COMPTIA SECURITY+ / EXAM GUIDE Know the exam format.
Plan your time.
Review question types, the time limit, and the scaled score before you build a practice routine.
Published by PrepForCerts · Editorial responsibility and sources · Updated
How Many Questions Are on the CompTIA Security+ Exam? Complete 2026 Guide
One of the most common questions candidates ask is "How many questions are on CompTIA Security+?" The answer matters more than you might think for planning your Security+ preparation strategy.
The CompTIA Security+ certification from CompTIA validates your expertise in this field. This guide covers Up to 90 questions across 90 minutes, the 750/900 passing threshold, and strategic approaches for each question type. From time management to scoring mechanics, here's everything candidates need for effective exam preparation.
Key points for your next step
The CompTIA Security+ exam contains up to 90 questions. You have 90 minutes to complete the exam, and you need a score of 750/900 to pass. The exam includes multiple-choice and performance-based questions (PBQs), testing your knowledge across all certification domains. Understanding the exact structure helps you plan your time and preparation strategy effectively.
- Questions
- Up to 90
- Time Limit
- 90 minutes
- Passing Score
- 750/900
- Question Types
- multiple-choice
Exam reference: SY0-701 has up to 90 questions in 90 minutes and uses a scaled 750/900 passing score. Use the current CompTIA objectives. Study durations and practice percentages here are planning examples, not requirements or pass guarantees. Provider and regional prices change; confirm current costs before purchase.
Retake policy · Renewal routes · CE fees
SY0-701 retirement: English ends June 11, 2027; Japanese, Portuguese, Spanish, and Thai end August 13, 2027. Check the official exam page before booking and choose resources for your exam version.
Security+ uses a scaled passing score of 750 on a 100–900 scale. CompTIA does not publish a fixed raw percentage or number of correct answers needed to pass.
Security+ can support roles such as SOC analyst, security administrator, and security specialist. Compare current job listings for your experience level and location. Pay and hiring decisions depend on more than certification.
Security+ Domain Breakdown
| Domain | % of Exam | ~Questions | Key Topics |
|---|---|---|---|
| General Security Concepts | 12% | ~11 | Security controls, CIA triad, zero trust, AAA, gap analysis |
| Threats, Vulnerabilities, and Mitigations | 22% | ~20 | Threat actors, attack vectors, malware, social engineering |
| Security Architecture | 18% | ~16 | Network architecture, cloud security, resilience, data protection |
| Security Operations | 28% | ~25 | Monitoring, incident response, automation, digital forensics |
| Security Program Management | 20% | ~18 | Governance, risk management, compliance, audits, awareness |
Current vs. Previous Exam Version
| Feature | Previous Version (Retired) | Current Version |
|---|---|---|
| Domains | 5 | 4 (restructured) |
| New Topics | — | Zero trust, automation, threat intelligence, SOAR |
| Emphasis Shift | Implementation-focused | Operations and governance-focused |
Question Types on Security+
Multiple-Choice (number varies)
Single-answer and multiple-select questions. No partial credit for multi-select — you must get all selections correct.
Performance-Based Questions (PBQs)
Typically 3-5 PBQs at the beginning:
- Firewall rule configuration: Create or modify ACLs to allow/deny traffic
- Log analysis: Review logs to identify indicators of compromise
- Network diagram security: Place security devices in correct locations
- Certificate/PKI management: Configure certificate properties
- Incident response ordering: Sequence IR steps correctly
Time Management: Plan for Every Question
You can only miss approximately 15 questions out of 90:
- First pass (55-60 min): Skip PBQs. Answer MC at 40-50 seconds each.
- Second pass (25-30 min): Return to PBQs and flagged items.
- Final review (5 min): Verify no blanks. No penalty for guessing.
With up to 90 questions in 90 minutes, time management is critical. Here's how to approach it:
Calculate Your Average Time Per Question Divide your total time by the number of questions to get your baseline pace. For CompTIA Security+, this works out to approximately 60 seconds per question on average.
Strategy for Maximum Efficiency: 1. First Pass (60% of time): Answer all questions you're confident about. Mark difficult questions for review. 2. Second Pass (30% of time): Return to marked questions and work through them carefully. 3. Final Review (10% of time): Check your answers, especially on high-weighted questions.
PBQ Time Allocation Performance-based questions take longer than multiple-choice. Budget 5-10 minutes per PBQ. Many experts recommend flagging PBQs initially, completing multiple-choice questions first, then returning to PBQs with remaining time.
Don't Get Stuck
If you spend more than 2 minutes on any single multiple-choice question without progress, mark it and move on. Spending too much time on difficult questions can prevent you from answering easier questions you know well.
Security+ vs. Other Cybersecurity Certifications
| Cert | Questions | Time | Score | Cost | Level |
|---|---|---|---|---|---|
| Security+ | Up to 90 | 90 min | 750/900 | Check current provider pricing | Entry |
| CySA+ | Up to 85 | 165 min | 750/900 | Check current provider pricing | Intermediate |
| CASP+ | Up to 90 | 165 min | Pass/Fail | Check current provider pricing | Advanced |
| CISSP | 125-175 | 240 min | 700/1000 | Check current provider pricing | Advanced |
| CEH | 125 | 240 min | 60-85% | Check current provider pricing | Intermediate |
| ISC2 CC | 100 | 120 min | 700/1000 | Check current provider pricing | Entry |
Critical Topics to Master
Zero Trust Architecture
Know: never trust/always verify, least privilege, microsegmentation, continuous authentication, assume breach mentality. Understand application to network design, cloud, and identity management.
Cryptography Essentials
Symmetric vs. asymmetric encryption, hashing (SHA-256, MD5), digital signatures, PKI lifecycle, TLS/SSL handshake, key exchange (Diffie-Hellman, ECDHE).
Incident Response
Preparation → identification → containment → eradication → recovery → lessons learned. SIEM configuration, threat hunting, SOAR automation, vulnerability management lifecycle.
Study Preparation
- Week 1-2: General Security Concepts + Threats fundamentals
- Week 3-4: Security Architecture + cryptography deep dive
- Week 5-6: Security Operations + incident response
- Week 7-8: Security Program Management + governance
- Week 9-10: Full practice exams + targeted weak-area review
Frequently Asked Questions
CompTIA Security+ Exam Structure Overview
The CompTIA Security+ exam is designed to thoroughly assess your knowledge and skills. Here's the complete breakdown of what you'll face:
Total Questions: Up to 90 Time Allowed: 90 minutes Passing Score: 750/900 Number of Exams: 1
The exam is administered by CompTIA and can be taken at authorized testing centers or online with live proctoring. The questions are designed to test both theoretical knowledge and practical application of concepts.
Types of Questions You Will See
The CompTIA Security+ exam includes multiple-choice and performance-based questions (PBQs). Understanding each question type helps you prepare effectively:
Multiple-Choice Questions (MCQ) The majority of questions are traditional multiple-choice with four answer options. Some questions may have multiple correct answers, which will be clearly indicated (e.g., "Select TWO answers").
Performance-Based Questions (PBQs) PBQs require you to complete tasks in a simulated environment. You might configure settings, troubleshoot issues, or demonstrate hands-on skills. These typically appear at the beginning of the exam and are weighted more heavily in scoring.
Question Distribution by Domain
Questions are distributed across all exam domains based on their weight in the exam objectives. Higher-weighted domains have more questions. Review the official exam objectives to understand the percentage breakdown for each domain.
Scoring and Passing Requirements
Understanding how CompTIA Security+ scoring works helps you set realistic goals:
Linear Scoring Your score is based on the percentage of questions answered correctly, weighted by domain importance. Some questions may be unscored "beta" questions being tested for future exams, but you won't know which ones—answer all questions as if they count.
Security+ requires a scaled score of 750 on a 100–900 scale. CompTIA does not publish a fixed raw percentage or number of correct answers needed to pass. Practice-test percentages are study benchmarks, not a direct conversion to the exam score.
Score Report
After the exam, review the overall scaled score and the objectives listed on your score report. Use those objectives to focus further study and professional development; do not treat them as published domain percentage scores.
How to Prepare for up to 90 Questions
Preparing for up to 90 questions across all domains requires a strategic approach:
1. Master the Exam Objectives Every question is tied to the official exam objectives. Get the current objectives from CompTIA and use them as your study checklist.
2. Practice with Realistic Questions Complete at least 500+ practice questions before your exam. Focus on questions that match the exam format, including multiple-choice and performance-based questions (PBQs).
3. Time Your Practice Exams Take full-length practice exams under timed conditions. This builds stamina and helps you calibrate your pacing for the real exam.
4. Focus on Weak Domains Use practice test results to identify domains where you score below 80%. Concentrate additional study time on these areas.
5. Understand, Don't Memorize With up to 90 questions covering diverse scenarios, memorization alone won't work. Focus on understanding concepts so you can apply them to novel situations.
More study tips
Focus on the official CompTIA exam objectives as your study checklist—every question ties directly to these objectives.
CompTIA scenario questions often include irrelevant details. Identify what they're actually asking before reading answer choices.
Use CompTIA CertMaster Labs or similar environments to get hands-on practice that mirrors PBQ scenarios.
CompTIA exams test both theoretical knowledge and practical application—balance your study between concepts and labs.
Review CompTIA's official acronym list—you'll encounter many during the exam without explanation.
CompTIA exams often front-load Performance-Based Questions—consider flagging them initially and returning after completing multiple-choice sections.
Mistakes to check for
Focusing too heavily on areas you're already comfortable with instead of weak spots.
Underestimating scenario-based questions that require applying concepts creatively.
Not allocating enough time for hands-on lab practice alongside theoretical study.
Spending excessive time on difficult questions early, leaving too little for easier ones.
Neglecting official documentation in favor of third-party summaries.
Assuming prior experience alone will carry you through without dedicated study.
Ready to Practice CompTIA Security+ Questions?
Test your knowledge with unlimited adaptive CompTIA Security+ practice questions. Simulate the real exam experience and identify areas for improvement.
Start Free Practice TestHow many questions are on the Security+ exam?
Up to 90 questions in 90 minutes including MC, multi-select, and PBQs.
What is the Security+ passing score?
750/900 (scaled score). Highest in CompTIA's core trio.
CompTIA Security+ requires 750/900 to pass. The passing threshold considers both question difficulty and domain importance. Target 85%+ on practice exams before scheduling your attempt.
How many PBQs are on Security+?
Typically 3-5 covering firewall config, log analysis, PKI, and IR scenarios.
Is Security+ harder than Network+?
Yes. Higher passing score (750 vs 720) and more abstract concepts.
Does Security+ meet DoD requirements?
For government and defense roles, check the current DoD 8140 matrix and the specific employer’s qualification requirements. Eligibility depends on the work role and proficiency level; Security+ does not automatically qualify a candidate for every position.
How long should I study?
6-10 weeks with Network+ experience. 10-14 weeks for beginners.
How much does Security+ cost?
Check current provider pricing
What version is current?
The current Security+ exam features 4 domains with emphasis on operations and zero trust.
Practice Security+ Questions
Test your cybersecurity knowledge with adaptive practice questions covering all Security+ domains.
Start Free Practice Test →More questions about Security+
What is the total question count for Security+?
The CompTIA Security+ exam features up to 90 questions. With 90 minutes allowed, time management is crucial. Note that some exams include unscored beta questions being tested for future use.
Does Security+ include unscored questions?
CompTIA may include unscored "beta" or "pilot" questions for future exam development. Since you can't identify which questions are unscored, treat every question as if it counts toward your final Security+ score.
What question formats does Security+ use?
The CompTIA Security+ exam includes multiple-choice and performance-based questions (PBQs). Expect a mix of single-answer and multiple-response formats. Some questions require selecting multiple correct answers, which will be clearly indicated.
What is the Security+ time limit?
With up to 90 questions in 90 minutes, you have approximately 60 seconds per question on average. Budget extra time for complex scenarios and review.
Does Security+ allow reviewing previous questions?
Yes, CompTIA Security+ allows marking questions for review and returning to them later. Many successful candidates answer confident questions first, then revisit challenging ones.
What's the margin for error on Security+?
Security+ requires a scaled score of 750 on a 100–900 scale. This is not a percentage of correct answers; CompTIA does not publish a fixed raw question count needed to pass.
Is every Security+ exam different?
Yes, CompTIA Security+ draws questions from a large pool and randomizes order. Each attempt presents a unique question set. This prevents memorization of specific question sequences.
Related Security+ resources
Practice and topic review
Study and exam planning
- Security+ Study Guide
- What If I Fail?
- Does Security+ Expire?
- Certification Overview
Complete certification overview and career benefits.
- How to Pass
Study tips and exam strategies
- CompTIA Security+ Exam Objectives & Domains (2026)
Exam objectives
- CompTIA Security+ Renewal: Requirements & Costs (2026)
Renewal & CE
- CompTIA Security+ Weekend Study Plan: Pass While Working Full-Time 2026
Study plan
- Is CompTIA Security+ Hard? Honest Difficulty Analysis for 2026
Difficulty