Domain 1 • 12%

General Security Concepts

CIA triad, security controls, risk management fundamentals

Master fundamental security principles, control types, and risk assessment methodologies.

Domain 2 • 22%

Threats, Vulnerabilities & Mitigations

Threat actors, malware, social engineering, attack vectors

Understand various threats, vulnerabilities, and effective mitigation strategies.

Domain 3 • 18%

Security Architecture

Network security, secure protocols, cloud security

Learn secure network design, protocols, and architecture principles.

Domain 4 • 28%

Security Operations

Monitoring, incident response, forensics, vulnerability management

Master security monitoring, incident response, and operational procedures.

Domain 5 • 20%

Security Program Management

Governance, compliance, risk management, policies

Understand governance frameworks, compliance, and security program oversight.

Recommended

Mixed Practice

Questions from all domains mixed together

Test your overall knowledge with questions randomly selected from all exam domains.

Security+ Practice Questions

About Security+ SY0-701 Domains