CompTIA Security+: the practice module
Exam body: CompTIA. Verified for CompTIA Security+ Certification Exam Objectives, SY0-701 V7 (Document Version 7.0) on October 15, 2026.
What it covers
Covers: single-answer and multiple-answer multiple-choice questions written to this exam’s outline, format and timing.
Does not cover: performance-based, drag-and-drop. DoMcq is multiple-choice only; the real exam’s other item types are out of scope.
Question format
- Every question has exactly 4 options.
- One or more correct answers per question (multiple-answer stems say how many to choose, and are scored all-or-nothing unless the module says otherwise).
- Not allowed as an option: “all of the above”, “none of the above”.
- Stems follow the exam’s conventions, such as “Which of the following best describes”, “Which of the following is the most likely”, “Which of the following would be the most helpful”, “Which of the following attacks is the company facing?”, “Which of the following is the administrator trying to accomplish?”.
Exam mode
The real exam is 90 questions in 90 minutes. Exam mode keeps that pace for any number of questions.
Topics
The official topic list, as the exam body names it. Your questions must use these names; the coverage dashboard compares your set to each topic’s official weight.
| Topic | Weight | Subtopics |
|---|---|---|
| General Security Concepts | 12% | Compare and contrast various types of security controls · Summarize fundamental security concepts · Explain the importance of change management processes and the impact to security · Explain the importance of using appropriate cryptographic solutions |
| Threats, Vulnerabilities, and Mitigations | 22% | Compare and contrast common threat actors and motivations · Explain common threat vectors and attack surfaces · Explain various types of vulnerabilities · Given a scenario, analyze indicators of malicious activity · Explain the purpose of mitigation techniques used to secure the enterprise |
| Security Architecture | 18% | Compare and contrast security implications of different architecture models · Given a scenario, apply security principles to secure enterprise infrastructure · Compare and contrast concepts and strategies to protect data · Explain the importance of resilience and recovery in security architecture |
| Security Operations | 28% | Given a scenario, apply common security techniques to computing resources · Explain the security implications of proper hardware, software, and data asset management · Explain various activities associated with vulnerability management · Explain security alerting and monitoring concepts and tools · Given a scenario, modify enterprise capabilities to enhance security · Given a scenario, implement and maintain identity and access management · Explain the importance of automation and orchestration related to secure operations · Explain appropriate incident response activities · Given a scenario, use data sources to support an investigation |
| Security Program Management and Oversight | 20% | Summarize elements of effective security governance · Explain elements of the risk management process · Explain the processes associated with third-party risk assessment and management · Summarize elements of effective security compliance · Explain types and purposes of audits and assessments · Given a scenario, implement security awareness practices |
Trademarks
DoMcq is an independent practice tool and is not affiliated with, endorsed by or sponsored by CompTIA. Students write their own practice questions to the objectives validated by CompTIA; DoMcq holds no CompTIA materials. CompTIA® and CompTIA Security+ are trademarks or registered trademarks of CompTIA, Inc., used here only to identify the exam.
Use it
Convert questions I already haveGenerate new questions
Free to start. DoMcq never writes or fixes questions; it checks the file your AI produces and gives you the practice system.