CompTIA
Security+ SY0-801
ABOUT THE EXAM
- Exam length: 90 minutes maximum
- Maximum of 90 questions
Performance-based questions appear first, followed by multiple choice - 2–4 Performance-based Questions/Simulations
- Mostly multiple choice with a single answer
- Only 1–3 multiple-answer multiple-choice questions
- Mark and review: Yes
- Go back and change answers: Yes
- Real exam cost: About $439
Domains covered
- Domain 1: General Security Concepts
- Domain 2: Threats, Vulnerabilities, and Attacks
- Domain 3: Security Architecture
- Domain 4: Security Operations
- Domain 5: Security Program Management and Oversight
EXAM REVIEW – WHAT YOU NEED TO KNOW
Exam Content
The difficulty of SY0-801 is similar to SY0-701. The content of this revision of the Security+ exam is about 75–80% similar to its predecessor. New to this version (SY0-801):
- Dedicated coverage of artificial intelligence and Large Language Models (LLMs)
- AI-related threats, including prompt injection, data leakage, and attacker use of AI
- Continued emphasis on cloud, hybrid, and modern operating environments
- Cryptography remains important but is still contained mainly in Domain 1
- Strong focus on threat actors, attack techniques, vulnerabilities, and indicators of malicious activity
- Security operations, monitoring, automation, and incident response remain heavily weighted
Exam Structure
You will receive up to 90 questions. Performance-based questions (PBQs) come first, followed by the multiple-choice section. You won’t be told how many points each question is worth, but it is generally speculated that one selection equals one point. When you get an exhibit or scenario, it may involve multiple selections.
The 2–4 Performance-based Questions/Simulations are challenging. They are often based upon matching topics and definitions, or putting steps in a correct sequence. You may also see short lab-style tasks such as reviewing logs, choosing the right control, or placing items in the proper order.
Expect only 1–3 multiple-answer multiple-choice items. The majority of the remaining questions will be single-answer multiple choice.
Example: You could be asked to place incident-response steps in the correct sequence, match attack types to definitions, or review alerts and select the most appropriate next action. Each correct selection is typically worth a point.