Your Command Center
Study Dashboard
0
Questions Answered
—
Overall Score
0
Day Streak
0
Study Minutes
Domain Radar
Complete quizzes to see your radar fill in
Domain Breakdown & Exam Weights
1. General Security Concepts
12%
—
2. Threats, Vulns & Mitigations
22%
—
3. Security Architecture
18%
—
4. Security Operations
28%
—
5. Program Management & Oversight
20%
—
Exam Readiness0%
Not ReadyGetting ThereExam Ready
Know the Battlefield
All 5 Exam Domains
Click each domain to expand key topics, exam tips, and what to focus on.
1
General Security Concepts
Cryptography · Authentication · Controls · PKI
12% of exam
›
Security controls (preventive, detective, corrective)
CIA Triad (Confidentiality, Integrity, Availability)
Symmetric vs Asymmetric Encryption
PKI, Digital Certificates, CA hierarchy
Hashing algorithms (MD5, SHA-1, SHA-256)
Authentication factors (MFA, biometrics)
Zero Trust architecture principles
AAA framework (Authentication, Authorization, Accounting)
⚡ Exam Tip: Know the difference between authentication and authorization cold. Expect scenario questions where you must identify the right control type. PKI questions appear frequently — memorize the certificate chain.
2
Threats, Vulnerabilities & Mitigations
Attack types · Malware · Social Engineering · Scanning
22% of exam
›
Malware types (ransomware, rootkit, trojan, worm)
Social engineering (phishing, vishing, spear phishing)
SQL injection, XSS, CSRF attacks
Buffer overflow attacks
DDoS attack types and mitigations
Vulnerability scanning vs penetration testing
CVSS scoring system
Zero-day vulnerabilities
⚡ Exam Tip: This is the LARGEST domain at 22%. Spend extra time here. Know every type of social engineering attack. Scenario questions will describe an attack — you must identify it correctly. Phishing subtypes (spear, whaling, vishing) are heavily tested.
3
Security Architecture
Network design · Cloud · Virtualization · Segmentation
18% of exam
›
Network segmentation and DMZ design
Firewalls (stateful, stateless, NGFW)
VPNs (IPSec, SSL/TLS, Split tunnel)
Cloud models (IaaS, PaaS, SaaS, shared responsibility)
Virtualization and container security
SD-WAN and SASE frameworks
IDS vs IPS placement and types
Load balancers and high availability
⚡ Exam Tip: Cloud shared responsibility model is heavily tested. Know exactly what the customer vs provider is responsible for in IaaS, PaaS, and SaaS. Network diagrams may appear — know where to place firewalls, IDS/IPS, and DMZs.
4
Security Operations
Incident Response · SIEM · Forensics · Identity Management
28% of exam
›
Incident response lifecycle (PICERL)
SIEM tools and log analysis
Digital forensics (chain of custody, order of volatility)
Identity and Access Management (IAM)
Privilege access management (PAM)
Endpoint detection and response (EDR)
Patch management lifecycle
Security awareness training
⚡ Exam Tip: Domain 4 is the BIGGEST at 28%. Master the incident response phases — you will see multiple scenario questions. Know the order of volatility for forensics: CPU registers → RAM → Swap → HDD → Remote logs. Chain of custody questions appear on almost every exam.
5
Security Program Management & Oversight
Risk · Compliance · Privacy · Frameworks
20% of exam
›
Risk management (likelihood × impact)
Risk response (accept, avoid, transfer, mitigate)
Compliance frameworks (NIST, ISO 27001, SOC 2)
GDPR, HIPAA, PCI-DSS requirements
Business continuity and disaster recovery (BCP/DRP)
RTO vs RPO definitions
Data classification and handling
Third-party risk management
⚡ Exam Tip: Know RTO (Recovery Time Objective) vs RPO (Recovery Point Objective) — these appear constantly. Memorize the 4 risk response strategies. Compliance questions will ask which regulation applies to a given scenario — know HIPAA = healthcare, PCI-DSS = payment cards, GDPR = EU data.
Struggling with a domain? We can help.
Our instructors teach Security+ in live seminars and 1-on-1 mentorship sessions. Register now and get guided support through every domain.
Build Real Skill
Practice Quiz
100 domain questions + 85-question final exam simulation. Track your weak spots automatically.
🎯
Ready to Practice?
Select a domain above and click Start Quiz to begin.
Your progress is automatically saved to this browser.
Memorize Key Terms
Flashcards
Click the card to flip it. Master every Security+ term before exam day.
Card 1 of 40
Term
CIA Triad
Click to reveal definition
Definition
The three core principles of information security: Confidentiality (only authorized access), Integrity (data is accurate and unaltered), and Availability (systems are accessible when needed).
1 / 40
Your Roadmap to Pass
30 / 60 / 90 Day Study Plan
Follow this plan at 1 hour per day. Consistent beats intense every time.
Week 1
- Create free Professor Messer account and start Domain 1 videos
- Read CompTIA SY0-701 exam objectives (free PDF on comptia.org)
- Complete 20 Domain 1 practice questions on this site
- Set up free Anki account and download Security+ flashcard deck
Week 2
- Complete Domain 2 (Threats) — the biggest domain, take your time
- Lab: Set up TryHackMe free account, complete "Pre-Security" path
- Complete 20 Domain 2 practice questions
- Review weak areas from quiz results on your dashboard
Week 3
- Complete Domains 3 and 4 videos on Professor Messer
- Complete 20 questions each for Domain 3 and 4
- Lab: Practice Wireshark packet analysis (YouTube: David Bombal)
- Start reviewing acronyms — know 50 key Security+ acronyms
Week 4
- Complete Domain 5 and all flashcards on this page
- Take the 85-question Final Exam simulation — aim for 70%+
- Review every wrong answer and re-study those topics
- If scoring 75%+ consistently: book your exam on Pearson VUE
Weeks 1–2
- Deep dive Domain 1: General Security Concepts (30 min video + 20 min quiz daily)
- Build flashcard deck for cryptography terms
- Set up home lab: VirtualBox + Kali Linux
Weeks 3–4
- Domain 2: Threats — study every attack type in detail
- TryHackMe: Complete "Jr Penetration Tester" path (free)
- Practice 10 scenario questions per day
Weeks 5–6
- Domains 3 & 4: Architecture and Operations
- Lab: Practice with Wireshark, analyze pcap files from Malware Traffic Analysis
- Study incident response scenarios in detail
Weeks 7–8
- Domain 5: Risk, compliance, and governance deep dive
- Take full 85-question final exam twice — aim for 80%+
- Book exam date — commit to a real deadline
- Join r/CompTIA Reddit and read recent passing posts
Month 1
- Complete all Professor Messer Security+ videos (free on his site)
- Read Mike Chapple's "Security+ Study Guide" (get from library free)
- Complete all domain practice questions on this site once
- Build home lab: VirtualBox, Kali Linux, Metasploitable
Month 2
- Deep lab work: TryHackMe SOC Level 1 path (free)
- Complete Jason Dion's Security+ practice tests (Udemy, usually $12)
- Weak domain focused study — use your dashboard to identify gaps
- Study PBQ (performance-based question) strategies in depth
Month 3
- Take full exam simulation twice per week
- Daily: 30 flashcards + review wrong answers
- Final week: Read notes only — no new material
- Book exam for Week 12 — you are ready
⏰ Morning
15 min
15 min
- Read one article from The Hacker News or Krebs on Security
- Review 10 flashcards from yesterday's weak terms
- Check your streak — don't break the chain
📚 Study Block
30 min
30 min
- Watch one Professor Messer video section (10–15 min)
- Take notes in your own words — never copy-paste
- Complete 10 practice questions from today's topic
🛠️ Lab Time
15 min
15 min
- Spend time in TryHackMe or your home lab
- Practice one hands-on skill: packet analysis, log review, etc.
- Screenshot what you built — add to your portfolio
📝 Evening
10 min
10 min
- Log what you studied in your Notion journal
- Identify one thing you're not confident about — study it tomorrow
- Post weekly on LinkedIn about your progress (Sundays)
Want a study plan built just for YOU?
Our mentors build custom 30/60/90 day plans based on your current knowledge, available time, and target exam date. No guessing — just a clear path to passing.
Vetted & Free
Top Free Study Resources
Every resource here is free. These are the best on the internet — curated and tested.
Professor Messer — Security+
FREE · Video Course
The gold standard free Security+ course. Full video series, study groups, and practice exams all on one site. Start here.
professormesser.com →
CompTIA Official Exam Objectives
FREE · PDF Download
The official blueprint of every topic that can appear on your exam. Download and highlight every objective you've studied.
comptia.org →
TryHackMe — Security+ Path
FREE Tier · Hands-On Labs
Browser-based labs that teach Security+ concepts by doing, not just reading. The SOC Level 1 path is perfect for Domain 4.
tryhackme.com →
Anki Flashcard Decks (Security+)
FREE · Spaced Repetition
Download pre-made Security+ Anki decks. The spaced repetition algorithm shows you cards right before you forget them — scientifically proven to work.
ankiweb.net →
r/CompTIA Reddit Community
FREE · Community
500,000+ members. Read recent "I passed!" posts for strategies. Ask questions and get answers from people who just took the exam.
reddit.com/r/CompTIA →
Cybrary — Security+ Course
FREE Tier · Video + Labs
Professional-grade cybersecurity training. The Security+ course is free on the basic plan and includes assessments.
cybrary.it →
CyberSeek Career Pathway
FREE · Career Planning
NIST-backed tool that maps Security+ to exact job titles, salaries, and next certifications. Use this to see your career path after passing.
cyberseek.org →
Wireshark (Free Lab Tool)
FREE · Home Lab
Required for Security+ practical knowledge. Capture and analyze real network traffic on your own machine. Watch David Bombal's free tutorials on YouTube.
wireshark.org →
Know Every Term
Security+ Glossary
Search any term. Every definition is exam-accurate.
Be Prepared
Exam Day Guide & Checklist
Check off each item as you complete it. Don't leave anything to chance.
📅 1 Week Before
Book your exam on Pearson VUE (pearsonvue.com/comptia)
Take one full 85-question practice exam — score 80%+ before booking
Review all 5 domain exam objectives one final time
Review your weak domains using the dashboard above
Stop learning new material — only review what you know
🌙 Night Before
Get 8 hours of sleep — this is more valuable than last-minute cramming
Prepare your government-issued ID (required at test center)
Know your test center location and parking situation
Eat a real meal — don't test on an empty stomach
Lay out clothes — one less thing to think about in the morning
🌅 Morning Of
Arrive 30 minutes early to the test center
Bring two forms of ID (one must be government-issued with photo)
Leave your phone in the car — no electronics in the test room
Use the bathroom before entering the exam room
Request scratch paper — use it for brain dump after exam starts
🎯 During the Exam
Do PBQs (performance-based) first if you know them — skip if unsure
Flag uncertain questions and return at the end
Never change your first answer unless you're 100% sure
Pace yourself: 90 questions in 90 minutes = 1 min per question
Read every word of scenario questions — the details always matter
🏆 PBQ Strategy (Performance-Based Questions)
PBQs are drag-and-drop, simulation, or fill-in-the-blank questions. Attempt them first if you know them — they're worth more points. If a PBQ confuses you, skip it immediately and return at the end. Do not waste 10 minutes on one PBQ when you could answer 10 multiple choice questions in the same time. Common PBQ types: network diagrams, log analysis, drag-and-drop attack identification, and firewall rule configuration.
You Passed — Now What?
After Your Security+ Certification
The cert is the door opener. Here's how to turn it into a career.
📋 Immediately After Passing
- ✓Add cert to LinkedIn — CompTIA sends you a digital badge via Credly
- ✓Update your resume — add "CompTIA Security+ (SY0-701)"
- ✓Post on LinkedIn — "I just passed Security+!" gets massive engagement
- ✓Start applying to SOC Analyst Tier 1 roles immediately
- ✓Search: "Security+ required" on LinkedIn Jobs and Indeed
💼 Jobs Security+ Unlocks
- →SOC Analyst Tier 1 ($45,000–$65,000)
- →IT Security Analyst ($55,000–$75,000)
- →Systems Administrator ($50,000–$70,000)
- →Network Security Engineer ($65,000–$90,000)
- →Government/DoD IT roles (requires Security+ by law)
Your Next Certification
Ready to fast-track your Security+ journey?
Join our live seminar or get 1-on-1 mentorship. Our instructors have helped hundreds of students go from zero to certified. You're next.