1.0
General Security Concepts
12% of exam- Security control categories (technical, managerial, operational, physical)
- Fundamental concepts (CIA triad, AAA)
- Change management and PKI
- Cryptographic solutions and key management
CompTIA Security+ · SY0-701
Security+ that teaches judgment, not just terminology.
The vendor-neutral cybersecurity credential. Threats and attack types, identity and access, security architecture, operations and incident response. Our Sim shifts you to a SOC environment where you work incident tickets in simulated security tools: contain a compromised host and capture memory before anything destructive, reset an account under attack, search the logs for the breach scope, and spot the red flags in a phishing email.
Format
One exam
Questions
Up to 90
Time
90 min
Pass score
750/900
Exam objectives
What CompTIA Security+ covers.
Pulled from the published CompTIA exam objectives, including CompTIA's own domain weights.
2.0
Threats, Vulnerabilities, Mitigations
22% of exam- Threat actors and motivations
- Common attack types (phishing, vishing, malware, supply chain)
- Vulnerability types and management
- Mitigation techniques and segmentation
3.0
Security Architecture
18% of exam- Architecture models (cloud, hybrid, IaC, SDN, MSP, on-prem)
- Enterprise infrastructure security principles
- Data protection (classification, encryption at rest/in transit)
- Resilience and recovery
4.0
Security Operations
28% of exam- Computing resource security (hardening, configuration)
- Asset management lifecycle
- Vulnerability management workflow
- Security operations (logging, alerting, monitoring)
- Identity and access management (auth, SSO, MFA, federation)
- Automation and orchestration
- Incident response phases
- Investigations and digital forensics
5.0
Security Program Management
20% of exam- Effective security governance
- Risk management process
- Third-party risk and SLAs
- Compliance and audit
- Security awareness practices
Study timeline
How long it takes.
Honest estimates. The platform tracks your progress so you can see when you are ready, not just when the calendar says you should be.
| Hours/week | Weeks to finish the track | Suited for |
|---|---|---|
| 5 hours | 16-20 weeks | Working in IT, evening study |
| 10 hours | 8-12 weeks | Net+ holders moving into security |
| 20+ hours | 5-7 weeks | Dedicated SOC pivot |
Sample question
From the quiz pool.
Domain 2.0 Threats and Mitigations
A caller identifying as the company CEO calls the help desk claiming to be locked out of email before an important board meeting. They cannot recite their employee ID and want a password reset right away. The CEO's actual account shows an active session from the HQ office. What is the most appropriate response?
AReset the password and email it to the caller
BAsk the caller to email IT from the CEO's address to confirm
CRefuse the reset and escalate to security as a potential vishing attemptAnswer
DReset the password and require MFA verification
Why
The real CEO is already signed in from HQ. The unverified caller is using authority and urgency, classic vishing tells. The right move is to refuse the reset, document the call, and escalate to security to investigate. Any other choice could leak credentials to an attacker.
What you get
The whole platform, focused on CompTIA Security+.
Adventure
Story-driven scenarios that teach the why before the what.
Learn more →Study
Filterable flashcard decks plus exam-style quizzes with explanations.
Learn more →Help Desk Sim
A simulated ticket queue modeled on help-desk workflows, with working tools.
Learn more →Practice Exam
Full-length and timed in RTJ's own interface. Mastery Index plus evidence quality.
Learn more →For teachers
Teaching Security+ this year? Skip the prep.
The Teacher pilot includes a 28-lesson Security+ curriculum browser across the SY0-701 blueprint. The learner track is live, while curriculum files, student copies, and answer-key coverage are still being provisioned and verified. The Net+ sample below previews the intended document format.
Questions.
Do I need Network+ before Security+?+
Recommended. Security+ assumes you understand subnetting, common ports, and basic networking. Net+ first makes Security+ noticeably easier.
How does the SOC Sim differ from the help desk Sim in A+?+
Different tools and a different habit. The A+ Sim uses everyday Windows tools like Command Prompt, Task Manager, and Settings; the Sec+ Sim gives you security tools like an identity admin console, endpoint containment, log search, and email security, and it makes you scope and preserve evidence before you act, so you build the incident-response reflex instead of reaching for the destructive button. Bad-faith callers are a recurring archetype in the Sec+ queue rather than an occasional one, because deciding who to trust is the core of the cert. We do not publish a percentage for it.
Is the exam more scenario-based than memorization?+
Yes. Security+ SY0-701 is heavily scenario-driven. The Sim, PBQs, and the 1,141-scene Adventure Mode are all built around that style of question.
Does Security+ have performance-based questions?+
Yes, similar to A+. CompTIA includes PBQs that simulate small configuration tasks. Our Sim mode is the closest equivalent at scale.
Start CompTIA Security+ free. Move when ready.
Free includes one full Adventure lesson per track and 5 Sim tickets per day. No credit card.