The short answer
CompTIA lists no required prerequisites for SY0-801. Anyone can book the exam. The vendor recommends the experience of a security administrator with two years of hands-on work, which is a guide to the level of the questions rather than a rule. Its pages do not name another certification that you must hold first.
Required versus recommended
| What CompTIA says | |
|---|---|
| Required prerequisites | None listed on the V8 page |
| Recommended experience | Security administrator with two years of hands-on experience |
| Recommended earlier certification | None named on the V8 page |
You can check this yourself on the CompTIA Security+ V8 page. The vendor can change its guidance, so look again before you book.
What the recommendation means in practice
Two years as a security administrator is a lot to ask of someone starting out. Many people take Security+ as their first security credential after working in help desk, network or systems roles. The recommendation tells you that questions assume you can picture the real thing: a firewall rule, a user account with too many permissions, a log entry showing a failed login.
If you do not have that experience, you can make up for part of it with practice. Set up virtual machines, read sample logs, and look at the settings of a router or firewall. It will not replace years of work, but it builds the mental pictures that scenario questions need.
Knowledge to bring before you start
You will learn faster if you already know these basics.
Networking
- What an IP address, subnet, port, protocol, router and switch are.
- How DNS, DHCP, HTTP and HTTPS work in outline.
- The difference between TCP and UDP.
Operating systems
- Basic Windows and Linux administration: users, groups, permissions, services, logs.
- What a patch and an update are, and why they matter.
General IT
- The idea of virtual machines and cloud services.
- What an email system, a web server and a database do.
If those areas are shaky, give yourself a week or two of basics before you begin the study plan. Our study plan assumes you can handle these topics.
Skills self-check
Read the list and be honest. Aim for “yes” or “mostly” on most items. A “no” tells you where to start.
- I can explain confidentiality, integrity and availability with an example of each.
- I can explain the difference between authentication and authorization.
- I know what a firewall does and can read a simple allow or deny rule.
- I can explain what a VPN is for.
- I understand the difference between symmetric and asymmetric encryption.
- I can explain what a hash is and what it is not.
- I know what phishing is and can name two variants.
- I know the difference between a vulnerability, a threat and a risk.
- I can describe the main stages of an incident response process.
- I know what multifactor authentication is and why it helps.
- I can explain the idea of least privilege.
- I can describe the difference between a backup and high availability.
- I understand what a policy, a standard and a procedure are.
- I can read a short log extract and spot a suspicious entry.
If you answered “yes” to ten or more, you can start the study plan. If you answered “yes” to fewer than six, begin with basics first.
Earlier certifications
CompTIA’s V8 page does not name a certification as a prerequisite. People often take A+ or Network+ before Security+ because the content overlaps with what Security+ assumes, but that is a common path and not a vendor requirement. If you have solid IT experience, you do not need to hold either one.
Other things to check before you book
- Identification. Testing providers require valid identification. Check the current rules when you schedule.
- Language. SY0-801 is listed in English only.
- Timing. CompTIA expects the exam to launch on or around November 17, 2026. If you want a specific version, check dates and any retirement of the older exam.
- Budget. Exam fees and study materials add up. See certification costs for how to plan.
- Your goal. If a job or contract needs a particular certification, confirm which version it accepts.
Do you need a degree?
No degree is required. CompTIA does not list one on its exam page.
FAQ
Do I need Network+ first?
The vendor does not require it, and its V8 page does not recommend it. Networking knowledge helps, though, so learn those basics if you are new.
Can a beginner take Security+?
Yes, there is no restriction. A beginner should plan more study time and some hands-on practice.
Is the two-year recommendation strict?
No. It describes the expected level, and the exam does not check your work history.
More guides for SY0-801
- SY0-801 Exam Format, Length and Scoring
- SY0-801 Domains Explained With Examples
- SY0-801 Sample Questions With Explanations
- SY0-801 Renewal and Retakes Explained
- Is SY0-801 Worth It? An Honest Look
- SY0-801 Cheat Sheet: Key Facts to Review
- SY0-801 vs CY0-001: Which Exam First?
- SY0-801 vs CS0-004: Which Exam First?
- N10-009 vs SY0-801: Which First?
Next step
Read is SY0-801 hard to judge the effort, then set your plan with the study plan. A first practice set from the SY0-801 practice tests can show you where you are starting.