How many questions are on the CompTIA Security+ exam?

The CompTIA Security+ exam has 90 questions, and the vendor's published description is: Maximum 90 questions (multiple choice and performance-based), 90 minutes.

How long do you have to complete the CompTIA Security+ exam?

You get 90 minutes, which is about 60 seconds per question. The published format is: Maximum 90 questions (multiple choice and performance-based), 90 minutes.

What score do you need to pass the CompTIA Security+ exam?

The passing score is 75% (750 on a scale of 100-900).

What are the domains on the CompTIA Security+ exam?

There are 5 domains: Security Operations, Security Architecture, General Security Concepts, Threats, Vulnerabilities, and Mitigations, Security Program Management and Oversight. The official weights are Security Operations 28%, Security Architecture 18%, General Security Concepts 12%, Threats, Vulnerabilities, and Mitigations 22%, Security Program Management and Oversight 20%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 28% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the CompTIA Security+ exam?

Yes: 90 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

CompTIA Security+ Exam Format

SY0-701

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. CompTIA Security+ (SY0-701) is a globally recognized vendor-neutral certification that validates practical cybersecurity skills across five domains. The updated 2023 objectives, released on November 7, 2023, emphasize threat analysis, secure architecture, security operations, and security program management. The exam contains 90 questions, including multiple-choice and performance-based questions, and requires a scaled score of 750 to pass. Candidates demonstrate the ability to identify vulnerabilities, implement mitigation strategies, configure secure network and application designs, and apply security policies in realistic scenarios. Security+ covers zero trust, cloud and hybrid environments, digital forensics, incident response, governance, risk, and compliance. The certification is ISO 17024 compliant and is approved by the U.S. Department of Defense for information assurance and cybersecurity roles. Passing this exam proves that a candidate has the technical judgment required to protect systems, detect threats, and respond effectively to security incidents. It is an ideal baseline certification for security professionals and a frequent requirement for government, defense, and enterprise cybersecurity positions.

90 questions

90 min

75% to pass

5 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	90
Time limit	90 minutes (60s per question)
Passing score	75% — 750 on a scale of 100-900
Domains	5
Level	Professional
Question bank here	90 questions
Published format	Maximum 90 questions (multiple choice and performance-based), 90 minutes
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Security Operations	28%	Incident response lifecycle and procedures Digital forensics and evidence collection Monitoring, logging, detection, and alerting +2 more	24
Security Architecture	18%	Secure network, systems, cloud, and enterprise architecture Zero trust and defense in depth models Secure software development, deployment, and automation +2 more	17
General Security Concepts	12%	Security control types and control solutions Core security principles such as CIA, AAA, least privilege, and zero trust Cryptography and public key infrastructure essentials +1 more	11
Threats, Vulnerabilities, and Mitigations	22%	Threat actors, motivations, attack surfaces, and attack vectors Social engineering, phishing, and physical attacks Malware, network, wireless, application, and supply chain attacks +2 more	20
Security Program Management and Oversight	20%	Risk management and business impact analysis Security governance, policies, standards, and procedures Compliance, auditing, and assessments +2 more	18

The heaviest domain is Security Operations at 28%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Security+ V8 (SY0-801) launches on or around 2026-11-17: maximum 90 questions, 90 minutes, passing 750/900, English only. English V7 retires 2027-06-11 (Japanese, Portuguese, Spanish and Thai on 2027-08-13). Voucher is single use and redeemable within 12 months. Official exam page