SecurityMocks

Study guide · SY0-801

Security+ study guide 2026: a week-by-week SY0-801 study plan

How long to study for CompTIA Security+® depends on where you start, so here are three plans instead of one. Each works through the five domains in order and uses full mock tests as checkpoints, so you always know whether to move on or slow down.

Take your baseline test Pick a study plan
  • 5 domains
  • 27 objectives
  • 106 acronyms
  • 4 mock checkpoints

How long to study

Pick the study plan that matches where you start

CompTIA doesn’t give a study time, and no single number fits everyone. Treat these as starting points: move on when a checkpoint clears the line, and add a week when it doesn’t.

The 4-week Security+ plan

For people who already work in IT or security and mostly need to fill gaps. If your baseline is far below the line, switch to the 8-week plan.

  1. Week 1

    Baseline, then Domains 1 and 2

    Take Mock Test 1 in exam mode on day one. Then cover core concepts, cryptography and threats, including the new AI objective 2.6.

    Mock Test 1
  2. Week 2

    Domains 3 and 4

    Architecture, then security operations, the biggest domain at 27%. Try a PBQ of each format as you go.

    Mock Test 2
  3. Week 3

    Domain 5 and your weak spots

    Program management and oversight, then the objectives your two mocks flagged. Drill acronyms and ports every day.

    Mock Test 3
  4. Week 4

    Close the gaps, then book

    Domain tests on anything still below the line, one more pass over PBQs, then your final mock. Book when two mocks clear 750.

    Mock Test 4

The 8-week Security+ plan

For people who know networking basics, at roughly A+ or Network+ level, and are newer to security. One domain at a time, heaviest domains split in two.

  1. Week 1

    Baseline and Domain 1

    Mock Test 1 in exam mode, then review every option. Then controls and principles, change management and cryptography (objectives 1.1⁠–⁠1.3).

    Mock Test 1
  2. Week 2

    Domain 2, part 1

    Threat intelligence and vulnerability scoring, threat actors, and how attacks arrive (2.1⁠–⁠2.3).

  3. Week 3

    Domain 2, part 2

    Vulnerabilities and attack surfaces, signs of an attack, and AI threats (2.4⁠–⁠2.6).

    Domain 2 test
  4. Week 4

    Domain 3

    Architecture models, running secure infrastructure, protecting data, resilience and recovery (3.1⁠–⁠3.4).

    Mock Test 2
  5. Week 5

    Domain 4, part 1

    Mitigating controls, asset management, vulnerability management, alerting and monitoring (4.1⁠–⁠4.4).

  6. Week 6

    Domain 4, part 2

    Identity and access, automation and AI tools, incident response, investigation evidence (4.5⁠–⁠4.8).

    Domain 4 test
  7. Week 7

    Domain 5

    Governance documents, risk, third parties, compliance, audits and security awareness (5.1⁠–⁠5.6).

    Mock Test 3
  8. Week 8

    Close the gaps, then book

    Drill the objectives your last two mocks flagged, then PBQs, acronyms and ports. Book when two mocks clear 750.

    Mock Test 4

The 12-week Security+ plan

For people new to IT. Two weeks of networking basics first, because Security+ questions assume you can read a port number or an address range.

  1. Week 1

    A first look and networking basics

    Take Mock Test 1 to see the format, and don’t worry about the score. Then start on ports, protocols and how traffic moves.

    Mock Test 1
  2. Week 2

    Networking basics, continued

    IP addresses and subnets, common services and their ports, and what firewalls and VPNs do.

    Ports drill
  3. Week 3

    Domain 1, part 1

    Security controls, core principles and change management (1.1⁠–⁠1.2).

  4. Week 4

    Domain 1, part 2

    Cryptography: symmetric and asymmetric encryption, hashing and certificates (1.3).

    Domain 1 test
  5. Week 5

    Domain 2, part 1

    Threat intelligence and vulnerability scoring, threat actors, and how attacks arrive (2.1⁠–⁠2.3).

  6. Week 6

    Domain 2, part 2

    Vulnerabilities and attack surfaces, signs of an attack, and AI threats (2.4⁠–⁠2.6).

    Domain 2 test
  7. Week 7

    Domain 3

    Architecture models, secure infrastructure, protecting data, resilience and recovery (3.1⁠–⁠3.4).

    Mock Test 2
  8. Week 8

    Domain 4, part 1

    Mitigating controls, asset management and vulnerability management (4.1⁠–⁠4.3).

  9. Week 9

    Domain 4, part 2

    Alerting and monitoring, identity and access, automation and AI tools (4.4⁠–⁠4.6).

  10. Week 10

    Domain 4, part 3

    Incident response and investigation evidence (4.7⁠–⁠4.8).

    Domain 4 test
  11. Week 11

    Domain 5

    Governance documents, risk, third parties, compliance, audits and security awareness (5.1⁠–⁠5.6).

    Mock Test 3
  12. Week 12

    Close the gaps, then book

    Drill flagged objectives, PBQs, acronyms and ports, then your final mock. Book when two mocks clear 750.

    Mock Test 4
  • Domain 1
  • Domain 2
  • Domain 3
  • Domain 4
  • Domain 5
  • Networking basics
  • Review
  • Mock test

Using practice tests well

The practice-test loop behind every plan

A mock test is a measurement, then a lesson. Run the same four steps at every checkpoint.

  1. Exam mode first

    Timed, no notes, explanations locked until you submit. It’s the only way to get an honest score.

  2. Review every option

    Read why the right answer is right and why each wrong one is wrong, including questions you guessed correctly.

  3. Drill what you missed

    Your results list the objectives that cost you most. Take the domain test or drill for each one.

  4. Take the next mock

    A fresh test, not a retake. Retaking the same questions mostly measures memory.

Repeat until you clear 750 on two different mocks

How the 750 line is estimated, and what counts as ready, is on Security+ passing score. While we launch, every mock test and domain test is free.

What to study

What to study for Security+

The exam objectives are the syllabus. Each block below is as wide as the domain’s share of SY0-801 and opens that domain’s practice test.

Which study guide book? This page is a free study plan, not a book. If you want a printed or e-book study guide to read alongside it, choose one written for SY0-801: check that the cover or the publisher’s page names that exam code, because a SY0-701 edition won’t cover new objectives such as 2.6 on AI threats. Our guide to the best Security+ books compares the main study guides, shows which have an SY0-801 edition yet and explains how to pick one.

Your Security+ study toolkit

Free study pages that sit alongside the plan.

FAQ

Security+ study plan FAQ

How long does it take to study for Security+?

It depends on where you start, and CompTIA doesn’t give a figure. As starting points, our plans run about 4 weeks for people already working in IT or security, 8 weeks with networking basics, and 12 weeks for people new to IT. Your first mock test score is the best guide to which one fits.

What is the best way to study for Security+?

Study to the exam objectives, then practice applying them to short scenarios. Use timed, full-length mock tests as checkpoints, read why every wrong option is wrong, drill the objectives you miss, and practice PBQs, acronyms and ports along the way.

Can you pass Security+ in a month?

Some people do, mostly those who already work in IT or security. Take a full mock test first: if your baseline is already close to the pass line, a four-week plan is realistic. If it’s far below, plan longer rather than rushing.

How many practice tests should I take before the Security+ exam?

Enough to clear the pass line on more than one test you haven’t seen before. Our plans use four full mock tests as checkpoints: a baseline, two progress checks and a final rehearsal, with domain tests in between.

What should I study first for Security+?

Take a baseline mock test, then start with Domain 1, General Security Concepts, because later domains build on its controls, principles and cryptography. If ports and protocols are new to you, learn those first.

Can I use a SY0-701 study guide for SY0-801?

Much of the core carries over, but SY0-801 adds an objective on AI threats and other new topics, and stops naming some SY0-701 terms. Use material labeled with the version you’re taking, and check SY0-801 vs SY0-701 for the differences.

Start week one with a baseline

Every plan begins with free Mock Test 1. Your results show which plan fits and which domain to study first.

Start free Mock Test 1 All practice tests
Illustration of five stacked slabs of different thickness, one for each exam domain