CompTIA Security+ SY0-701 remains the active exam series through 2026, and most candidates should book the test now rather than wait for an unconfirmed SY0-801 refresh. The current version launched on November 7, 2023, requires a 750 passing score on a 100-900 scale, and weights its five domains heavily toward security operations and threat mitigation. Whether the credential is worth pursuing today depends on your timeline, your total budget, and how the three-year retirement window aligns with the certifications you plan to stack above it.
Exam Format and Passing Score
The SY0-701 exam runs 90 minutes with a maximum of 90 questions blending multiple-choice and performance-based items. CompTIA sets the passing score at 750 on a scale of 100 to 900, and the test is available in English, Japanese, Portuguese, Spanish, and Thai. Performance-based questions typically appear first and cannot be skipped and returned to later, so candidates who plan to budget time for the easier multiple-choice items first lose that option. The exam carries no formal prerequisite, though CompTIA recommends CompTIA Network+ plus two years of hands-on security or systems-administration experience before attempting it.
Five Domains by Weight
The blueprint distributes content across five domains, and the weighting tells you exactly where to invest study hours. Security operations claims the largest share at 28 percent, followed by threats, vulnerabilities, and mitigations at 22 percent, security program management and oversight at 20 percent, security architecture at 18 percent, and general security concepts at 12 percent. No single domain is optional, but the spread means over a quarter of your score rides on day-to-day operational security tasks.
| Domain | Weight | Core focus |
|---|---|---|
| Security operations | 28% | Hardening, monitoring, incident response, IAM |
| Threats, vulnerabilities, mitigations | 22% | Attack types, threat actors, mitigation |
| Security program management and oversight | 20% | Governance, risk, compliance, audits |
| Security architecture | 18% | Infrastructure, data protection, resilience |
| General security concepts | 12% | Controls, CIA triad, cryptography fundamentals |
Because security operations alone is nearly a third of the exam, candidates who gloss over incident response, identity and access management, and vulnerability scanning leave the most points on the table. The 12 percent assigned to general security concepts makes it the smallest domain, yet it underpins the cryptography and control-type questions that recur across every other section. Treat general concepts as foundational vocabulary that sharpens your answers in the higher-weighted domains rather than as a throwaway topic.
What the Exam Costs
In the United States the official exam voucher is priced at $425 per attempt through Pearson VUE, whether you sit at a physical testing center or use online proctoring. That voucher covers exactly one attempt; a failed exam requires a new voucher at full price, which is why preparation discipline matters. Self-paced learners who add study guides, practice exams, and lab access typically spend $600 to $1,000 total, while instructor-led bootcamps can push the investment to $1,500-$3,500. CompTIA’s academic program offers student discounts of 40-50 percent off the voucher price, and many employers reimburse the fee under professional-development budgets. The credential stays valid for three years, and renewal requires 50 continuing education units through CompTIA’s CE program, which costs roughly $150 in total when completed through the official renewal pathway.
Test Now or Wait
CompTIA retires exam versions roughly three years after launch, which places SY0-701 in its expected sunset window, but no official SY0-801 launch date has been announced as of mid-2026. If you are already studying the SY0-701 objectives, switching mid-stream to a new blueprint means restarting domain maps, practice materials, and study plans for an unknown timeline. The pragmatic move is to finish SY0-701 while its objectives, published books, and practice exams are mature and abundant. Anyone who already holds Security+ also satisfies the US Department of Defense DoD 8140 requirement for multiple work roles including cyber defense analyst and incident responder, which keeps the credential relevant regardless of when the next version arrives. For a broader view of how vendor credentials stack against each other, the AWS certification roadmap maps every 2026 cloud path, and the CCSP versus AWS Security Specialty comparison weighs two cloud-security options that sit above Security+ in difficulty.
Study Plan Before Booking
Before you pay for a voucher, confirm readiness with a checklist that maps each domain to concrete preparation steps and protects your exam fee from a premature booking.
- Audit the five domain weights and allocate study hours proportional to each percentage, not equal time across all domains.
- Complete one full-length timed practice exam to establish a baseline score before any focused review.
- Drill performance-based questions separately, because they lock in on first access and consume disproportionate time.
- Target stable practice scores at least 10 percent above the 750 cut line before scheduling the real exam.
- Book the test date only after two consecutive mock exams clear the pass mark by a comfortable margin.
A disciplined sequence prevents paying $425 for an attempt you are not ready to pass, and the proportional-time rule keeps effort focused on the 28-percent security-operations domain rather than the 12-percent fundamentals block. Candidates who wait for two consecutive clear-margin mock exams consistently report lower test-day anxiety and a better return on the voucher investment.