Security+ SY0-701 vs SY0-801: what is changing in V8
By 8140.study · Published 2026-09-15 · Last updated 2026-09-23
This page compares the two versions using CompTIA’s own documents only: the Security+ V7 page for SY0-701, the V8 page for the confirmed SY0-801 weights and date, and the draft objectives for everything below the domain level. We update it when CompTIA changes any of them.
The exam format does not change
| SY0-701 | SY0-801 | |
|---|---|---|
| Maximum questions | 90 | 90 |
| Time limit | 90 minutes | 90 minutes |
| Passing score | 750 (scale of 100 to 900) | 750 (scale of 100 to 900) |
| Question types | Multiple-choice and performance-based | Multiple-choice and performance-based |
So your time management practice carries over: plan for roughly a minute per question, and expect performance-based questions to take longer than multiple-choice. Every current SY0-701 detail, with its source, is on our Security+ certification page.
Domain weights: SY0-701 vs SY0-801
| Domain | SY0-701 | SY0-801 | Change |
|---|---|---|---|
| 1.0 General Security Concepts | 12% | 16% | +4 points |
| 2.0 Threats, Vulnerabilities, and Attacks | 22% | 24% | +2 points |
| 3.0 Security Architecture | 18% | 19% | +1 points |
| 4.0 Security Operations | 28% | 27% | -1 points |
| 5.0 Security Program Management and Oversight | 20% | 14% | -6 points |
General Security Concepts gains the most, from 12% to 16%. Security Program Management and Oversight loses the most, from 20% to 14%. Domain 2 is renamed from Threats, Vulnerabilities, and Mitigations to Threats, Vulnerabilities, and Attacks, and gains 2 points. Security Operations stays the largest domain at 27%.
Study tip: weight your hours to the version you will actually sit. If that is SY0-701, keep Security Operations (28%) as your biggest block and do not shortchange governance, which is still 20% of that exam. If you are planning around SY0-801, the new weights shift time from governance and compliance toward core concepts and threats.
What the draft says about AI
The draft includes objective 2.6, “Summarize threats and vulnerabilities associated with artificial intelligence (AI) usage,” which lists items such as prompt injection, poisoning, jailbreaking, and hallucinations. Large language models also appear as an attack surface in objective 2.4, and AI capabilities appear under automation and orchestration in objective 4.6. The AI topics are broken down one by one here.
The draft SY0-801 objectives, domain by domain
The draft lists 27 objectives across the five domains. SY0-701 has 28, according to CompTIA. Titles below are exactly as they appear in the draft objectives CompTIA has posted, and a draft can still change before launch.
1.0 General Security Concepts (16%)
- 1.1 Explain security concepts and controls.
- 1.2 Given a scenario, demonstrate the impact of change management processes on security.
- 1.3 Explain the importance of using appropriate cryptographic solutions.
2.0 Threats, Vulnerabilities, and Attacks (24%)
- 2.1 Explain characteristics of threats and vulnerabilities.
- 2.2 Describe common threat actors and motivations.
- 2.3 Describe threat vectors and sources.
- 2.4 Explain types of vulnerabilities and attack surfaces.
- 2.5 Given a scenario, analyze indicators of malicious activity.
- 2.6 Summarize threats and vulnerabilities associated with artificial intelligence (AI) usage.
3.0 Security Architecture (19%)
- 3.1 Compare and contrast security implications of different architecture models.
- 3.2 Given a scenario, manage the security architecture to best protect the infrastructure.
- 3.3 Summarize concepts and strategies used to protect data.
- 3.4 Explain the importance of resilience and recovery in security architecture.
4.0 Security Operations (27%)
- 4.1 Given a scenario, apply mitigating controls, techniques, and solutions to secure the environment.
- 4.2 Explain the security implications of proper hardware, software, and data asset management.
- 4.3 Given a scenario, perform tasks associated with vulnerability management.
- 4.4 Explain security alerting and monitoring concepts and tools.
- 4.5 Given a scenario, apply concepts related to identity and access management.
- 4.6 Given a scenario, apply automation and orchestration solutions to secure operations.
- 4.7 Summarize concepts associated with incident response activities.
- 4.8 Given a scenario, use data, artifacts and sources to support a security investigation.
5.0 Security Program Management and Oversight (14%)
- 5.1 Explain the importance of governance, risk, and compliance artifacts.
- 5.2 Explain the impact of risk management processes on the security of the organization.
- 5.3 Explain the assessment and management processes associated with third-party risk.
- 5.4 Summarize elements of effective security compliance.
- 5.5 Explain concepts associated with audit and assessment activities.
- 5.6 Given a scenario, apply security awareness concepts to improve organizational security.
Should you take SY0-701 or wait for SY0-801?
Both will be available for about seven months. CompTIA has confirmed SY0-801 launches on or around November 17, 2026, and SY0-701 stays available until June 11, 2027 for the English exam and August 13, 2027 for Japanese, Portuguese, Spanish, and Thai. The full timeline, confirmed and reported, is here.
If you are already studying, or you need the certification for a job soon, SY0-701 is the exam available today and its study material is mature. A new exam version always starts with thinner material, and both versions certify you the same way for the same three years. If your realistic exam date falls after the SY0-701 window, plan around the SY0-801 weights and watch for CompTIA to finalize the objectives.
FAQ
What is the difference between SY0-701 and SY0-801?
The format is the same: up to 90 questions, 90 minutes, and a passing score of 750. What changes is the weighting, 16/24/19/27/14 against 12/22/18/28/20, the renaming of Domain 2 to Threats, Vulnerabilities, and Attacks, and a new objective 2.6 covering threats and vulnerabilities of AI usage. CompTIA publishes the weights; the objectives under them are still a draft.
Is SY0-801 available yet?
Not as of September 23, 2026. SY0-701 is the current exam. CompTIA's Security+ V8 page says SY0-801 launches on or around November 17, 2026, and SY0-701 is offered until June 11, 2027 for the English exam.
How many objectives does the draft SY0-801 have?
The draft lists 27 objectives across five domains: 3 in General Security Concepts, 6 in Threats, Vulnerabilities, and Attacks, 4 in Security Architecture, 8 in Security Operations, and 6 in Security Program Management and Oversight. SY0-701 has 28, according to CompTIA.
Studying for Security+ now? Our Security+ course follows the current SY0-701 blueprint, and its first module, General Security Concepts, is free. Or start with our 10 free Security+ practice questions.