WGU TutoringAbout Us
UF GPA CalculatorUCF GPA CalculatorUC GPA CalculatorASU GPA CalculatorLSAC GPA CalculatorPurdue GPA CalculatorLSU GPA CalculatorRutgers GPA CalculatorOSU GPA CalculatorIU GPA CalculatorUW GPA CalculatorWKU GPA CalculatorTAMU GPA CalculatorUIUC GPA CalculatorUT Austin GPA CalculatorUofSC GPA CalculatorBerkeley GPA CalculatorUNL GPA CalculatorUTK GPA CalculatorUARK GPA CalculatorMizzou GPA CalculatorPenn State GPA CalculatorNYU GPA CalculatorUMich GPA CalculatorFSU GPA CalculatorUCLA GPA CalculatorGeorgia Tech GPA CalculatorUGA GPA CalculatorUNC GPA CalculatorVirginia Tech GPA CalculatorMSU GPA CalculatorView All Resources →
View All Practice Questions →
Contact
CompTIA Practice Questions

CompTIA Security+ Objectives Practice Questions

CompTIA Security+ SY0-701 Exam Objectives, Domains & Study Guide — Looking to break down the CompTIA Security+ objectives before you start studying? You're in the right place. The SY0-701 certification covers five weighted domains - and honestly, knowing what's on the blueprint is half the battle. We've mapped out every domain with sample questions so you can see exactly what CompTIA expects you to know. Whether you're figuring out where to start or trying to fill gaps in your prep, this guide walks through each objective area with real context, not just a list of bullet points.

90
Total Questions
90 minutes
Time Limit
750 (on 100-900 scale)
Passing Score
$404
Registration Fee

Free Sample Questions

Here are 5 free sample questions from our full bank of 250+ CompTIA Security+ Objectives practice questions. Try them out below — click "Show Answer" to reveal the correct response and explanation.

1

An organization is implementing a zero trust architecture. Which of the following BEST describes a core principle of this security model?

AA) Trust all internal network traffic by default
BB) Never trust, always verify - regardless of network location
CC) Apply security controls only at the network perimeter
DD) Grant permanent access once a user is authenticated
2

A security analyst discovers that attackers compromised a software vendor's update mechanism to distribute malware to the vendor's customers. Which type of attack does this BEST describe?

AA) Watering hole attack
BB) Supply chain attack
CC) On-path (man-in-the-middle) attack
DD) Credential stuffing attack
3

A company is migrating workloads to a public cloud environment. Which security control is MOST important for protecting data at rest in cloud storage?

AA) Network segmentation
BB) Multi-factor authentication
CC) Encryption with customer-managed keys
DD) Web application firewall
4

During an incident response investigation, a security analyst needs to preserve evidence from a compromised workstation. Which of the following should be collected FIRST based on the order of volatility?

AA) Hard drive image
BB) CPU registers and cache
CC) System logs stored on disk
DD) Network connection state
5

An organization's board of directors wants to understand the company's cybersecurity risk posture. Which of the following frameworks would BEST help communicate risk in business terms to executive leadership?

AA) NIST Cybersecurity Framework (CSF)
BB) Common Vulnerability Scoring System (CVSS)
CC) Open Web Application Security Project (OWASP) Top 10
DD) Center for Internet Security (CIS) Benchmarks

Get the Full CompTIA Security+ Objectives Question Bank — 250+ Practice Questions

You just saw 5 sample questions. We have a complete bank of 250+ CompTIA Security+ Objectives practice questions with detailed answers and explanations ready for you. Fill out the form below and we'll send you the full question bank — completely free.

We'll send the full question bank to this email.

We won't spam you. Just a quick follow-up if needed.

All fields are required.

About the CompTIA Security+ Objectives

Format & Structure

Total Questions
90
Time Limit
90 minutes
Format
Multiple choice and performance-based

Scoring & Cost

Passing Score
750 (on 100-900 scale)
Registration Fee
$404

Related Practice Questions

CompTIA Security+ Practice Questions

Start Practicing

CompTIA Network+ Practice Questions

Start Practicing

CompTIA CySA+ Practice Questions

Start Practicing

Frequently Asked Questions

What are the CompTIA Security+ SY0-701 exam objectives?

The CompTIA Security+ SY0-701 objectives are a detailed outline of every topic and subtopic you could be tested on. They're organized into five domains: General Security Concepts, Threats Vulnerabilities and Attacks, Security Architecture, Security Operations, and Security Program Management and Oversight. CompTIA publishes these objectives as a free PDF so you know exactly what to study.

How many domains does the Security+ exam cover?

The Security+ SY0-701 covers five domains. Each domain carries a different weight - Security Operations is the heaviest at 28%, followed by Threats Vulnerabilities and Attacks at 22%, Security Program Management and Oversight at 20%, Security Architecture at 18%, and General Security Concepts at 12%. Understanding these weights helps you prioritize your study time.

Which Security+ domain has the most questions?

Domain 4, Security Operations, carries the highest weight at 28% of the total score. That means roughly 25 of the 90 maximum questions will come from this domain. It covers topics like monitoring, incident response, digital forensics, and vulnerability management. If you're short on study time, this is the domain to focus on first.

What changed from SY0-601 to SY0-701?

The SY0-701 version consolidated the previous six domains down to five and put much more emphasis on security operations and governance. There's stronger coverage of zero trust architecture, cloud security, automation, and AI-related threats. Some older topics like legacy cryptography protocols were reduced or removed entirely. The SY0-601 version retired in late 2024, so SY0-701 is the only current option.

How should I study the Security+ objectives?

Start by downloading the official objectives PDF from CompTIA's website and reading through every objective at least once. Then work through each domain systematically - don't jump around randomly. Use practice questions to identify weak spots, and spend extra time on the heavier domains like Security Operations and Threats. Hands-on labs for topics like network security and incident response make a huge difference compared to just reading about them.

Do I need to memorize all Security+ objectives?

You don't need to memorize them word for word, but you should understand every concept listed. The objectives serve as your study roadmap - if there's a subtopic you can't explain in your own words, that's a gap you need to fill. Focus on understanding the 'why' behind each concept rather than rote memorization, since the questions often test application rather than recall.

What are performance-based questions on Security+?

Performance-based questions (PBQs) are interactive scenarios where you have to actually do something - like configure a firewall rule, analyze log output, match security concepts to scenarios, or drag-and-drop items into the correct order. They typically appear at the beginning of the assessment and are worth more than standard multiple-choice questions. Many candidates find them harder because you can't just guess - you need hands-on understanding of the tools and concepts.

Get 250+ CompTIA Security+ Objectives Practice Questions

Don't settle for just 5 sample questions. Request the full question bank and start preparing with confidence.

Get Started