How many questions are on the CompTIA CySA+ exam?

The CompTIA CySA+ exam has 85 questions, and the vendor's published description is: Maximum 85 questions, 165 minutes.

How long do you have to complete the CompTIA CySA+ exam?

You get 165 minutes, which is about 116 seconds per question. The published format is: Maximum 85 questions, 165 minutes.

What score do you need to pass the CompTIA CySA+ exam?

The passing score is 83% (750/900 scaled score (scale 100-900)).

What are the domains on the CompTIA CySA+ exam?

There are 4 domains: Security Operations, Vulnerability Management, Reporting and Communication, Incident Response and Management. The official weights are Security Operations 34%, Vulnerability Management 26%, Reporting and Communication 16%, Incident Response and Management 24%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 34% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the CompTIA CySA+ exam?

Yes: 85 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

CompTIA CySA+ Exam Format

CS0-004

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CompTIA Cybersecurity Analyst (CySA+) certification is a globally recognized credential that validates the skills required to proactively defend organizations from cyber threats. It covers behavioral analytics, network security, threat intelligence, and incident response. CySA+ is designed for cybersecurity professionals who apply analytics to detect and mitigate vulnerabilities, respond to incidents, and communicate risks. The exam emphasizes hands-on, performance-based tasks to ensure candidates can operate effectively in real-world security operations centers. This certification aligns with job roles such as SOC analyst, security analyst, and incident responder, and prepares candidates for advanced certifications like CISSP and CISM.

85 questions

165 min

83% to pass

4 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	85
Time limit	165 minutes (116s per question)
Passing score	83% — 750/900 scaled score (scale 100-900)
Domains	4
Level	Expert
Question bank here	85 questions
Published format	Maximum 85 questions, 165 minutes
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Security Operations	34%	Apply environmental reconnaissance techniques using threat intelligence and open-source intelligence (OSINT) Analyze network traffic and logs to identify suspicious patterns Implement host-based security controls (endpoint detection, host firewalls) +3 more	29
Vulnerability Management	26%	Plan and conduct vulnerability scans using tools such as Nessus, Qualys, and OpenVAS Interpret and prioritize scan results based on risk and exploitability Remediate vulnerabilities through patch management, configuration changes, and compensating controls +3 more	22
Reporting and Communication	16%	Communicate technical findings to non-technical stakeholders clearly and concisely Create and deliver security reports (executive summaries, incident reports, vulnerability metrics) Work with audit and compliance teams to ensure adherence to regulations (GDPR, PCI DSS, HIPAA) +2 more	14
Incident Response and Management	24%	Implement incident response procedures aligned with NIST and SANS frameworks Perform forensic analysis using memory, disk, and network forensics techniques Contain and eradicate incidents using isolation, removal, and recovery procedures +3 more	20

The heaviest domain is Security Operations at 34%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: CompTIA's own blog (2026-06-12) lists 425 USD while the live store shows 439 USD; Voucher Plus Retake Assurance is 579 USD. Official exam page