CompTIA · SY0-701
SY0-701 exam objectives explained
28 official objectives across 5 domains. Each page explains the objective in plain English, lists what candidates commonly mix up, and has practice questions with answers.
General Security Concepts12% of the exam
- 1.1 Security controlsCompare and contrast various types of security controls.
- 1.2 Fundamental security conceptsSummarize fundamental security concepts.
- 1.3 Change managementExplain the importance of change management processes and the impact to security.
- 1.4 Cryptographic solutionsExplain the importance of using appropriate cryptographic solutions.
Threats, Vulnerabilities, and Mitigations22% of the exam
- 2.1 Threat actors and motivationsCompare and contrast common threat actors and motivations.
- 2.2 Threat vectors and attack surfacesExplain common threat vectors and attack surfaces.
- 2.3 Types of vulnerabilitiesExplain various types of vulnerabilities.
- 2.4 Indicators of malicious activityGiven a scenario, analyze indicators of malicious activity.
- 2.5 Mitigation techniquesExplain the purpose of mitigation techniques used to secure the enterprise.
Security Architecture18% of the exam
- 3.1 Architecture modelsCompare and contrast security implications of different architecture models.
- 3.2 Securing enterprise infrastructureGiven a scenario, apply security principles to secure enterprise infrastructure.
- 3.3 Protecting dataCompare and contrast concepts and strategies to protect data.
- 3.4 Resilience and recoveryExplain the importance of resilience and recovery in security architecture.
Security Operations28% of the exam
- 4.1 Securing computing resourcesGiven a scenario, apply common security techniques to computing resources.
- 4.2 Asset managementExplain the security implications of proper hardware, software, and data asset management.
- 4.3 Vulnerability managementExplain various activities associated with vulnerability management.
- 4.4 Alerting and monitoringExplain security alerting and monitoring concepts and tools.
- 4.5 Enhancing enterprise securityGiven a scenario, modify enterprise capabilities to enhance security.
- 4.6 Identity and access managementGiven a scenario, implement and maintain identity and access management.
- 4.7 Automation and orchestrationExplain the importance of automation and orchestration related to secure operations.
- 4.8 Incident responseExplain appropriate incident response activities.
- 4.9 Data sources for investigationsGiven a scenario, use data sources to support an investigation.
Security Program Management and Oversight20% of the exam
- 5.1 Security governanceSummarize elements of effective security governance.
- 5.2 Risk managementExplain elements of the risk management process.
- 5.3 Third-party riskExplain the processes associated with third-party risk assessment and management.
- 5.4 Security complianceSummarize elements of effective security compliance.
- 5.5 Audits and assessmentsExplain types and purposes of audits and assessments.
- 5.6 Security awarenessGiven a scenario, implement security awareness practices.
Objective numbers and statements from CompTIA's published SY0-701 exam objectives. The explanations are our own. Not affiliated with CompTIA.