Free Security+ Practice Test and Practice Questions (SY0-701 and SY0-801)
Answer CompTIA Security+ practice questions written to the exam objectives, read why every option is right or wrong, practice performance-based questions, then take a timed 90-question, 90-minute mock exam for SY0-701 or SY0-801.
90 questions in 90 minutes, performance-based questions included, drawn in the official share for each domain, with a score for every domain and a note on every answer.
Or start with a free drill- 366 original multiple-choice questions with a note on every option
- 18 interactive performance-based questions
- 15 questions on AI threats, new on SY0-801
An attacker registers the domain examp1e.com (with the number 1) to catch users who mistype example.com. What is this technique?
The Security+ exam at a glance
CompTIA Security+ is an entry-level cybersecurity certification that many security analyst and systems administrator jobs ask for, and US Department of Defense rules accept it for many cybersecurity roles. Two versions overlap from November 2026 to June 2027: SY0-701 (V7) and the new SY0-801 (V8). Both have up to 90 questions in 90 minutes and a passing score of 750 on a 100–900 scale.
- Exam
- CompTIA Security+, the entry-level cybersecurity certification. SY0-701 (V7) launched November 7, 2023; SY0-801 (V8) launches on or around November 17, 2026
- Retirement
- SY0-701 in English retires June 11, 2027; the Japanese, Portuguese, Spanish and Thai versions retire August 13, 2027
- Questions
- A maximum of 90, multiple-choice and performance-based
- Time
- 90 minutes
- Passing score
- 750 on a scale of 100–900
- SY0-701 domains
- General Security Concepts 12%, Threats, Vulnerabilities, and Mitigations 22%, Security Architecture 18%, Security Operations 28%, Security Program Management and Oversight 20%
- SY0-801 domains
- General Security Concepts 16%, Threats, Vulnerabilities, and Attacks 24%, Security Architecture 19%, Security Operations 27%, Security Program Management and Oversight 14%
- Recommended experience
- SY0-701: CompTIA Network+ and two years in a security or systems administrator role. SY0-801: a security administrator with two years of hands-on experience. Neither is a requirement to sit the exam
- Retakes
- No wait between a first and second attempt; at least 14 calendar days before any later attempt. You pay the exam price for every attempt
- Renewal
- The certification is valid for three years; renew with 50 continuing education units (CEUs) or by passing a newer exam
Two full mock exams: SY0-701 and SY0-801
Each mock is 90 questions in 90 minutes, drawn in the official share for each domain of that exam. Both open with 4 performance-based questions and include choose-two questions. The SY0-801 mock follows the V8 weights and includes AI threats; the SY0-701 mock leaves them out.
The five domains, and a free drill for each
CompTIA fixes each domain’s share of the exam, and the shares changed from SY0-701 to SY0-801. Each drill is ten questions with a note on every answer option; create a free account to save your results. Every domain also has its own guide page.
| Domain | SY0-701 | SY0-801 | What it tests | Drill |
|---|---|---|---|---|
| 1. General Security Concepts | 12% | 16% | Security controls by category and type, CIA, AAA and non-repudiation, Zero Trust, physical security, change management, and cryptography: PKI, certificates, encryption, hashing, salting, digital signatures and obfuscation. | 10-question drill |
| 2. Threats, Vulnerabilities, and Attacks | 22% | 24% | Threat actors and motivations, threat vectors, vulnerability types and CVSS, indicators of malware, network, application, credential and social engineering attacks, and (new on SY0-801) threats from AI usage. | 10-question drill |
| 3. Security Architecture | 18% | 19% | Cloud, IaC, serverless, microservices, OT and IoT architectures, secure infrastructure and device placement, failure modes, secure access, data protection, and resilience: sites, backups, redundancy and recovery metrics. | 10-question drill |
| 4. Security Operations | 28% | 27% | Hardening and mitigating controls, firewalls, IDS/IPS, EDR, NAC and email security, asset and vulnerability management, monitoring and SIEM, identity and access management, automation, incident response and investigations. | 10-question drill |
| 5. Security Program Management and Oversight | 20% | 14% | Governance documents, risk management and the SLE/ALE math, third-party risk and agreements, compliance and privacy, audits and penetration testing, and security awareness. | 10-question drill |
New to performance-based questions? Read how Security+ PBQs work and how to approach them.
Ready for the full exam?
90 questions in 90 minutes, performance-based questions included, drawn in the official share for each domain, with a score for every domain and a note on every answer.
Or start with a free drillHow to use this Security+ exam prep
- Decide which exam you will sit: SY0-701 until June 11, 2027, or SY0-801 from November 17, 2026. The content overlaps heavily; the weights and the AI objective differ.
- Take the free mixed drill to see where you stand across all five domains.
- Drill Security Operations first; it is the largest domain on both exams. Then Threats and Vulnerabilities.
- Take the performance-based drill until reading a log, a rule table or a scenario row by row feels routine.
- Take the full 90-question mock for your exam under the 90-minute clock, drill your two lowest domains, then take it again. Each new sitting draws questions you have not seen first.
Common questions
How many questions are on the Security+ exam?
A maximum of 90, multiple-choice and performance-based. Performance-based questions ask you to complete a task, such as matching attacks to log entries, finishing a firewall rule set or ordering incident response steps. CompTIA does not publish how many performance-based questions each exam contains.
How long is the Security+ exam?
90 minutes for both SY0-701 and SY0-801. That is about one minute per question, and performance-based questions take longer, so pacing matters. Our mock exams run on the same 90-minute clock.
What score do you need to pass Security+?
750 on a scale of 100 to 900. CompTIA scales scores and does not publish how raw answers convert. Our mock shows your raw points, a score for every domain and an estimated scaled score from a straight-line conversion, so read it as a guide rather than a guarantee.
Should I take SY0-701 or SY0-801?
Both lead to the same Security+ certification, valid for three years. SY0-701 stays available in English until June 11, 2027, and SY0-801 launches on or around November 17, 2026. SY0-801 shifts weight toward General Security Concepts and Threats, cuts Program Management from 20% to 14%, and adds AI threats such as prompt injection and data poisoning. If your study material is built for SY0-701 and your date is before mid-2027, SY0-701 is a sound choice; otherwise prepare for SY0-801. We have a full mock for each.
What are performance-based questions on Security+?
Performance-based questions (PBQs) ask you to complete a task instead of picking one answer: match items, fill in a configuration, analyze a log or put steps in order. Our performance-based drill and both mocks include them, answered row by row from a list of choices, with a note on every row.
How much does Security+ cost to retake?
You pay the full exam price for every attempt; CompTIA offers no free retests or retake discounts. There is no waiting period between a first and second attempt, and you must wait at least 14 calendar days before a third or later attempt.
Is this Security+ practice test like the real exam?
The mocks follow the real format: 90 questions in 90 minutes, drawn in the official share for each domain of SY0-701 or SY0-801, with performance-based questions, choose-two questions, skip, back and mark-for-review navigation. Every question is original and written to the CompTIA exam objectives; none comes from the real exam.
How long does Security+ stay valid?
Three years from the date you pass. You renew by earning 50 continuing education units in that time, or by passing a newer version of the exam or a higher-level CompTIA certification.
Ready for exam day?
90 questions in 90 minutes, performance-based questions included, drawn in the official share for each domain, with a score for every domain and a note on every answer.
Or start with a free drillSources
Original practice questions for exam preparation, written to the CompTIA Security+ SY0-701 domain weights and the SY0-801 exam objectives; none comes from a real exam. Independent practice, not affiliated with or endorsed by CompTIA or Pearson VUE. CompTIA and Security+ are trademarks of CompTIA, Inc.