The complete CompTIA Security+ study library — 27 lessons mapped to every domain and topic in the official exam guide. Free to read, no account needed.
Create a free account to track completed lessons, bookmark topics and see your exam readiness. · Pro lessons unlock with a one-time upgrade.
CompTIA publishes exactly what the SY0-801 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Security concepts and control categories/types, the security impact of change management, and cryptographic solutions. Official weighting 16%.
Threat and vulnerability characteristics, threat actors, threat vectors, vulnerability types, indicators of malicious activity, and AI-related threats. Official weighting 24%.
Security implications of architecture models, securing enterprise infrastructure, data protection, and resilience and recovery. Official weighting 19%.
Mitigating controls, asset management, vulnerability management, monitoring and alerting, identity and access management, automation (incl. AI), incident response, and investigations. Official weighting 27%.
Governance artifacts, risk management, third-party risk, compliance and privacy, audits and assessments, and security awareness. Official weighting 14%.
Reading every note front to back is the slowest way to pass. The exam is weighted, so your revision should be too — the blueprint above tells you exactly where the marks are.
Security Operations carries the most marks on the SY0-801, so it earns the most of your attention. Work down the blueprint from the heaviest domain to the lightest rather than starting at domain 1 and grinding forward.
Read each lesson once without stopping to memorise — you are building a map, not a memory. On the second pass, read only the "what's tested" and key-takeaway blocks. If a takeaway surprises you, that lesson goes back on the pile.
Cover a lesson's key takeaways and try to say them out loud from the heading alone. Recall you can produce under your own steam is the only recall that survives a timed exam; recognition on a re-read is not the same thing.
Finishing the notes is not the goal — scoring is. Move to SY0-801 practice questions early, then come back to the exact lessons your wrong answers point at. That loop is worth far more than a third read-through.
Exam structure, domain weights and scoring on this page come from the official SY0-801 exam guide.