Security+ V7 or V8? Choosing your version and a study plan for career changers

CompTIA Security+ is one of the most common first certifications for people moving into security. It is broad rather than deep: it checks that you understand the vocabulary, the main attacks, the standard defenses and how a security program fits together. That makes it a good map of the field, and a frequent requirement in job postings for entry-level security roles.

If you are planning to take it now, there is an extra question: CompTIA is replacing the exam. This guide explains the two versions, how to choose, and a plan that works for either.

The two versions at a glance

Security+ V7 (SY0-701)

• Launched November 7, 2023.
• Retires on June 11, 2027 in English, and on August 13, 2027 in Japanese, Portuguese, Spanish and Thai.
• Available in English, Japanese, Portuguese, Spanish and Thai.

Security+ V8 (SY0-801)

• Expected to launch on or around November 17, 2026.
• English only at launch.
• Expected to retire about three years after launch.

Both versions have up to 90 questions, a mix of multiple-choice and performance-based questions, a 90-minute time limit and a passing score of 750 on a scale of 100 to 900. And both lead to the same certification: Security+.

Which version should you take?

• You are already studying for V7 and can test before spring 2027: stay with V7. Study material is mature, practice tests are plentiful, and switching mid-course costs time.
• You prefer to take the exam in a language other than English: V7 is your option until August 13, 2027, since V8 launches in English only.
• You are starting from zero and will test after late 2026: V8 is the better long-term choice, because it reflects the current objectives. Expect fewer books and practice tests in the first months after launch.
• You are unsure: remember that employers ask for Security+, not for a specific exam code. The certification is valid for three years whichever version you pass.

What changes in V8

The five domains stay recognizable, but their weights move:

• General security concepts: 12% in V7 → 16% in V8.
• Threats and vulnerabilities: 22% in V7 (Threats, vulnerabilities, and mitigations) → 24% in V8 (Threats, vulnerabilities, and attacks).
• Security architecture: 18% → 19%.
• Security operations: 28% → 27%, still the largest domain in both.
• Security program management and oversight: 20% → 14%.

CompTIA describes V8 as adding expanded coverage of AI-related risks, security operations and securing modern environments. Use the official exam objectives for your version as your checklist: they list every topic that can appear on the exam, and they are the most reliable study guide you will find.

An eight-week study plan

This plan assumes one to two hours a day and works for either version. If you have no IT background at all, give yourself twelve weeks instead and spend the extra time on networking basics.

1. Week 1: General security concepts

   The CIA triad, types of security controls, zero trust, authentication factors, and the basics of cryptography and certificates. These ideas come back in every other domain, so do not rush them.

2. Weeks 2 and 3: Threats, vulnerabilities and attacks

   Threat actors and their motivations, phishing and other social engineering, malware families, common application and network attacks, and how to recognize them from indicators. Learn each attack together with the control that stops it.

3. Week 4: Security architecture

   Network segmentation, secure protocols, cloud and hybrid models, resilience, backups and data protection. Draw simple network diagrams and place the controls on them; it makes the concepts stick.

4. Weeks 5 and 6: Security operations

   The heaviest domain. Hardening, identity and access management, vulnerability management, monitoring with tools such as a SIEM, and the incident response process from preparation to lessons learned.

5. Week 7: Program management and oversight

   Policies and standards, risk management, third-party risk, audits, compliance and privacy. Less technical, and easy to underestimate: these questions reward precise vocabulary.

6. Week 8: Practice exams and weak spots

   Take full-length practice exams under real time limits. Do not chase the score at first; review every question you missed, go back to that topic, and repeat until you score consistently well across all five domains.

Practice the hands-on parts

Performance-based questions ask you to do something rather than pick an answer: configure a firewall rule, match attacks to controls, or analyze a log. A small lab makes them much less intimidating. A free hypervisor with a Windows evaluation virtual machine and a Linux distribution is enough to read event logs, set file permissions, run a port scan against your own machines and capture traffic. Our Wireshark guide is a good first exercise.

On exam day, a common strategy is to flag the performance-based questions, answer the multiple-choice questions first, and come back with the remaining time.

After you pass

Security+ is valid for three years. You keep it current through CompTIA's continuing education program, for example by earning continuing education units, completing the CertMaster CE course or passing a higher-level CompTIA certification. Many people's next step is a role-focused certification; our SC-200 study plan covers one common path for SOC analysts in Microsoft environments.