CompTIA Security+ Practice Questions (SY0-701)
Security+ is the baseline security certification employers screen for, and the SY0-701 exam is heavier on scenario judgment than most candidates expect. This is the biggest practice bank of its kind: 10 full-length timed forms, roughly 900 original questions across all five domains at official weighting, with a clear rationale for every answer. Take a free timed practice test first, then unlock the full bank for $69 one time.
By PrepClubs Editorial Team, updated October 8, 2026
CompTIA Security+ SY0-701 is a vendor-neutral, entry-level cybersecurity certification. The exam has a maximum of 90 questions, a 90-minute time limit, and a scaled passing score of 750 on a 100 to 900 range. It mixes multiple-choice items with performance-based questions (PBQs) across five domains: General Security Concepts, Threats Vulnerabilities and Mitigations, Security Architecture, Security Operations, and Security Program Management and Oversight. Scoring is compensatory, so there is no per-domain minimum. It is widely recognized as a baseline requirement for many security and IT roles.
Source: CompTIA Security+ SY0-701 Exam Objectives (Version 6.0). PrepClubs is not affiliated with CompTIA.
The biggest Security+ bank, with a rationale for every answer
Official facts checked 8 Oct 2026
How long is the CompTIA Security+ exam and how many questions does it have?
CompTIA Security+ (SY0-701) allows 90 minutes for a maximum of 90 questions, a mix of multiple-choice and performance-based, according to CompTIA. The pass mark is 750 on a scale of 100 to 900. The exam covers five domains, and security operations is the largest at 28%. CompTIA lists 17 November 2026 as the launch date for the next version, SY0-801, which keeps the same length and time limit.
Security+ versions
“Number of questions: maximum of 90, a mix of multiple-choice and performance-based questions”
“Security+ V7 is available today, while the newest version, Security+ V8, is expected to launch on or around November 17, 2026.”
Which Security+ practice tests are on PrepClubs, and how long is each one?
PrepClubs has 11 Security+ practice tests: 1 diagnostic and 10 full-length forms, 925 questions in all. 10 run 90 questions in 90 minutes, 1 runs 25 questions in 25 minutes.
The question count, time limit and question mix in each row are read from the question bank that runs the live tests, last on 8 Oct 2026, so each row matches what the test shows when you open it. Our forms follow SY0-701, the version CompTIA delivers today.
Showing 11 of 11 Security+ practice tests
- Security Operations
- Security Architecture
- Security Program Management and Oversight
- Threats, Vulnerabilities, and Mitigations
- General Security Concepts
| Question mix | Calculator | Guide | |||||
|---|---|---|---|---|---|---|---|
| CompTIA Security+ Diagnostic (SY0-701) Diagnostic | 25 | 25 min | 60 s | Security Operations 7 · Security Architecture 5 · Security Program Management and Oversight 5 2 more areasThreats, Vulnerabilities, and Mitigations 5 · General Security Concepts 3 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 1 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 2 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 3 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 4 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 5 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 6 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 7 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 8 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 9 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives | |
| CompTIA Security+ Practice Test 10 (SY0-701) Full-length | 90 | 90 min | 60 s | Security Operations 25 · Threats, Vulnerabilities, and Mitigations 20 · Security Program Management and Oversight 18 2 more areasSecurity Architecture 16 · General Security Concepts 11 | Not allowed | Exam objectives |
Sources
- CompTIA: Security+ V7 (SY0-701) (comptia.org), checked 8 Oct 2026
- CompTIA: Security+ V8 (SY0-801) (comptia.org), checked 8 Oct 2026
- CompTIA: Security+ overview (comptia.org), checked 8 Oct 2026
- PrepClubs question bank, the files behind the live Security+ practice tests, read 8 Oct 2026
“Not published” means the publisher does not state that fact on any page we could find. We leave it blank instead of quoting a prep site.
What you get with the full bank
A large bank of original CompTIA Security+ practice questions written to the SY0-701 Exam Objectives (Version 5.0). Full coverage of all five domains, weighted to the official blueprint: General Security Concepts, Threats Vulnerabilities and Mitigations, Security Architecture, Security Operations, and Security Program Management and Oversight.
A clear rationale for every question. We explain why the correct answer is correct and why each other option is wrong, so you build the reasoning the exam actually tests rather than memorizing answers. PBQ-style items are included: ruleset and log interpretation, incident-response ordering, control-to-scenario matching, and configuration selection, rendered as text so they work on any device.
Two ways to practice. Exam mode is a timed, full-length 90-question form that matches the real domain weighting, so you rehearse under exam conditions. Study mode lets you practice by domain, review rationales as you go, and retry the questions you missed.
The five SY0-701 domains and their official weight
Every one of the 10 forms is built to the same domain weighting, so each is a true full-length rehearsal of the real exam.
General Security Concepts (12%)
Control categories and types, the CIA triad, Zero Trust planes, cryptographic concepts, and change management. The foundation the other four domains build on.
Threats, Vulnerabilities, and Mitigations (22%)
The heaviest knowledge domain. Threat actors and motivations, attack surfaces, common vulnerabilities, indicators of malicious activity, and the mitigation techniques that reduce risk.
Security Architecture (18%)
Securing architecture models, enterprise infrastructure, data protection strategies, and resilience and recovery. Where design decisions meet security outcomes.
Security Operations (28%)
The largest domain. Hardening, secure baselines, identity and access management, automation, incident response, and the day-to-day operation of security controls.
Security Program Management and Oversight (20%)
Governance, risk management, third-party risk, compliance, and security awareness. The management-side reasoning that trips up hands-on candidates.
Try five real Security+ questions, one from each domain
One item from each of the five SY0-701 domains, taken straight from the bank. These sit in the final practice test, so if you buy, you will not meet them again until the very end. Click a question to reveal the answer and the reasoning.
- A.A technical control
- B.A physical control
- C.A managerial control
- D.A compensating control
- A.E1-A2, E2-A1, E3-A3
- B.E1-A1, E2-A2, E3-A3
- C.E1-A3, E2-A2, E3-A1
- D.E1-A2, E2-A3, E3-A1
- A.L1-H1, L2-H2, L3-H3
- B.L1-H2, L2-H3, L3-H1
- C.L1-H3, L2-H2, L3-H1
- D.L1-H3, L2-H1, L3-H2
- A.A1-S3, A2-S2, A3-S1
- B.A1-S1, A2-S2, A3-S3
- C.A1-S2, A2-S3, A3-S1
- D.A1-S3, A2-S1, A3-S2
- A.V1-G1, V2-G2, V3-G3, V4-G4
- B.V1-G2, V2-G1, V3-G4, V4-G3
- C.V1-G1, V2-G3, V3-G2, V4-G4
- D.V1-G3, V2-G2, V3-G1, V4-G4
SY0-601 to SY0-701: what CompTIA actually restructured
The English SY0-601 exam retired on 31 July 2024, and a lot of study material still in circulation was built for it. The domain count did not change, but almost everything underneath it did, so old material maps badly onto the current blueprint.
| SY0-601 | SY0-701 | |
|---|---|---|
| Domains | 5 | 5 |
| Total objectives | 35 | 28 |
| General Security Concepts | Did not exist | New domain, 12% |
| Implementation | A standalone domain | Removed, folded into the others |
| Threats and vulnerabilities | Attacks, Threats and Vulnerabilities, 24% | Threats, Vulnerabilities and Mitigations, 22% |
| Architecture | Architecture and Design, 21% | Security Architecture, 18% |
| Governance | Governance, Risk and Compliance, 14% | Security Program Management and Oversight, 20% |
| Heaviest domain | Implementation | Security Operations, 28% |
| English retirement | 31 July 2024 | 11 June 2027 |
| Successor | SY0-701 | SY0-801, launching 17 November 2026 |
Sources: the CompTIA Security+ SY0-701 exam objectives version 6.0, CompTIA's SY0-601 versus SY0-701 comparison, and the CompTIA objectives-under-development page. CompTIA states the objective count fell from 35 to 28 "due to a more focused job role in a maturing industry". PrepClubs is not affiliated with CompTIA.
The Security+ facts that change when you should sit it, and what it costs
There is a clock on SY0-701, and it is public
CompTIA has published the retirement dates. The English SY0-701 exam retires on 11 June 2027, and the Japanese, Portuguese, Spanish and Thai versions follow on 13 August 2027. The successor is announced: SY0-801, Security+ V8, now has its own page on CompTIA's site.
CompTIA lists 17 November 2026 as the launch date for SY0-801. The new version keeps the 90-minute limit, the maximum of 90 questions and the 750 pass mark, and changes the domain weights to 16, 24, 19, 27 and 14 percent.
The practical read: SY0-701 stays on sale in English until 11 June 2027, so you can still prepare for it and sit it. If your exam date falls after 17 November 2026, decide which version you will book before you start studying.
What it costs, and why Security+ is dearer to keep than Network+
The voucher is $439 in the US, against $399 for Network+. Voucher plus Retake Assurance is $579. UK list is GBP 274. CompTIA prices by region, so the figure you see depends on where you sit.
Renewal is where the two diverge. Security+ requires 50 CEUs across the three-year cycle against Network+'s 30, on the same $150 CE fee. So the first three years of holding Security+ run about $589 plus your time, and the time cost is nearly double.
Worth knowing: the CE fee is not annual for Security+. CompTIA states you pay it only if you renew by uploading CEUs, and it must be paid by the expiration date. Renewing your highest-level CompTIA certification automatically renews the ones below it, so if Security+ sits under something larger later, the problem takes care of itself.
Security Operations is more than a quarter of the exam
The weighting is lopsided and most study plans ignore it. Security Operations is 28 percent with nine objectives, more than double General Security Concepts at 12 percent with four. Threats, Vulnerabilities and Mitigations is 22, Security Program Management and Oversight is 20, and Security Architecture is 18.
SY0-701 also went deliberately narrower than its predecessor. CompTIA cut the objective count from 35 to 28 while keeping five domains, which it attributes to "a more focused job role in a maturing industry". Fewer objectives at the same exam length means each one is tested harder.
If you allocate evenly across five domains you will under-prepare the domain that decides nearly a third of your result. Security Operations and Threats together are half the exam.
The salary figure, sourced properly
The Security+ certification page itself publishes no salary. CompTIA does publish one for the role it maps to: a median of $140,000 for Cybersecurity Analyst and Engineer, credited to CompTIA's own analysis of Lightcast and US Bureau of Labor Statistics data, alongside more than 163,000 US job listings in the preceding twelve months.
That is a role median for people doing the job, with a named methodology, which is rarer than it should be in this market. It is not what holding Security+ adds to a salary, and CompTIA does not claim it is.
Build the rest of your prep stack
How Security+ is scored
The SY0-701 exam has a maximum of 90 questions and a 90-minute time limit. The passing score is 750 on a scaled range of 100 to 900. Scoring is compensatory, which means a strong domain can offset a weaker one and there is no minimum you must hit in any single domain.
Because the scale is not a raw percentage, there is no published question-to-score formula. Roughly 83 percent correct is a common approximation of the pass line, but CompTIA does not publish the exact conversion. Our exam-mode form mirrors the 90-question, domain-weighted structure so your practice percentage tracks close to real exam conditions.
Performance-based questions usually appear first and can carry more weight than a single multiple-choice item. Do not sink all your time into them at the start. Flag, move on, and return with the time you have left.
Who uses the Security+?
Security+ is a common baseline for security analyst, SOC, and systems administration roles, and it satisfies a well-known baseline requirement for many U.S. defense and government contractor positions. Organizations that hire heavily for these roles routinely list it as a requirement or a strong preference.
A Security+ prep approach (about 30 days)
Days 1-3: Take the free diagnostic and read your domain breakdown
Start with the free 25-question timed diagnostic. It scores you domain by domain so you can see exactly where you stand before spending a cent. Your two weakest domains become the focus of the plan.
Days 4-14: Study mode by domain, weakest first
Work through study mode one domain at a time, reading the rationale on every question including the ones you get right. Security Operations and Threats carry the most weight, so do not leave them for last.
Days 15-24: Drill PBQ-style items
PBQs are the number-one candidate anxiety point. Work the ruleset and log interpretation, incident-response ordering, and control-to-scenario items until the reasoning is automatic.
Days 25-29: Full-length timed forms
Sit exam-mode forms under a strict 90-minute clock. Aim to consistently clear the pass approximation with time to spare, and review every miss by domain.
Day 30: Light review and rest
Review only your flagged and missed items from the last two forms. Do not cram new material the day before. Settled recall beats last-minute volume.
Common Security+ mistakes
Memorizing answers instead of reasoning
SY0-701 is scenario-heavy. If you learn "answer B" without the why, a reworded stem will beat you. Read the rationale on every question, especially the ones you got right.
Freezing on the PBQs
PBQs usually come first and eat time. Candidates who try to perfect them up front run out of clock. Flag, move on, and come back.
Studying to old objectives
Free question dumps are often written to a retired exam code and offer no rationale. SY0-701 changed the domain structure. Practice built to Version 5.0 objectives is what matters.
Underweighting the management domain
Hands-on candidates ace Security Operations and then lose the exam on governance, risk, and compliance. Security Program Management and Oversight is 20 percent of the blueprint. Do not skip it.
Related reading
Security+ FAQs
A score tells you how you did. The coach tells you what to practice next.
After every test you get a short plan built from your own answers and seconds: which sections cost you points, which ones eat your clock, and the drill that fixes each.
Math: 11 of 12 right, at 31 s a question
Drill math against a 20 s clock. That frees about 2 minutes per test for the sections you miss more.
People who got the same questions right took 20 s.
Illustrative data
- Every section mapped on accuracy against speed, with one fix for each
- The questions that ate your time, and the clock checkpoints to hit next time
- Where rushing costs you, and the point to guess and move on
- A read that sharpens with every test you take
Your pacing report is free with your first test.
Prove you are ready before exam day.
The biggest Security+ bank: 10 timed forms, roughly 900 original questions, a rationale for every answer. Start free, then unlock it for a one-time $69 with 30-day access and a Money-back Guarantee*.
Start prepping