Big Changes to the CompTIA Security+ – SY0-701 to SY0-801
Every three years, CompTIA updates the Security+ exam to keep it aligned with the latest IT administration technologies and security strategies. This year, the CompTIA security+ SY0-801 release date is scheduled for November 17, 2026.
If you’re currently preparing to take the CompTIA Security+ exam, familiarizing yourself with these exam changes is an essential part of your study plan. Here’s everything you should know to ace the exam and earn your credential.
What to Know About the CompTIA Security+ Exam Changes
Later this year, CompTIA Security+ is updating from version SY0-701 to SY0-801 (more commonly referred to as the 701 and 801 versions). With each update, the domains, the focus of the exam, and the technologies covered can change.
For that reason, as a cybersecurity professional, you should know about these changes to determine whether to take the current exam, CompTIA Security+ SY0-701, or prepare to take the newest version, CompTIA Security+ SY0-801.
Mark Your Calendar: Important Exam Dates To Know
As mentioned above, the CompTIA Security+ SY0-801 release date is scheduled for November 17, 2026. Whether you’re able to take the exam on that exact date or not will depend on the availability of test proctors in your area.
However, the older version, CompTIA Security+ SY0-701, will still be available until it is retired next year on June 11, 2027. During this overlap period, both exam versions will be available. You can choose whichever version you like—passing either of them will award you the CompTIA Security+ certification.
Make sure to be extra careful when purchasing your exam study materials and exam vouchers; triple check you’ve selected the correct version. If you’ve been studying for the 701 version but accidentally buy the 801 exam voucher, you might encounter topics you haven’t studied, which could negatively impact your score.
Does It Matter Which Exam Version You Take?
Here’s my two cents: if you’re already studying for the 701 version, keep studying and take that version. If you haven’t started studying yet (or plan to start after January 2027), study for the new 801 version.
A lot of cybersecurity professionals ask this question: if you choose to take the current version of the exam, will you have to retake it later?
No, you won’t have to retake the exam; whether you pass the 701 version or the 801 version, you’ll still earn the same CompTIA Security+ certification.
To keep your certification valid, you’ll need to recertify every three years. But this doesn’t mean retaking the exam. All it entails is paying a $50 fee and submitting continuing education credits. Maintaining your credential is simple; I’ve maintained my Security+ certification for decades!
What Stays The Same on the CompTIA Security+ SY0-801 Exam
The CompTIA Security+ Exam format remains the same: 90 minutes, 90 questions, a mix of multiple-choice and performance-based simulation questions. The passing score of 750 out of 900 (about 83%) hasn’t changed either.
The names of the five domains that you’ll be tested on have mostly stayed the same as well—with one exception: Domain 2 will change from “Threats, Vulnerabilities, and Mitigations” to “Threats, Vulnerabilities, and Attacks.”
What To Know About the CompTIA Security+ Exam Changes
The best way to understand these exam changes is by looking at the exam objectives, in other words, each of the domains that will be covered on the exam. On the left of the chart below, you’ll see the proportion of exam questions you can expect from each area.
Domain | SY0-701 | SY0-801 |
Domain 1: General Security Concepts | 12% | 16% |
Domain 2: Threats, Vulnerabilities, and Attacks | 22% | 24% |
Domain 3: Security Architecture | 18% | 19% |
Domain 4: Security Operations | 28% | 27% |
Domain 5: Security Program Management and Oversight | 20% | 14% |
While these percentages can give you a good idea, don’t focus too heavily on them. Why? Well, concepts can overlap, distinctions get blurred, and it can be difficult to classify some questions into only one domain.
As far as the changes go, what will be most valuable to you in your study will be paying close attention to the differences within the domains. Let’s dive into each one.
Changes in Domain 1: General Security Concepts
Overall, Domain 1 hasn’t changed much—a few categories have been combined (sections 1.1 and 1.2), meaning there is one less section (section 1.4 disappears), but more or less the same material. The biggest change here is less emphasis on physical security.
As you’ve probably seen in your own work, the role of cybersecurity in the workplace is shifting. Nowadays, organizations rely heavily on cloud infrastructure and AI, and much of the physical security concerns are outsourced or handled separately. These CompTIA Security+ exam changes reflect this shift.
Changes in Domain 2: Threats, Vulnerabilities, and Attacks
Here you’ll find what is perhaps the most beneficial change to the CompTIA Security+ exam… a new section on AI.
Many companies find themselves at the mercy of cyberattacks because of inadequate implementation of AI tools. Others struggle to manage AI costs and outputs. Today’s cybersecurity professionals are in charge of securing those AI tools to protect their clients from attacks.
Changes in Domain 3: Security Architecture
This domain is simple and straightforward; it has stayed mostly the same. However, there is one terminology shift to be aware of. Instead of seeing ICS (industrial control systems) and SCADA (supervisory control and data acquisition), you’ll see OT (operational technology). This term is more modern and all-encompassing.
Changes in Domain 4: Security Operations
You’ll find most of the CompTIA Security+ exam changes here in Domain 4. This section used to be pretty jumbled in the 701 version, but with these updates, it’s a bit more organized. For example, topics like honeypots, honey files, and honey tokens have moved from the physical security area in Domain 1 to Domain 4, which is much more logical since they align more with security operations than physical security.
There’s also a new sub-domain on AI about how to incorporate AI on an operational level. Here, the focus is different from the previous AI section—Domain 2 addresses AI-related threats and vulnerabilities, while this section is focused on AI in security operations.
Changes in Domain 5: Security Program Management and Oversight
Of all the sections, this is the one that has changed the least. It continues to cover familiar topics like risk management, governance, risk and compliance, and risk management processes.
One small terminology change here is from “effective security governance” to “effective governance, risk, and compliance.” This makes more sense, since governance must always include the risk and compliance factor as well. Other than that, it’s very similar to the 701 version.
One More Note: There Are Less Acronyms, But Be Equally Prepared
As I reviewed the changes to the updated CompTIA Security+ SY0-801 exam, I noticed that there are far fewer acronyms. However, I don’t think this means that there are less acronyms tested on the exam. Any of the acronyms from either list could appear on the exam, so it’s best to be prepared and study them all.
Which Version Should You Study For?
The SY0-801 update is largely a restructuring of information. If you’re studying for the SY0-701, you won’t be starting from zero if you switch to the new version. In fact, a lot of the questions from older exams will still be on the newer exams – you’ll still have questions about port numbers and protocols.
The CompTIA Security+ exam changes aren’t a complete overhaul. Quite the contrary—I believe these changes are a welcome refresh that includes relevant new AI topics and more organization in the content structure.
Quick Tips for the CompTIA Security+ SY0-801 Exam:
- If you start studying for the CompTIA Security+ exam after January 2027, study for the 801 version.
- If you’re already studying for the exam, stick with the 701 version—the certification is the same; just make sure you buy the correct exam voucher.
- Aim for a score of 90% on practice tests. Consistently hitting that goal is a good sign you’re ready for the real exam.
- CompTIA Security+ SY0-801 Release Date: November 17, 2026
- CompTIA Security+ SY0-701 Retiring Date: June 11, 2027
If you have questions or need help deciding which exam version is right for you and best your career goals, visit Cyberkrafttraining.com. Prepare to ace your exam on the first try with our CompTIA Security+ Bootcamp, live classes, practice quizzes, and self-paced study options.
