SecurityMocks

SY0-801 practice questions · updated November 2026

2026 Security+ practice questions by domain, with every option explained

Free CompTIA Security+® practice questions for SY0-801, sorted into the exam’s five domains and 27 objectives. Try a sample question below, then pick a timed domain test, a short mini or quick test, or a ten-question drill on one objective.

Choose a domain test Try a sample question

Written by the SecurityMocks team with AI assistance and checked against CompTIA’s SY0-801 exam page and the sources linked below. Last reviewed 7 November 2026.

Section-wise domain tests

Security+ practice questions by domain: five domain tests

Each domain test is timed, covers every objective in one domain and includes one PBQ. Each bar is that domain’s share of SY0-801. Start the test, or open the domain page for its objectives in plain English.

  1. 1.0

    General Security Concepts

    Security controls and the principles behind them, change management (now tested with scenarios) and choosing the right cryptography. The PBQ is a matching task.

    Start the Domain 1 test Domain 1 practice questions
    16%25 questions · 25 min24 multiple choice + 1 PBQ
  2. 2.0

    Threats, Vulnerabilities, and Attacks New 2.6 · AI

    Who attacks and why, how attacks get in, weak spots, the signs of an attack in progress, threat intelligence and the new AI threats objective. The PBQ is log analysis.

    Start the Domain 2 test Domain 2 practice questions
    24%30 questions · 30 min29 multiple choice + 1 PBQ
  3. 3.0

    Security Architecture

    How architecture choices shift risk, from on-premises to multicloud, plus secure infrastructure, protecting data and recovering from failure. The PBQ is network placement.

    Start the Domain 3 test Domain 3 practice questions
    19%25 questions · 25 min24 multiple choice + 1 PBQ
  4. 4.0

    Security Operations

    The largest domain: hardening, asset and vulnerability management, monitoring, identity and access, automation with AI, incident response and investigations. The PBQ is firewall rules.

    Start the Domain 4 test Domain 4 practice questions
    27%30 questions · 30 min29 multiple choice + 1 PBQ
  5. 5.0

    Security Program Management and Oversight

    Policies and reference documents, managing risk and vendors, compliance and privacy, audits and testing, and security awareness. The PBQ is a matching task.

    Start the Domain 5 test Domain 5 practice questions
    14%25 questions · 25 min24 multiple choice + 1 PBQ
  • Timed, about a minute a question
  • Every objective in the domain
  • One PBQ with partial credit
  • Exam or study mode
  • Results by objective

Domain weights: CompTIA’s Security+ V8 (SY0-801) page, checked 7 November 2026. Objective counts: CompTIA’s published SY0-801 exam objectives (v2.0). Test lengths are our design. See all 27 objectives in the exam objectives checklist.

Security+ quiz

Mini tests and quick tests: a Security+ quiz in 20 or 25 minutes

Both mix all five domains in 25 questions, weighted roughly like the exam. Your result is a percentage with a domain breakdown and the objectives to drill, not a scaled score. Use one as a warm-up, a lunch-break check or a recall test between full mocks.

Mini tests 1–3: 25 questions, 25 minutes, one PBQ

24 multiple-choice questions across the five domains, plus one performance-based question: log analysis in Mini test 1, network placement in Mini test 2 and firewall rules in Mini test 3.

  • Domain 14 questions
  • Domain 26 questions
  • Domain 34 questions
  • Domain 46 questions
  • Domain 54 questions
  • 1 PBQDomain 2, 3 or 4
Start Mini test 1 Mini test 2 Mini test 3

Quick tests 1–3: 25 multiple-choice questions, 20 minutes

No PBQ, so the clock is shorter. A fast way to check recall and scenario reading across every domain.

  • Domain 14 questions
  • Domain 26 questions
  • Domain 35 questions
  • Domain 47 questions
  • Domain 53 questions
Start Quick test 1 Quick test 2 Quick test 3

Mini test or quick test?

25 minutes free

Take a mini test

You also practice one PBQ. That matters: a PBQ is worth more than a single multiple-choice question in our scoring, and PBQs eat the clock.

20 minutes or less

Take a quick test

Pure multiple choice at a steady pace. Good on a commute or the evening before a full mock, when you only want to check recall.

Objective drills

27 objective drills: ten questions on one objective

A drill is study mode for one objective: ten questions, no timer, and every option explained after each answer. It’s put together when you start, with questions you haven’t seen yet first.

  1. Pick an objective

    One your test results flagged, or any of the 27 in the list below.

  2. Answer ten questions

    No timer. Take as long as you need to reason through each scenario.

  3. Read every option

    After each answer you see the verdict and the reason for every option, plus the objective and a source.

  4. Say how sure you were

    Mark each answer sure, unsure or guess. Right answers you guessed are flagged, so you review them like misses.

All 27 Security+ objective drills

Grouped by domain, in our own words. Each one opens in study mode.

Domain 1 · General Security Concepts

Domain 2 · Threats, Vulnerabilities, and Attacks

Domain 3 · Security Architecture

Domain 4 · Security Operations

Domain 5 · Security Program Management and Oversight

Your question history stays in this browser, so a drill can skip what you have already seen. Clearing site data resets it. Your skill map colours each objective by how you have scored so far.

Which format?

Which practice format fits your study session?

Every format draws on the same bank of 552 original questions, each tagged to one objective. Pick by the time you have and what you want to find out.

SecurityMocks practice formats for SY0-801. Test lengths and scoring are our design, not CompTIA’s.
FormatQuestionsTimePBQsResultBest for
Domain tests (5)25 or 3025 or 30 min1Estimated 100–900 score in exam modeFinding which objectives in one domain cost you points
Mini tests (3)2525 min1PercentageA mixed check that includes PBQ practice
Quick tests (3)2520 min0PercentageA fast mixed check of recall
Objective drills (27)10Untimed0PercentageFixing one weak objective, with feedback after each answer
Full-length SY0-801 practice exams (4)9090 min4Estimated 100–900 score in exam modeCheckpoints and a final rehearsal

Questions are shared across the shorter formats, so a question you miss in a drill can turn up again in a mini test. That way you find out whether you learned the idea or just remembered the answer.

Sample questions

Security+ sample questions, with every option explained

An original question on AI threats, new in SY0-801. Pick an answer to see why each option is right or wrong.

SY0-801 · 2.6AI threats
Study mode

A company periodically fine-tunes its code assistant on internal repositories. A departing developer commits dozens of files containing a hardcoded login bypass, and after the next fine-tuning run the assistant starts suggesting that bypass to colleagues. Which of the following threats does this describe?

Pick an answer to see why each option is right or wrong.

Takeaway: tampered training data is poisoning; tampered input at use time is prompt injection. Sources: NIST AI 100-2 E2025 · OWASP Top 10 for LLM Applications: LLM04 Data and Model Poisoning

AI threats in SY0-801, explained Report an error

Sample question: network attacks

A question on reading the signs of an attack (objective 2.5): one resolver gives the wrong answer, and you decide why. Every option explained.

Domain 2 sample

Sample PBQ: firewall rules

Edit a rule table where order matters, then see which test connections your rules allow or block. It’s on the Domain 4 page.

Domain 4 PBQ

The four-question demo

One firewall PBQ and three multiple-choice questions in 10 minutes, so you can try the timer, flags and review screen first. More formats are in the Security+ PBQ guide.

Try the demo

Inside every question

What every Security+ practice question includes

The same anatomy in every format, from a ten-question drill to a full mock exam. Difficulty ratings are model estimates, not learner data.

  • One objective

    Tagged to a single SY0-801 objective, so your results map onto the exam blueprint.

  • A reason for every option

    One or two sentences per option, tied to the facts in the scenario. PBQs end with a part-by-part debrief.

  • Sources to check

    Links to primary material such as NIST, MITRE, OWASP and IETF RFCs.

  • Original wording

    Drafted with AI against our written benchmark and the public objectives. Never recalled or leaked exam content.

  • Checked three ways

    Three separate AI reviews (technical accuracy, item writing, originality), then the site owner’s approval. How we write questions.

  • Easy to correct

    Spot a mistake? Report it, and fixes go in our changelog.

FAQ

Security+ practice questions FAQ

Are these questions copied from the Security+ exam?

No. Exam content is confidential under CompTIA’s candidate agreement, and using it can cost you your certification. Every question here is original: drafted with AI against our written benchmark, checked by three separate AI reviews and approved by the site owner before it goes live.

Are the Security+ practice questions free?

The sample questions on these pages are free, and so is Mock Test 1, with every explanation. Domain tests, mini tests, quick tests and objective drills are free during launch too, with no sign-up. See pricing.

How many questions are in a Security+ domain test?

25 or 30. The tests for Domains 2 and 4, the two heaviest, have 30 questions in 30 minutes; Domains 1, 3 and 5 have 25 questions in 25 minutes. Each includes one PBQ and covers every objective in its domain.

Is there a short Security+ quiz I can take?

Yes. Each of the three mini tests has 25 questions in 25 minutes, including one PBQ, and each of the three quick tests has 25 multiple-choice questions in 20 minutes. Both mix all five domains. For something shorter still, an objective drill is ten untimed questions.

What types of questions are on the Security+ exam?

Multiple-choice questions and performance-based questions (PBQs), where you complete a task such as editing firewall rules or reading logs. CompTIA doesn’t publish how many of each you’ll get. Our tests include both; see the Security+ PBQ guide.

Are the questions for SY0-801 or SY0-701?

SY0-801, written to version 2.0 of CompTIA’s published objectives, and every question is labeled with the exam version it was written for. If you’re taking SY0-701 before it retires on June 11, 2027, see our SY0-701 guide.

Find out where you stand

Mock Test 1 is a free, 90-question SY0-801 mock exam with every option explained. Take it before you choose which domain to drill. No sign-up, no card.

Start free Mock Test 1 All four mock exams
Illustration of five stacked slabs of different thickness, one for each exam domain