# SecPlus Mastery

> Mastery-based prep for the CompTIA Security+ (SY0-701) exam: learn one objective at a time, prove retention with quizzes and spaced-repetition review, then simulate the full 90-question exam. An independent study tool, not affiliated with or endorsed by CompTIA.

The free tier covers Domain 1; a one-time 90-Day Pass or Lifetime purchase unlocks all five domains, full mock exams, and adaptive review. Every page listed below is public and free to read.

Written and maintained by Jude Hilgendorf, who passed the CompTIA Security+ (SY0-701) exam in August 2026.

## Security+ exam facts (SY0-701)

These are the canonical facts about the current CompTIA Security+ exam, for quick reference and citation. Full guide: https://secplusmastery.com/security-plus-exam.

- Exam code: SY0-701 (the current version).
- Format: up to 90 questions in 90 minutes, a mix of multiple-choice and performance-based questions.
- Passing score: 750 on a scale of 100 to 900 (scaled, not a straight percentage).
- Cost: about $439 USD at US list price; it varies by region and is often lower with academic or partner discounts.
- Valid for: 3 years, renewable with 50 continuing-education units or a higher CompTIA certification.
- Recommended experience: CompTIA Network+ and about two years in a security or systems administration role (recommended, not required).
- Domains and exam weight: 1. General Security Concepts (12%), 2. Threats, Vulnerabilities, and Mitigations (22%), 3. Security Architecture (18%), 4. Security Operations (28%), 5. Security Program Management and Oversight (20%).
- Pricing on SecPlus Mastery: Domain 1 is free; a one-time 90-Day Pass is $39 and Lifetime is $99. No subscription.

## Study platform
- [SecPlus Mastery](https://secplusmastery.com/): Adaptive lessons, mastery quizzes, spaced-repetition review, and full-length mock exams for the CompTIA Security+ SY0-701 exam.
- [Pricing](https://secplusmastery.com/pricing): Free Domain 1, then a one-time 90-Day Pass or Lifetime unlocks all five domains. No subscription.
- [Free Security+ practice exam](https://secplusmastery.com/security-plus-practice-exam): One full-length SY0-701 practice exam comes free with an account: 90 questions in 90 minutes, 4 PBQs first, scored on the 100 to 900 scale with a breakdown by domain. No card.

## Free practice and reference (no signup)
- [Free Security+ practice questions](https://secplusmastery.com/security-plus-practice-questions): Free SY0-701 practice questions across all five domains, each with the correct answer and a clear explanation.
- [Free SY0-801 practice test](https://secplusmastery.com/security-plus-sy0-801-practice-test): 30 free practice questions for Security+ V8 (SY0-801), written against CompTIA's published objectives, each tagged with the objective it tests and explained.
- [Security+ acronyms glossary](https://secplusmastery.com/glossary): 300+ CompTIA Security+ SY0-701 acronyms, each expanded and explained, with a memory hook for the trickiest ones.

## Free cheat sheets, study plan, comparisons, and per-domain practice
- [Free Security+ Study Tools: 250 Practice Questions](https://secplusmastery.com/free): Every free Security+ SY0-701 tool in one place: 250 explained practice questions, a readiness check, a graded PBQ, drills, and cheat sheets. No signup.
- [Security+ Exam: Format, Cost, and Passing Score](https://secplusmastery.com/security-plus-exam): CompTIA Security+ SY0-701 exam explained: cost, format (90 minutes, up to 90 questions), the 750 passing score, the five domains, and how long to study.
- [Security+ Ports and Protocols Cheat Sheet (SY0-701)](https://secplusmastery.com/security-plus-ports): Free Security+ SY0-701 ports and protocols cheat sheet: every well-known port grouped by service, with secure and insecure pairs flagged. PDF, no signup.
- [Free 30-Day Security+ Study Plan (SY0-701)](https://secplusmastery.com/security-plus-study-plan): A free 30-day Security+ SY0-701 study plan: a daily checklist across all five domains, a printable PDF, and free practice questions and cheat sheets.
- [Security+ Common Attacks Cheat Sheet (SY0-701)](https://secplusmastery.com/security-plus-attacks): Free Security+ SY0-701 attacks cheat sheet: malware types, social engineering, and common network and password attacks, each defined. PDF, no signup.
- [Security+ Cryptography Cheat Sheet (SY0-701)](https://secplusmastery.com/security-plus-cryptography): Free Security+ SY0-701 cryptography cheat sheet: symmetric vs asymmetric, common algorithms (AES, RSA, ECC), hashing, and key concepts. PDF, no signup.
- [How We Verify Our Security+ Practice Questions](https://secplusmastery.com/security-plus-question-quality): How each Security+ SY0-701 practice question is made: written to an objective, one defensible answer, every option explained, and an automated check.
- [Free Security+ Practice Test: 30 Questions (SY0-701)](https://secplusmastery.com/security-plus-practice-test): A free 30-question CompTIA Security+ SY0-701 practice test across all five domains, with the correct answer and a full explanation for each. No signup.
- [Free Security+ Practice Exam: 90 Questions, Timed](https://secplusmastery.com/security-plus-practice-exam): A free full-length Security+ SY0-701 practice exam: 90 questions in 90 minutes, PBQs first, a 100 to 900 score and a domain breakdown. No card needed.
- [Free Security+ Video Lessons: Domain 1 (SY0-701)](https://secplusmastery.com/security-plus-videos): Free CompTIA Security+ SY0-701 Domain 1 videos: security controls, the CIA triad, AAA, Zero Trust, and cryptography. Domains 2 to 5 come with any plan.
- [CompTIA Security+ Salary: What It Pays by Role](https://secplusmastery.com/security-plus-salary): What a CompTIA Security+ holder realistically earns in the US: 2026 pay by role, what drives it, the degree question, and the DoD 8140 salary angle.
- [Security+ Jobs: Roles You Can Get and Career Paths](https://secplusmastery.com/security-plus-jobs): What jobs you can get with CompTIA Security+: the entry roles it maps to, the typical career path, and how it opens government and DoD work.
- [Is Security+ Worth It in 2026? An Honest Look](https://secplusmastery.com/security-plus-worth-it): An honest look at whether CompTIA Security+ is worth it: the real pros and cons, who it helps most, the full cost, and the 2026 entry-level job market.
- [How Hard Is Security+? Difficulty and Study Time](https://secplusmastery.com/security-plus-difficulty): How hard the CompTIA Security+ SY0-701 exam really is, how long it takes to study by background, the hardest domains and PBQs, and how to prepare.
- [Security+ Exam Day: What to Expect (SY0-701)](https://secplusmastery.com/security-plus-exam-day): What to expect on CompTIA Security+ exam day: online OnVUE vs a test center, check-in and ID rules, the format, results timing, and the retake policy.
- [Security+ Exam Objectives: Full SY0-701 Breakdown](https://secplusmastery.com/security-plus-objectives): Every CompTIA Security+ SY0-701 exam objective across all five domains in one list, with each domain's exam weight and free practice questions for each.
- [Security+ Performance-Based Questions (PBQs)](https://secplusmastery.com/security-plus-pbq): What Security+ SY0-701 performance-based questions (PBQs) are, the types you will see, how they are scored, and how to prepare, with worked examples.
- [Security+ Mnemonics and Memory Tricks (SY0-701)](https://secplusmastery.com/security-plus-mnemonics): Free Security+ SY0-701 mnemonics for the hardest acronyms and look-alike pairs: AAA, CIA triad, RADIUS vs TACACS+, IDS vs IPS, RTO vs RPO. PDF, no signup.
- [Security+ Risk Management Cheat Sheet (Domain 5)](https://secplusmastery.com/security-plus-risk-management): Free Security+ SY0-701 risk management cheat sheet: SLE, ARO and ALE, RTO/RPO/MTBF/MTTR, risk responses, BIA, and third-party agreements. PDF, no signup.
- [Security+ SY0-801 (V8): Launch Date and Changes](https://secplusmastery.com/security-plus-sy0-801): Security+ SY0-801 (V8) launches on or around November 17, 2026. The new domain weights, what CompTIA has confirmed, and whether to book SY0-701 or wait.
- [Free SY0-801 Practice Test: 30 V8 Questions](https://secplusmastery.com/security-plus-sy0-801-practice-test): 30 free Security+ SY0-801 (V8) practice questions written against CompTIA's published objectives, every answer explained. No account needed.
- [SY0-701 or Wait for SY0-801? Which Security+ to Take](https://secplusmastery.com/security-plus-701-or-801): Take SY0-701 if you can sit it by June 11, 2027. SY0-801 launches on or around November 17, 2026, and both earn the same certificate.
- [AI Security for Security+: Prompt Injection](https://secplusmastery.com/security-plus-ai-security): Prompt injection, model poisoning, and AI-assisted phishing at Security+ level, with the controls that work and nine practice questions. Bonus, not on SY0-701.
- [Security+ Cram Sheet: Last-Minute Review (SY0-701)](https://secplusmastery.com/security-plus-cram-sheet): A free Security+ SY0-701 cram sheet for the last 48 hours: secure port swaps, the risk formulas, the incident response order, and the term pairs people mix up.
- [Security+ in 2 Weeks: A 14-Day Study Plan](https://secplusmastery.com/security-plus-2-week-study-plan): A free 14-day Security+ SY0-701 study plan if you already work in IT: daily topics by domain weight, two timed practice tests, and when to move your date.
- [Failed Security+? Retake Policy and a Plan](https://secplusmastery.com/security-plus-retake): Failed Security+? CompTIA lets you retake right away, then 14 days between later attempts. The rules, the cost, your score report, and a 3-week plan.
- [IDS vs IPS: Difference Explained (Security+ SY0-701)](https://secplusmastery.com/security-plus/ids-vs-ips): IDS vs IPS for the CompTIA Security+ SY0-701 exam. A clear comparison of intrusion detection and prevention: placement, action, and when each is used.
- [Symmetric vs Asymmetric Encryption (Security+)](https://secplusmastery.com/security-plus/symmetric-vs-asymmetric-encryption): Symmetric vs asymmetric encryption for Security+ SY0-701: keys, speed, key distribution, and algorithms like AES, RSA, and ECC, with a clear example.
- [Authentication vs Authorization (Security+ SY0-701)](https://secplusmastery.com/security-plus/authentication-vs-authorization): Authentication vs authorization for CompTIA Security+ SY0-701. Identity versus permissions, the order they happen in, and how both fit the AAA framework.
- [Hashing vs Encryption: The Difference (Security+)](https://secplusmastery.com/security-plus/hashing-vs-encryption): Hashing vs encryption for Security+ SY0-701: one-way integrity versus reversible confidentiality, why passwords are hashed and not encrypted, and examples.
- [TCP vs UDP: Difference Explained (Security+ SY0-701)](https://secplusmastery.com/security-plus/tcp-vs-udp): TCP vs UDP for Security+ SY0-701: connection-oriented versus connectionless, reliability, header size, the 3-way handshake, and which services use each.
- [Vulnerability vs Threat vs Risk (Security+ SY0-701)](https://secplusmastery.com/security-plus/vulnerability-vs-threat-vs-risk): Vulnerability vs threat vs risk for CompTIA Security+ SY0-701. Clear definitions, examples, and how the three relate, plus the four ways to respond to risk.
- [MAC vs DAC vs RBAC: Access Control Models](https://secplusmastery.com/security-plus/mac-vs-dac-vs-rbac): MAC vs DAC vs RBAC for CompTIA Security+ SY0-701. Compare the three access control models by who sets permissions, flexibility, and typical use, with examples.
- [Security+ vs Network+: Which to Take First](https://secplusmastery.com/security-plus/security-plus-vs-network-plus): Security+ vs Network+ compared: focus, exam format, cost, and which CompTIA certification to take first for a cybersecurity or networking career.
- [Security+ vs CySA+: Difference and Which First](https://secplusmastery.com/security-plus/security-plus-vs-cysa-plus): Security+ vs CySA+ compared: foundational security versus a hands-on cybersecurity analyst certification. Focus, exam format, cost, and which to earn first.
- [Security+ vs CISSP: Entry vs Advanced Cert](https://secplusmastery.com/security-plus/security-plus-vs-cissp): Security+ vs CISSP: an entry-level CompTIA cert versus an advanced ISC2 management certification. Experience requirements, exam format, cost, and order.
- [Security+ vs A+: Which CompTIA Cert to Take](https://secplusmastery.com/security-plus/security-plus-vs-a-plus): Security+ vs A+ compared: a cybersecurity certification versus the foundational IT support cert. Exams, cost, difficulty, and which CompTIA cert to take first.
- [Security+ vs CEH: Defense vs Ethical Hacking](https://secplusmastery.com/security-plus/security-plus-vs-ceh): Security+ vs CEH compared: a broad defensive CompTIA cert versus an EC-Council ethical-hacking certification. Focus, exam format, cost, and which to take first.
- [TLS vs SSL: The Difference (Security+ SY0-701)](https://secplusmastery.com/security-plus/tls-vs-ssl): TLS vs SSL for Security+ SY0-701: why SSL is deprecated, how TLS replaced it, the versions that matter, and attacks like POODLE, with a clear bottom line.
- [SIEM vs SOAR: The Difference (Security+ SY0-701)](https://secplusmastery.com/security-plus/siem-vs-soar): SIEM vs SOAR for Security+ SY0-701: log aggregation and alerting (SIEM) versus automated playbook response (SOAR), and how they work together in a SOC.
- [RTO vs RPO: The Difference (Security+ SY0-701)](https://secplusmastery.com/security-plus/rto-vs-rpo): RTO vs RPO for Security+ SY0-701: recovery time versus recovery point, how to tell them apart, and how each drives backup frequency and disaster recovery.
- [WPA2 vs WPA3: The Difference (Security+ SY0-701)](https://secplusmastery.com/security-plus/wpa2-vs-wpa3): WPA2 vs WPA3 for Security+ SY0-701: how SAE replaced the WPA2 4-way handshake, the KRACK weakness, forward secrecy, OWE, and which Wi-Fi security to use.
- [Vulnerability Scan vs Penetration Test (Security+)](https://secplusmastery.com/security-plus/vulnerability-scan-vs-penetration-test): Vulnerability scan vs penetration test for Security+ SY0-701: automated detection versus active exploitation, false positives, and when to use each.
- [Red vs Blue vs Purple Team (Security+ SY0-701)](https://secplusmastery.com/security-plus/red-team-vs-blue-team-vs-purple-team): Red team vs blue team vs purple team for Security+ SY0-701: offense, defense, and how they work together, with the activities and goals of each team.
- [Security+ Domain 1 Practice: Security Concepts](https://secplusmastery.com/security-plus-domain-1-practice): Free Security+ SY0-701 Domain 1 practice questions on General Security Concepts, every answer explained. Domain 1 is about 12% of the exam.
- [Security+ Domain 2 Practice: Threats and Mitigations](https://secplusmastery.com/security-plus-domain-2-practice): Free Security+ SY0-701 Domain 2 practice questions on Threats, Vulnerabilities, and Mitigations, every answer explained. Domain 2 is about 22% of the exam.
- [Security+ Domain 3 Practice: Security Architecture](https://secplusmastery.com/security-plus-domain-3-practice): Free Security+ SY0-701 Domain 3 practice questions on Security Architecture, every answer explained. Domain 3 is about 18% of the exam.
- [Security+ Domain 4 Practice: Security Operations](https://secplusmastery.com/security-plus-domain-4-practice): Free Security+ SY0-701 Domain 4 practice questions on Security Operations, every answer explained. Domain 4 is about 28% of the exam.
- [Security+ Domain 5 Practice: Program Management](https://secplusmastery.com/security-plus-domain-5-practice): Free Security+ SY0-701 Domain 5 practice questions on Security Program Management and Oversight, every answer explained. Domain 5 is about 20% of the exam.

## APlus Mastery (CompTIA A+)

A separate course on the same site and the same account, for the two CompTIA A+ exams. A+ is awarded after passing both Core 1 (220-1201, 675 to pass) and Core 2 (220-1202, 700 to pass); each is up to 90 questions in 90 minutes on a 100 to 900 scale. Domain 1 of each core is free; a one-time A+ 90-Day Pass ($39) or A+ Lifetime ($99) covers both cores and is sold separately from the Security+ plans.

- [APlus Mastery](https://secplusmastery.com/aplus): Lessons, practice questions, spaced review and a timed mock exam for each A+ core, plus drills for connectors, wireless standards, RAID and the Windows and Linux command lines.
- [A+ pricing](https://secplusmastery.com/aplus/pricing): Free Domain 1 of each core, then a one-time 90-Day Pass or Lifetime for both cores. No subscription.
- [A+ Core 1 (220-1201) objectives](https://secplusmastery.com/aplus/220-1201): All five Core 1 domains with their weights and every objective.
- [A+ Core 2 (220-1202) objectives](https://secplusmastery.com/aplus/220-1202): All four Core 2 domains with their weights and every objective.
- [Free A+ video lessons](https://secplusmastery.com/aplus/videos): A free video lesson for every Domain 1 objective of Core 1 and Core 2. Domains 2 and 3 lessons come with an A+ plan, and more domains are on the way.
- [What's new in APlus Mastery](https://secplusmastery.com/aplus/changelog): Changes to the A+ course and the free A+ pages, newest first.
- [Free CompTIA A+ Practice Exam for Core 1 and Core 2](https://secplusmastery.com/aplus/practice-exam): A free full-length CompTIA A+ practice exam for 220-1201 and 220-1202: 90 timed questions per core, four PBQs and a score on the 100 to 900 scale.
- [CompTIA A+ PBQ Practice: Performance-Based Questions](https://secplusmastery.com/aplus/pbq): What CompTIA A+ performance-based questions are, how they're scored and how to handle them on 220-1201 and 220-1202, with two real PBQs to try.
- [CompTIA A+ Ports and Protocols List (220-1201)](https://secplusmastery.com/aplus/ports): All 14 ports on the CompTIA A+ Core 1 (220-1201) list: the number, TCP or UDP, what each one is for and the secure pairs, plus a free quiz.
- [CompTIA A+ Study Plan for Core 1 and Core 2](https://secplusmastery.com/aplus/study-plan): A free week-by-week CompTIA A+ study plan for 220-1201 and 220-1202: 63 objectives at one or two a day, with review days and a practice exam per core.
- [Free A+ practice questions](https://secplusmastery.com/comptia-a-plus-practice-questions): Free Core 1 and Core 2 questions with answers and explanations, no account needed.
- [A+ cheat sheet](https://secplusmastery.com/comptia-a-plus-cheat-sheet): Exam structure, domain weights, ports and RAID levels on one page.

## NetPlus Mastery (CompTIA Network+)

A separate course on the same site and the same account, for the CompTIA Network+ exam (N10-009): up to 90 questions in 90 minutes on a 100 to 900 scale, 720 to pass. Domain 1 (Networking Concepts) is free; a one-time Network+ 90-Day Pass ($39) or Lifetime ($99) opens the rest and is sold separately from the Security+ and A+ plans.

- [NetPlus Mastery](https://secplusmastery.com/netplus): Lessons, practice questions with performance-based items, a timed mock exam and spaced review for Network+ N10-009, plus a ports drill and acronym flashcards. No labs or videos.
- [Network+ pricing](https://secplusmastery.com/netplus/pricing): Free Domain 1, then a one-time 90-Day Pass or Lifetime. No subscription.

## Blog
- [Security+ blog](https://secplusmastery.com/blog): Articles on how the SY0-701 exam is scored, how its questions are built, and the parts people get stuck on.
- [Security+ Port Questions Want the Secure Swap](https://secplusmastery.com/blog/security-plus-port-secure-swap): SY0-701 rarely asks for a port number alone. It asks what replaces a cleartext protocol. Learn ports as secure swaps, and two traps where the port stays put.
- [The Security+ Log Question Has One Right Source](https://secplusmastery.com/blog/security-plus-log-sources): SY0-701 objective 4.9 hands you a scenario and four data sources. It is asking which one answers the question, not what each log happens to contain.
- [Every Security+ Control Answer Needs Two Labels](https://secplusmastery.com/blog/security-plus-control-types): SY0-701 objective 1.1 splits controls into four categories and six types, and asks for both. A guard is always physical, but its type depends on the scenario.
- [Security+ Expires in Three Years: What Renews It](https://secplusmastery.com/blog/security-plus-renewal-ceus): Renewing Security+ takes 50 CEUs in a three-year cycle. The routes that finish it in one activity, the ones capped well short, and what CompTIA rejects.
- [A Practice Exam Score Is Not a Security+ Prediction](https://secplusmastery.com/blog/practice-exam-score-not-a-prediction): Study groups trade rules like "85 percent and you are ready". A vendor percentage and an SY0-701 scaled score measure different things entirely.
- [The Security+ PBQs Are a Time Problem First](https://secplusmastery.com/blog/security-plus-pbq-time-budget): SY0-701 allows a maximum of 90 questions in 90 minutes, and a performance-based question is not a one-minute task. The clock is what usually breaks people.
- [Security+ Acronyms People Mix Up on the Exam](https://secplusmastery.com/blog/security-plus-acronym-pairs): SY0-701 rarely asks what an acronym stands for. It asks which of two neighbours the scenario called for. Five clusters that decide those questions.
- [Why 750 on Security+ Is Not 83 Percent](https://secplusmastery.com/blog/security-plus-scaled-score): The SY0-701 passing score of 750 sits on a 100 to 900 scale that does not start at zero and is not a percentage. Here is what the number actually measures.
- [Security+ Score Report: Every Objective You Missed](https://secplusmastery.com/blog/security-plus-score-report): A failed SY0-701 score report lists the exact objectives you got wrong, so a retake means closing named gaps instead of restudying everything.
- [When Two Security+ Answers Both Look Right](https://secplusmastery.com/blog/two-answers-look-right): The SY0-701 questions that feel unfair usually come down to two controls that both sound right, and which one the scenario actually asked for.

## About
- [Changelog](https://secplusmastery.com/changelog): New features, improvements, and fixes, newest first.
- [Contact](https://secplusmastery.com/contact): Help with an account, billing, refunds, the pass guarantee, content corrections, or privacy.
- [Browser extensions](https://secplusmastery.com/extensions): Free Chrome extensions from the SecPlus Mastery team, including Gmail One-Click Cleaner and RosterBlur.
- [All pages](https://secplusmastery.com/sitemap): The human-readable site index: every free practice set, cheat sheet, guide, and comparison page in one list.

## Policies
- [Privacy Policy](https://secplusmastery.com/privacy)
- [Terms of Service](https://secplusmastery.com/terms)