Security+ · version guide
SY0-701 vs SY0-801: what changed and which to take
Same five domains, new weights and new AI objectives. Here is the difference in one page.
Domain weights, side by side
| Domain | SY0-701 | SY0-801 (V8) | Change |
|---|---|---|---|
| 1. General Security Concepts | 12% | 16% | +4 |
| 2. Threats, Vulnerabilities & Mitigations / Attacks | 22% | 24% | +2 |
| 3. Security Architecture | 18% | 19% | +1 |
| 4. Security Operations | 28% | 27% | −1 |
| 5. Security Program Management & Oversight | 20% | 14% | −6 |
What is new in V8
Large language models
A new objective covers how LLMs are used and attacked, including prompt injection against AI assistants.
AI in threats
A new objective covers AI-generated phishing, deepfakes and AI-assisted attacks, and how to defend against them.
Less governance weight
Program management drops from 20% to 14%, while threats and core concepts gain weight.
What stays the same
Both versions test the same five areas: core security concepts, threats and how to stop them, secure architecture, day-to-day security operations, and governance and risk. The question style is the same too: short scenarios, "BEST", "FIRST" and "MOST likely" wording, multi-response items and performance-based questions that make you read logs, rules or reports. If you have already studied SY0-701, most of that knowledge carries over to V8.
Which version should you study?
| Your situation | Study | Why |
|---|---|---|
| Exam booked before SY0-701 retires | SY0-701 | You are tested on the version you book. Finish what you started. |
| Starting now, testing months from now | SY0-801 | You avoid relearning the new AI objectives and weights later. |
| Employer or DoD 8140 role requires Security+ | Either | Both versions earn the same Security+ certification. |
| Already scoring 80%+ on SY0-701 practice | SY0-701 | Book the exam while the version is still available. |
How to adapt your study plan for V8
Add the AI material. Learn how large language models work at a high level, how prompt injection and data poisoning attack them, and how organizations govern AI tools with acceptable-use policies and human review.
Shift time toward threats and concepts. Domains 1 and 2 together rise from 34% to 40% of the exam, so attack recognition and core concepts deserve more of your practice time.
Keep governance sharp but lighter. Program management falls to 14%, yet risk math such as SLE, ALE and ARO still appears. Do not drop it.
Practice on V8-style questions. Timed practice written to the new objectives shows you where the new weights hit your score.
Practice for the version you will sit
SY0-801 · Set 1
Security+ SY0-801 Exam Prep
540 V8 questions, 6 timed exams.
See the course on Udemy →
FAQ
Is SY0-801 harder than SY0-701?
It keeps the same five-domain structure. The biggest changes are new AI and LLM objectives and a heavier weight on threats and general concepts, with less on program management.
Can I still take SY0-701?
Yes, until CompTIA retires it. Retirement is expected in 2027; confirm the date on CompTIA's site before booking.
Which should I study?
Match the exam you will actually sit. If your date is before SY0-701 retires and you are already studying it, finish SY0-701. If you are starting now for a later date, SY0-801 is the safer choice.
Do both versions give the same certification?
Yes. Passing either SY0-701 or SY0-801 earns CompTIA Security+, and both count for roles that require it, such as DoD 8140 positions.
Are there new AI topics on SY0-801?
Yes. V8 adds objectives on large language models and on how AI is used in threats and vulnerabilities, including prompt injection and AI-generated phishing.