The short answer
SY0-801 is the exam code for version 8 of CompTIA Security+, the vendor-neutral entry point into hands-on security work. It has a maximum of 90 questions, runs 90 minutes, and needs a score of 750 on a scale of 100 to 900. CompTIA expects it to launch on or around November 17, 2026, so this page describes the exam as the vendor has published it today.
What the exam is
Security+ checks that you can handle the day-to-day work of a security administrator. That means choosing the right control for a problem, reading signs of an attack, setting up access rules, responding to an incident, and understanding the governance rules that sit behind all of it.
It is not a deep specialist exam. It is wide. You will see cryptography next to change management, cloud architecture next to phishing, and risk math next to log analysis. Most of the work is learning how the pieces connect and which one fits a given scenario.
CompTIA describes the target candidate as a security administrator with two years of hands-on experience. That is a recommendation, not a requirement. See the prerequisites page for what that means in practice.
Format at a glance
| Item | Detail |
|---|---|
| Exam code | SY0-801 (V8) |
| Questions | Maximum of 90 |
| Question types | Multiple-choice and performance-based |
| Time | 90 minutes |
| Passing score | 750 on a scale of 100 to 900 |
| Language | English |
| Expected launch | On or around November 17, 2026 |
The exam format page goes into scoring, retakes and delivery: SY0-801 exam format.
The five domains
CompTIA publishes the share of the exam each domain represents.
| Domain | Weighting |
|---|---|
| 1.0 General Security Concepts | 16% |
| 2.0 Threats, Vulnerabilities, and Attacks | 24% |
| 3.0 Security Architecture | 19% |
| 4.0 Security Operations | 27% |
| 5.0 Security Program Management and Oversight | 14% |
Security Operations is the largest block. Together with Threats, Vulnerabilities, and Attacks it makes up just over half of the exam, so those two domains deserve the most study time. Program Management is the smallest, but it is full of terms that are easy to mix up, such as the different agreement types and assessment types.
For a topic-by-topic walk through, read the domains explained.
What is new in version 8
Version 8 has a dedicated objective on artificial intelligence (objective 2.6), covering threats such as prompt injection, model poisoning, jailbreaking and hallucinations. AI also appears in the automation objective, where it is discussed as a tool for security teams. The vendor’s page highlights Zero Trust principles and modern cloud, hybrid and operational technology environments.
If you were studying for SY0-701, check the current objectives before you decide which exam to book. CompTIA lists June 11, 2027 as the English retirement date for SY0-701 (and August 13, 2027 for Japanese, Portuguese, Spanish and Thai) on its version 7 page, so the older exam stays available for a while after V8 launches.
Who should take it
Security+ suits you if you:
- work in IT support, networking or systems administration and want to move toward security;
- are starting a security career and need a broad, recognized foundation;
- have to show baseline security knowledge for a job role or a contract requirement.
It is less useful if you already work deep in one specialty and need a senior-level credential. Check what your employer or target job actually asks for.
How to prepare
Good preparation has three parts:
- Learn the objectives. CompTIA publishes a free exam objectives document that lists every topic. Treat it as your checklist. You can find it on the CompTIA Security+ V8 page.
- Build understanding, not lists. Know why a control exists, not only its name. Many questions give two reasonable answers and one detail that decides between them.
- Test yourself under time pressure. Practice exams show you which domains need work and whether you can keep pace.
Our study plan lays this out week by week. If you want to know what to expect from the difficulty, see is SY0-801 hard. For general study habits that apply to any IT exam, see how to study for IT certification exams.
Try some questions
The sample questions page has five original questions across the domains, with explanations. They give you a feel for the style of reasoning the exam asks for.
More guides for SY0-801
- SY0-801 Renewal and Retakes Explained
- Is SY0-801 Worth It? An Honest Look
- SY0-801 Cheat Sheet: Key Facts to Review
- SY0-801 vs CY0-001: Which Exam First?
- SY0-801 vs CS0-004: Which Exam First?
- N10-009 vs SY0-801: Which First?
Next step
When you are ready to see where you stand, the SY0-801 practice tests give you five full sets of original practice questions with an explanation for every answer. Start with the study plan if you have not yet set a date.