a scenario, implement public key infrastructure.

4.0 Operations and Incident Response | 16%

Topics:

4.1 Given a scenario, use the appropriate tool to assess organizational security.

4.2 Summarize the importance of policies, processes, and procedures for incident response.

4.3 Given an incident, utilize the appropriate data sources to support an investigation.

4.4 Given an incident, apply mitigation techniques or controls to secure an environment.

4.5 Explain the key aspects of digital forensics.

5.0 Governance, Risk, and Compliance | 14%

Topics:

5.1 Compare and contrast various types of controls.

5.2 Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture.

5.3 Explain the importance of policies to organizational security.

5.4 Summarize risk management processes and concepts.

5.5 Explain privacy and sensitive data concepts in relation to security.

CompTIA Security+ Certification Exam Tip

During the CompTIA Security+ exam, read each question carefully to understand what the question is truly asking. Candidates should not add additional requirements or consider personal experience when contemplating their selected answer. CompTIA grades the exam based on the answer most closely aligned to approved standards and practices, not what a candidate may add to the question or believe to be a better option. Passing the exam demonstrates your knowledge of the CompTIA Security+ topics in the context of industry best practices.

Conclusion

The CompTIA Security+ syllabus and resources include: the objectives overview with domains, the weights of those domains within the exam, and the topics included in each domain. Use CompTIA approved resources and authorized training to help ensure your achievement of a CompTIA Security+ certification.