CompTIA Security+ SY0-701 Exam Domains: Complete Breakdown of All 5 Domains

Quick Overview

• The CompTIA Security+ SY0-701 exam domains include five areas: General Security Concepts (12%), Threats, Vulnerabilities, and Mitigations (22%), Security Architecture (18%), Security Operations (28%), and Security Program Management and Oversight (20%).
• General Security Concepts covers core security principles, including security controls, the CIA triad, authentication, authorization, cryptography, PKI, and Zero Trust.
• Threats, Vulnerabilities, and Mitigations focuses on common cyber threats, attack vectors, vulnerabilities, indicators of compromise, and ways to reduce security risks.
• Security Architecture, Security Operations, and Program Management cover practical security responsibilities, from secure infrastructure and monitoring to incident response, governance, risk, and compliance.
• This guide covers all five CompTIA Security+ SY0-701 exam domains, their weightage, key topics, and what you need to know to prepare for the exam.

Ready to prepare for the Security+ exam with structured training? Explore the CompTIA Security+ Certification Training Course to build your cybersecurity knowledge and prepare with focused guidance. 

What are the CompTIA Security+ SY0-701 exam domains?

The SY0-701 exam consists of five domains:

SY0-701 domain	Domain name	Exam weight	Main focus
1.0	General Security Concepts	12%	Security fundamentals and controls
2.0	Threats, Vulnerabilities, and Mitigations	22%	Threats, attacks, vulnerabilities, and mitigations
3.0	Security Architecture	18%	Secure infrastructure and architecture
4.0	Security Operations	28%	Day-to-day security operations
5.0	Security Program Management and Oversight	20%	Governance, risk, compliance, and oversight

Also Read: How to Study for CompTIA Security+: An 8-Week Study Plan

Domain 1: General Security Concepts (12%)

General Security Concepts covers the basic principles that are required to understand all other topics covered in security. The domain includes the basic concepts, terminologies, and security principles in various areas of cybersecurity.

Some important topics are as follows: 

• Security controls: You need to be well-versed with preventative controls, detective controls, corrective controls, deterrent controls, compensatory controls, and directive controls. 
• The CIA triad: Get a good understanding of what confidentiality, integrity, and availability have to offer in terms of information and systems security. 
• Authentication and authorization: Learn about the differences between authentication and authorization.
• Zero Trust: Acquire an insight into some basic principles of zero trust that involve continuous user, device, and request verification. 
• Cryptography: Learn about encryption fundamentals, hashing, digital signatures, and certificates.
• Public Key Infrastructure (PKI): Learn about the functions of certificates and certificate authorities.
• Physical security: Learn about the controls used to protect physical assets such as buildings and equipment.

Also Read: Security+ Exam Preparation Plan for Working Professionals

Domain 2: Threats, Vulnerabilities, and Mitigations (22%)

Cybersecurity experts spend considerable amounts of time identifying and mitigating threats. That's why this domain receives a lot of attention in the exam. Domain 2 encompasses the threats which the organization could face, the vulnerabilities which could be exploited by the threats, and the techniques for risk mitigation. 

Key areas include:

• Threat actors: Learn about different types of attackers and their motivations.
• Threat vectors and attack surfaces: Understand how attackers might get access to your systems or networks.
• Social engineering: Learn more about different forms of manipulation like phishing, spear-phishing, whaling, vishing, smishing, and others.
• Malware: Understand common forms of malicious software and their potential impact.
• Application and network attacks: Learn the basic concepts behind attacks such as injection, denial of service, and password attacks.
• Vulnerabilities: Understand common weaknesses in applications, systems, configurations, and networks.
• Indicators of compromise: Learn how security teams can identify signs that an attack may have occurred.
• Mitigation techniques: Understand how security controls and defensive measures can reduce threats and vulnerabilities.

Want to build practical skills in AI beyond cybersecurity? Explore the Applied Agentic AI Certification Course to learn how to design and apply AI agents in real-world workflows. 

Domain 3: Security Architecture (18%)

This domain concentrates on secure systems, networks, and infrastructure design and maintenance. As opposed to considering each security control in isolation, here you will have to look beyond them and see their interactions.

The main topics to study are:

• Enterprise architecture: Understand how security can be incorporated into organizational infrastructure.
• Cloud environments: Review the basics of cloud security and shared responsibility.
• Network segmentation: Understand how separating networks or systems can limit unauthorized access and reduce the impact of an attack.
• Infrastructure security: Learn how servers, networks, applications, and other infrastructure components can be protected.
• Data protection: Consider various ways to secure data throughout all its life cycle stages, e.g. when it's stored and transferred.
• Resilience: Study the concepts that help organizations keep functioning in case their systems fail.
• IoT and specialized systems: Consider the security challenges related to connected and specialized devices.

Also Read: What Is PCI DSS Compliance and Why Do Organizations Need It?

Domain 4: Security Operations (28%)

This area is considered the most important area as the weight of Security Operations in the SY0-701 examination is the highest one.

In this area, the candidate should study about activities that security specialists undertake regularly to protect systems and respond to security threats.

Key topics include:

• Security monitoring: Learn about methods organizations use for monitoring suspicious activity.
• Asset management: Learn how to recognize and manage security devices, software, and other assets.
• Vulnerability management: Review how vulnerabilities are identified, assessed, prioritized, and addressed.
• Identity and access management: Understand access controls, authentication methods, and account management.
• Endpoint security: Learn how endpoints such as workstations, mobile devices can be secured.
• Logging and monitoring: Learn reasons for collection of logs and how these logs can help to conduct security investigations.
• Incident response: Learn steps of incident detection, handling and recovery.
• Digital forensics: Learn how to collect and analyze evidence obtained after a security threat occurs.
• Automation and orchestration: Learn how security teams can automate repetitive tasks and coordinate security workflows.

Also Read: Operational Technology (OT) Security

Domain 5: Security Program Management and Oversight (20%)

Domain 5 looks at how organizations manage, govern, and oversee their security programs. It moves beyond purely technical controls and focuses on how security decisions support business requirements and reduce organizational risk.

The main areas to study include:

• Security governance: Understand policies, standards, procedures, guidelines, and security roles.
• Risk management: Learn how organizations identify, assess, prioritize, and respond to security risks.
• Third-party risk: Understand the security risks associated with vendors, contractors, suppliers, and other external partners.
• Compliance and privacy: Review regulatory requirements, legal considerations, audits, and privacy responsibilities.
• Security policies: Understand how organizations document security expectations and requirements.
• Security awareness: Learn how employee training can reduce human-related security risks.
• Business continuity and disaster recovery: Understand how organizations prepare to maintain or restore critical operations after a disruption.

Looking to expand your AI skills alongside cybersecurity knowledge? Explore the Generative AI and Prompt Engineering Course for Professionals to build practical skills in generative AI and effective prompting.

Conclusion

The CompTIA Security+ SY0-701 exam covers five domains that test your understanding of security concepts, cyber threats, secure architecture, security operations, and risk management. Knowing what each domain includes helps you prepare with a clearer plan and focus on the topics you need to strengthen.

Review the official exam objectives, practise questions regularly, and revisit areas where you make mistakes. With consistent preparation and a solid understanding of all five domains, you can approach the Security+ exam with greater confidence.

Have A Query? Get in Touch With Our Customer Support | upGrad KnowledgeHut