View the objective checklist and study gaps ↓

Study track · CompTIA · SY0-701

Security+ (SY0-701)

Threats, architecture, operations, and governance, practiced with real logs, firewalls, PKI, and attack demos. Every BB lab, drill, and lesson for this exam, in the order to use them.

QuestionsUp to 90
Time90 min
Passing score750 / 900
FormatMultiple choice + PBQs
▶ Start with Drill 1 (free)See the study path
Tracks
A+ Core 1A+ Core 2Network+Security+CySA+
Exam blueprint

What SY0-701 tests, and where BB covers it

1.0General Security Concepts12%
Security Controls: Categories and Types FREESecurity Controls: Categories & Types MEMBERSPKI Certificate Lifecycle MEMBERSMaster Terms Lab FREEIDS/IPS Sensor Tuning MEMBERSPractice with Test Builder FREE
2.0Threats, Vulnerabilities, and Mitigations22%
Malware Fundamentals MEMBERSCross-Site Scripting (XSS) Lab MEMBERSSQL Injection Lab MEMBERSCSRF Lab MEMBERSSession Hijacking Lab MEMBERSCase File: The Voice on the Phone FREEPractice with Test Builder FREE
3.0Security Architecture18%
VPC Security Architecture MEMBERSFirewall Rulebase Triage MEMBERSIPsec VPN Configuration MEMBERSPractice with Test Builder FREE
4.0Security Operations28%
Log Analysis & Response MEMBERSLinux Incident Response MEMBERSPassword Policy Audit MEMBERSGroup Policy Remediation MEMBERSCredential Vault Verifier MEMBERSPractice with Test Builder FREE
5.0Security Program Management and Oversight20%
Practice with Test Builder FREE

Gap Governance, compliance, and audits need more practice.

Domain weights from the official CompTIA Security+ (SY0-701) exam objectives.

Study path

Five steps from first look to exam day

  1. Know what's on the exam

    Read the Security+ objectives decoded into plain English, with the exam traps for each domain.

    Open Security+ Clearances ›
  2. Take a baseline drill

    Drill 1 is free: 75 questions with breakdowns. Your score shows which domains to hit first.

    Start Drill 1 (free) ›
  3. Learn the concepts

    Work through the lessons and posts for the domains you missed, starting with the heaviest-weighted ones.

    See the lessons ›
  4. Prove it in a lab

    Run the PBQ-style simulations. They're scored on the final state, just like the real thing.

    See the labs ›
  5. Drill to exam speed

    Work through Drills 2 to 8 until you're consistently above 85% under exam time. Retake anything under 70%.

    See all 8 drills ›
14 labs · 1 free

PBQ-style simulations

75 questions each

Practice drills

8 drills
Lessons, posts and objectives

Learn the concepts

Quick reference

Study tools

Full Security+ access

Every lab, drill and lesson for SY0-701

Membership unlocks the complete track, plus every other cert on BB Tech Tools.

See membership
Study-gap map · SY0-701

Find your next objective

Open an objective to find matching lessons, practice and references. Coverage means a resource addresses part of the objective; it does not promise every exam bullet is covered.

28 of 28 objectives have resources · 10 still need a lab or Core Learning module.

Free and member resources are labeled below. Clearances explains the objectives; Test Builder offers mixed free questions and focused member practice.

1.0 General Security Concepts

1.1Compare and contrast various types of security controls.✓ Covered

Lesson or lab available.

1.2Summarize fundamental security concepts.✓ Covered

Lesson or lab available.

1.3Explain the importance of change management processes and the impact to security.✓ Covered

Lesson or lab available.

1.4Explain the importance of using appropriate cryptographic solutions.✓ Covered

Lesson or lab available.

2.0 Threats, Vulnerabilities, and Mitigations

2.1Compare and contrast common threat actors and motivations.✓ Covered

Lesson or lab available.

2.2Explain common threat vectors and attack surfaces.✓ Covered

Lesson or lab available.

2.3Explain various types of vulnerabilities.✓ Covered

Lesson or lab available.

2.4Given a scenario, analyze indicators of malicious activity.✓ Covered

Lesson or lab available.

2.5Explain the purpose of mitigation techniques used to secure the enterprise.✓ Covered

Lesson or lab available.

3.0 Security Architecture

3.1Compare and contrast security implications of different architecture models.✓ Covered

Lesson or lab available.

3.2Given a scenario, apply security principles to secure enterprise infrastructure.✓ Covered

Lesson or lab available.

3.3Compare and contrast concepts and strategies to protect data.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

3.4Explain the importance of resilience and recovery in security architecture.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

4.0 Security Operations

4.1Given a scenario, apply common security techniques to computing resources.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

4.2Explain the security implications of proper hardware, software, and data asset management.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

4.3Explain various activities associated with vulnerability management.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

4.4Explain security alerting and monitoring concepts and tools.✓ Covered

Lesson or lab available.

4.5Given a scenario, modify enterprise capabilities to enhance security.✓ Covered

Lesson or lab available.

4.6Given a scenario, implement and maintain identity and access management.✓ Covered

Lesson or lab available.

4.7Explain the importance of automation and orchestration related to secure operations.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

4.8Explain appropriate incident response activities.✓ Covered

Lesson or lab available.

4.9Given a scenario, use data sources to support an investigation.✓ Covered

Lesson or lab available.

5.0 Security Program Management and Oversight

5.1Summarize elements of effective security governance.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

5.2Explain elements of the risk management process.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

5.3Explain the processes associated with third-party risk assessment and management.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

5.4Summarize elements of effective security compliance.✓ Covered

Lesson or lab available.

5.5Explain types and purposes of audits and assessments.✓ Covered

Lesson or lab available.

5.6Given a scenario, implement security awareness practices.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

LAT: 0000
LON: 0000
DEP: 0000