Last updated: October 15, 2026.
Passing Security+ SY0-801 (V8) is much easier with a plan that matches the exam's weighting. This eight-week schedule assumes about 8 to 10 hours of study per week. Adjust it up or down based on your background. It is part of our complete guide to Security+ SY0-801.
Before you start
- Download the official SY0-801 objectives from CompTIA and use them as your checklist.
- Remember the weights: Security Operations 27%, Threats, Vulnerabilities, and Attacks 24%, Security Architecture 19%, General Security Concepts 16%, and Program Management and Oversight 14%.
- Pick a test date. Our guide to choosing between SY0-701 and SY0-801 helps you fit the date to the launch and retirement schedule.
The eight-week plan
| Week | Focus | What to do |
|---|---|---|
| 1 | Domain 1: General Security Concepts (16%) | Learn the CIA triad, AAA, zero trust, control categories and types, change management and cryptography basics |
| 2 | Domain 2, part 1: threats and vulnerabilities | Study threat actors, motivations, vectors and attack surfaces |
| 3 | Domain 2, part 2: attacks and AI | Work through malware, social engineering, network, application and credential attacks, indicators of compromise and the AI-related objectives |
| 4 | Domain 3: Security Architecture (19%) | Cover architecture models, zero trust, data protection, resilience and recovery metrics |
| 5 | Domain 4, part 1: Security Operations (27%) | Focus on hardening, firewalls, IDS and IPS, endpoint security, email security, asset and vulnerability management |
| 6 | Domain 4, part 2 | Study monitoring tools, identity and access management, automation, incident response and investigation data sources |
| 7 | Domain 5: Program Management and Oversight (14%) | Cover governance, risk calculations, third-party risk, compliance, audits and awareness training |
| 8 | Review and mock exams | Take timed practice exams, review weak domains and rehearse performance-based tasks |
How to study each week
- Read or watch the material for the week's objectives.
- Take notes in your own words. Explaining a concept simply is the best test of understanding.
- Do hands-on practice. Use labs to work with logs, access controls, scanners and network tools. CompTIA's own hardware and software list for the exam includes items such as Kali Linux, a SIEM, a vulnerability scanner, packet capture tools and cloud access.
- Practice questions on that week's domain, and write down why wrong answers are wrong.
- Review the acronym list. The official objectives include a full list worth reading before test day.
Performance-based questions
The exam includes performance-based tasks, where you act on a scenario rather than pick an answer. Practice by working through realistic tasks such as reading logs, selecting the right control for a scenario, or ordering incident response steps. Reading alone will not prepare you for these.
Common mistakes to avoid
- Spending equal time on all domains even though their weights differ.
- Memorizing acronyms without understanding when to use each control.
- Skipping labs and relying only on videos or books.
- Using unauthorized materials. CompTIA warns that candidates who use them risk having their certifications revoked and being suspended from testing.
- Booking the exam without buffer for a retake.
If you already studied SY0-701
You can shorten this plan. Review our list of differences, then focus on AI, the domains whose weight increased, and timed practice.
Get official materials
Ready to start? Explore official training, practice and hands-on labs in our CompTIA Security+ SY0-801 (V8) collection.
Frequently asked questions
How long does it take to prepare for Security+?
Many candidates need about four to eight weeks of part-time study, depending on experience. The plan above can be stretched or compressed.
Which domain should I study most?
Security Operations and Threats, Vulnerabilities, and Attacks carry just over half of the exam, so give them the most time.
Do I need hands-on experience?
CompTIA recommends about two years as a security administrator, but labs can build practical skills if you are earlier in your career.
Can I use my SY0-701 notes?
Much of the content carries over. Update them with the V8 differences, especially AI.
Written by an instructor who holds Security+, CySA+, PenTest+ and SecurityX. CertInstructor is an Authorized CompTIA Partner.
0 comentarios