SY0-701
- Duration
- 90 min
English, Japanese, Portuguese, Spanish, Thai
CompTIA
Credential
Certification
Level
Certification
Exam duration
90 min
credential overview
About this credential
Core cybersecurity certification validating practical skills across security concepts, threats and vulnerabilities, architecture, operations, and security program management and oversight.
Who this is for
IT and cybersecurity professionals responsible for core security functions.
Assessment
Exam details
Exam blueprint
Skills measured
General security concepts (12%)4 topics
- Compare technical, preventive, managerial, deterrent, operational, detective, physical, corrective, compensating, and directive controls.
- Explain CIA, non-repudiation, AAA, zero trust, and deception/disruption technologies.
- Explain change-management business processes, technical implications, documentation, and version control.
- Use PKI, encryption, obfuscation, hashing, digital signatures, and blockchain concepts.
Threats, vulnerabilities, and mitigations (22%)5 topics
- Compare threat actors and motivations.
- Explain threat vectors and attack surfaces including messaging, insecure networks, social engineering, files, voice calls, supply chains, and vulnerable software.
- Explain application, hardware, mobile, virtualization, OS, cloud, web, and supply-chain vulnerabilities.
- Analyze malware, password, application, physical, network, and cryptographic attacks.
- Apply segmentation, access control, configuration enforcement, hardening, isolation, and patching as mitigations.
Security architecture (18%)4 topics
- Compare on-premises, cloud, virtualization, IoT, ICS, and IaC architecture models.
- Apply security principles to enterprise infrastructure and secure communications/access.
- Compare data types, classifications, and protection methods.
- Explain high availability, site considerations, testing, power, platform diversity, backups, and continuity of operations.
Security operations (28%)9 topics
- Apply secure baselines, mobile solutions, hardening, wireless security, application security, sandboxing, and monitoring.
- Manage hardware, software, and data assets across acquisition, assignment, tracking, and disposal.
- Identify, analyze, remediate, validate, and report vulnerabilities.
- Use monitoring and alerting tools and data.
- Modify firewalls, IDS/IPS, DNS filtering, DLP, NAC, and EDR/XDR.
- Implement provisioning, SSO, MFA, and privileged access tools.
- Explain security automation, orchestration, scripting benefits, and considerations.
- Implement incident response, training, testing, root-cause analysis, threat hunting, and digital forensics.
- Use logs and other data sources to support investigations.
Security program management and oversight (20%)6 topics
- Summarize security governance policies, standards, procedures, monitoring, structures, and responsibilities.
- Explain risk identification, assessment, analysis, registers, tolerance, appetite, strategies, reporting, and BIA.
- Manage third-party assessment, selection, agreements, monitoring, questionnaires, and rules of engagement.
- Summarize compliance reporting, consequences, monitoring, and privacy.
- Explain attestation, internal/external audits, and penetration testing.
- Implement security-awareness and phishing training, anomalous-behavior recognition, reporting, and monitoring.
Before you certify
Requirements and recommended experience
Recommended
CompTIA Network+
Recommended experience
Two years of experience working in a security or systems administrator job role
Corporate certification enablement
Turn this pathway into a team capability plan
We can align the learning path, instructor support, practice environment and delivery schedule to your team’s roles and certification target.