Browse Definitions :
Definition

CompTIA Security+

CompTIA Security+ is a certification for basic security practices and functions. The Computing Technology Industry Association (CompTIA) advertises this security certification as one of the first security-based certifications information technology professionals should earn.

This certification exam can be taken online or in person at a designated test center. The test takes 90 minutes to complete and requires a passing score of 750 out of 900.

The CompTIA Security+ certification is good for three years and covers subject areas such as:

Recommended prerequisites

CompTIA does not set prerequisites for the Security+ certification. There are no age or educational requirements, but CompTIA does recommend that a candidate has at least two years of IT administration experience with a focus on security.

It is important to note that CompTIA Security+ gets updated every three years to meet any changes to industry needs. Certification renewals help ensure that IT pros have the skills needed for modern cybersecurity jobs.

Skills covered on the CompTIA Security+ exam

The CompTIA Security+ exam focuses on best practices for risk management and mitigation. Exam questions span subject matters such as threats and vulnerabilities, incident response, architecture design and implementation, compliance and governance. The exam focuses on these subjects because they relate to the typical responsibilities of a security or systems administrator. Certified individuals should be able to troubleshoot security issues, understand wired and wireless network architecture concepts and be able to install and deploy network components and configure identity and access services.

As an example, test takers should be familiar with:

Upon certification, successful candidates will be able to demonstrate working knowledge of security concepts, tools and procedures; respond to security threats, participate in risk mitigation activities, respond to threat analysis and work within the constraints of applicable policies and regulations.

How to prepare for the CompTIA Security+ exam

Candidates can expect a mix of 90 multiple choice, drag-and-drop and performance-based questions. Performance-based questions focus on practical ability questions to identify and address security threats, attacks and vulnerabilities.

CompTIA offers a range of prep tools that includes study guides, eLearning and online courses. For example, they offer an Official CompTIA Security+ Study Guide, a CertMaster eLearning and test prep, live online training and CompTIA Labs -- a virtual lab environment.

Test takers should study for:

  • Threats, attacks and vulnerabilities. Be able to identify and analyze any indicators of compromise.
  • Identity and Access Management (IAM). Be able to implement IAM controls and account management controls.
  • Cryptography. Be able to identify and implement basic concepts of cryptography.
  • Risk management. Be able to identify the importance of policies, plans and procedures in security.
  • Technologies and tools. Be able to troubleshoot common security issues with software tools.
  • Architecture and design. Be able to summarize the concepts behind secure application development and deployment, as well as concepts behind securing clouds and virtualization.

How much does the CompTIA Security+ exam cost?

The CompTIA Security+ exam voucher is priced at $349, with three other options available. These options include:

  • Basic Bundle. $499 -- includes the exam voucher, one test retake and The Official CompTIA Security+ Study Guide e-book.
  • Exam Prep Bundle. $649 -- includes everything in the previous bundle, plus a 12-month individual license for CertMaster Practice for Security+, a knowledge assessment and certification training companion tool.
  • eLearning Bundle. $999 -- includes exam voucher, one test retake, a 12-month individual license for CertMaster Learn for Security+, which is a collection of interactive and self-paced instructional lessons with assessments, and a 12-month individual license for CertMaster Labs for Security+.

Who should take CompTIA Security+?

Anyone looking to start their path in the security field should consider beginning their journey with the CompTIA Security+ certification. CompTIA Security+ demonstrates a person's competency with core knowledge required of any infosec role, including IAM. IT support technicians, and admins or other positions such as security practitioners, should consider this certification. Security practitioners, for example, can pursue this certification prior to Certified Information Systems and Security Professional (CISSP). The CompTIA Security+ credential also counts as one year toward the four years' experience prerequisite of CISSP.

What job roles need the CompTIA Security+ certification?

CompTIA advertises the certification by calling it a "springboard into intermediate-level cybersecurity jobs." Positions that CompTIA Security+ holders hold may include IT and security professional job titles such as:

  • security administrator
  • systems administrator
  • help desk manager/analyst
  • network/cloud engineer
  • security engineer/analyst
  • DevOps/software developer
  • IT auditor
  • IT project manager
  • information security manager
  • security architect
This was last updated in March 2021

Continue Reading About CompTIA Security+

SearchCompliance
  • ISO 31000 Risk Management

    The ISO 31000 Risk Management framework is an international standard that provides businesses with guidelines and principles for ...

  • pure risk

    Pure risk refers to risks that are beyond human control and result in a loss or no loss with no possibility of financial gain.

  • risk reporting

    Risk reporting is a method of identifying risks tied to or potentially impacting an organization's business processes.

SearchSecurity
  • What is cyber hygiene and why is it important?

    Cyber hygiene, or cybersecurity hygiene, is a set of practices individuals and organizations perform regularly to maintain the ...

  • Pretty Good Privacy (PGP)

    Pretty Good Privacy or PGP was a popular program used to encrypt and decrypt email over the internet, as well as authenticate ...

  • email security

    Email security is the process of ensuring the availability, integrity and authenticity of email communications by protecting ...

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • fault-tolerant

    Fault-tolerant technology is a capability of a computer system, electronic system or network to deliver uninterrupted service, ...

  • synchronous replication

    Synchronous replication is the process of copying data over a storage area network, local area network or wide area network so ...

SearchStorage
  • information lifecycle management (ILM)

    Information lifecycle management (ILM) is a comprehensive approach to managing an organization's data and associated metadata, ...

  • WORM (write once, read many)

    In computer media, write once, read many, or WORM, is a data storage technology that allows data to be written to a storage ...

  • direct access

    In computer storage, direct access is the process of reading and writing data on a storage device by going directly to where the ...

Close