{"id":554,"date":"2026-10-05T22:23:32","date_gmt":"2026-10-05T22:23:32","guid":{"rendered":"https:\/\/www.directcertify.com\/blog\/?p=554"},"modified":"2026-10-05T22:23:32","modified_gmt":"2026-10-05T22:23:32","slug":"security-plus-sy0-801-vs-sy0-701-which-exam-2026","status":"publish","type":"post","link":"https:\/\/www.directcertify.com\/blog\/security-plus-sy0-801-vs-sy0-701-which-exam-2026\/","title":{"rendered":"Security+ SY0-801 Launches November 17: What Changed in the Final Objectives and Which Exam to Sit"},"content":{"rendered":"<p>On November 17, CompTIA is set to launch the first new version of Security+ in three years, and the version you can sit today will stop being offered in English on June 11, 2027. That leaves nearly seven months where both exams exist at once, which is plenty of room to make a bad call in either direction: rushing into an exam you are not ready for, or parking a study plan because a newer version is on the horizon.<\/p>\n<p>Most of the coverage so far boils down to &#8220;wait or don&#8217;t wait.&#8221; This guide takes a more practical route. It starts with which dates CompTIA has actually published, walks through what the final Security+ SY0-801 objectives change (the document is at version 2.0, so it is no longer a draft), and then ties the decision to the date you will realistically be ready. Everything here is current as of October 6, 2026.<\/p>\n<h2>Which Security+ Dates Are Confirmed and Which Are Still Estimates<\/h2>\n<h3>What CompTIA Lists on Its Own Pages<\/h3>\n<p>CompTIA&#8217;s <a href=\"https:\/\/www.comptia.org\/en-us\/certifications\/security\/v8\/\" target=\"_blank\" rel=\"noopener\">Security+ V8 page<\/a> gives the exam code SY0-801, a launch date of November 17, 2026, and English as the exam language. The matching <a href=\"https:\/\/www.comptia.org\/en-us\/certifications\/security\/v7\/\" target=\"_blank\" rel=\"noopener\">Security+ V7 page<\/a> is where the retirement schedule lives. It also shows SY0-701 launched on November 7, 2023, so the retiring exam will have run a little over three and a half years.<\/p>\n<ul>\n<li>SY0-801 launch date: November 17, 2026<\/li>\n<li>SY0-701 retirement, English: June 11, 2027<\/li>\n<li>SY0-701 retirement in Japanese, Portuguese, Spanish, and Thai: August 13, 2027<\/li>\n<li>Format for both versions: a maximum of 90 questions, multiple-choice and performance-based, 90 minutes, passing score of 750 on a scale of 100 to 900<\/li>\n<\/ul>\n<p>The language detail matters more than it looks. If you test in one of those four languages, you get an extra two months on SY0-701, and SY0-801 is listed in English only.<\/p>\n<h3>What Is Still Unofficial<\/h3>\n<p>A preview date of around October 20 has circulated among training providers, and those providers describe it as coming from CompTIA&#8217;s instructor community rather than a public notice. Treat it as background noise rather than a date to plan around. CompTIA also has not published a price for SY0-801 on the pages above, so any figure you see quoted for it is a guess.<\/p>\n<h2>What the Final SY0-801 Objectives Actually Change<\/h2>\n<p>The exam mechanics stay the same, as the list above shows. What moves is the weighting of the five domains and a fair amount of the content inside them. CompTIA&#8217;s recommended experience also stays put: a security administrator with two years of hands-on experience.<\/p>\n<table border=\"1\" cellpadding=\"8\" cellspacing=\"0\" style=\"border-collapse:collapse;width:100%\">\n<thead>\n<tr>\n<th>Domain<\/th>\n<th>SY0-701 weight<\/th>\n<th>SY0-801 weight<\/th>\n<th>Shift<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>General Security Concepts<\/td>\n<td>12%<\/td>\n<td>16%<\/td>\n<td>Up 4 points<\/td>\n<\/tr>\n<tr>\n<td>Threats, Vulnerabilities, and Mitigations (701) \/ Attacks (801)<\/td>\n<td>22%<\/td>\n<td>24%<\/td>\n<td>Up 2 points<\/td>\n<\/tr>\n<tr>\n<td>Security Architecture<\/td>\n<td>18%<\/td>\n<td>19%<\/td>\n<td>Up 1 point<\/td>\n<\/tr>\n<tr>\n<td>Security Operations<\/td>\n<td>28%<\/td>\n<td>27%<\/td>\n<td>Down 1 point<\/td>\n<\/tr>\n<tr>\n<td>Security Program Management and Oversight<\/td>\n<td>20%<\/td>\n<td>14%<\/td>\n<td>Down 6 points<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>Governance Shrinks While Core Concepts Grow<\/h3>\n<p>The biggest single swing is Domain 5. Program management and oversight, the policy, risk, audit, and compliance material, drops from 20% of the exam to 14%. Domain 1 moves the other way, from 12% to 16%, even though it now has three objectives instead of four. Fewer objectives carrying a bigger share means each one is worth more points, so the change-management objective and the cryptography objective deserve real study time instead of a skim. Zero Trust principles now sit in the very first objective, 1.1, next to the CIA triad and least privilege.<\/p>\n<h3>A Dedicated AI Objective, Plus AI Threaded Through Three More<\/h3>\n<p>The headline addition is objective 2.6, which asks candidates to summarize threats and vulnerabilities tied to AI usage. CompTIA&#8217;s list under it includes model manipulation, poisoning, prompt injection, data loss, bias, explainability, hallucinations, jailbreaking, evasion, privacy, ethical considerations, session hijacking, and code execution. AI also shows up in three other places:<\/p>\n<ul>\n<li>Objective 2.4 adds large language models to the list of attack surfaces, alongside misconfiguration, shadow IT, and public object storage.<\/li>\n<li>Objective 2.5 adds quishing and deepfakes to the social engineering list.<\/li>\n<li>Objective 4.6 lists AI capabilities, including agentic, chatbot, predictive analysis, and AI-augmented baselines, under automation and orchestration.<\/li>\n<\/ul>\n<p>Security+ remains a general security exam, so this is awareness-level coverage rather than a specialty. Candidates who want to go deeper on securing AI systems have a separate credential for that, covered in <a href=\"https:\/\/www.directcertify.com\/blog\/comptia-secai-plus-cy0-001-certification-2026\/\">our breakdown of what CompTIA&#8217;s SecAI+ exam actually tests<\/a>.<\/p>\n<h3>Incident Response Gets a Negotiation Step<\/h3>\n<p>Operations is still the largest domain at 27%, and it has been reshaped more than the one-point drop suggests. The incident response objective (4.7) now lists negotiation between containment and eradication, which reflects how ransomware cases play out in practice. Objective 4.6 builds automation, guardrails, and CI\/CD into the exam, and the audit and assessment objective (5.5) now names MITRE ATT&amp;CK, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis. Objective count across the exam falls from 28 to 27, but the topics that remain are more specific.<\/p>\n<h3>Topics the V8 Document No Longer Lists<\/h3>\n<p>Reading the SY0-801 objectives against SY0-701, several items present in the older document do not appear in the new one:<\/p>\n<ul>\n<li>SD-WAN and SASE, with Security Service Edge (SSE) appearing in objective 3.2 instead<\/li>\n<li>Containerization as an architecture concept<\/li>\n<li>Blockchain<\/li>\n<li>Key stretching<\/li>\n<\/ul>\n<p>CompTIA says plainly that its bulleted examples are not exhaustive, so absence from the document is not a promise that nothing on these topics will appear. The sensible reading is to spend less time on them, not none.<\/p>\n<h2>Which Exam to Sit Based on When You Will Be Ready<\/h2>\n<p>The right answer depends less on which version is &#8220;better&#8221; and more on your calendar. A rough sorting by readiness date:<\/p>\n<ul>\n<li><strong>Ready before November 17:<\/strong> SY0-701 is the only exam you can book, so the question answers itself.<\/li>\n<li><strong>Ready between mid-November 2026 and early spring 2027:<\/strong> either version works. If you have weeks of SY0-701 material behind you, finishing it is usually cheaper than restarting.<\/li>\n<li><strong>Ready in April 2027 or later:<\/strong> build your plan around SY0-801. Booking SY0-701 for the final few weeks before June 11 leaves no room for a retake if the first attempt goes badly.<\/li>\n<\/ul>\n<h3>When SY0-701 Is the Better Call<\/h3>\n<p>Sit SY0-701 if you are already deep into a study plan, if your employer or a contract deadline needs the credential this year, or if the extra AI content is irrelevant to your role. You also lose nothing by taking the older exam: CompTIA certifications run three years from the day you pass, so a credential earned on SY0-701 in early 2027 stays valid into 2030, well after the exam itself is gone.<\/p>\n<h3>When Waiting for SY0-801 Is the Better Call<\/h3>\n<p>Waiting makes sense if your realistic exam date is April 2027 or later, if a job posting or training requirement names V8 specifically, or if you are starting from zero and want the study plan to match the exam you will actually sit. Avoid waiting only for the sake of waiting. A launch date can still move, and a delay with no exam date booked is how a three-month plan becomes a nine-month one.<\/p>\n<h3>What Does Not Change Either Way<\/h3>\n<p>Both versions share the same question limit, time limit, and passing score, and both certifications last three years before you need to renew through CompTIA&#8217;s continuing education program. Many candidates treat Security+ as a first rung before a longer track such as CISSP, and for that path the shifts at ISC2 matter at least as much, as laid out in <a href=\"https:\/\/www.directcertify.com\/blog\/isc2-certification-changes-2026-ccsp-cc-cissp\/\">our guide to ISC2&#8217;s 2026 changes for CC, CCSP, and CISSP candidates<\/a>.<\/p>\n<p>Cost is the other constant. Third-party cost trackers put a US exam voucher anywhere from $425 to $439 depending on when they last checked, and CompTIA&#8217;s V7 page advertises bundles that include Retake Assurance, so check the live store price before you buy. A failed attempt otherwise means a second voucher, and a voucher bought for one version may not suit the other, so confirm its expiry date and which exam it covers before paying.<\/p>\n<h2>What the Job Market Data Says About Security Skills<\/h2>\n<p>No government dataset tracks Security+ holders on their own, but the occupation it feeds into is well measured. The <a href=\"https:\/\/www.bls.gov\/ooh\/computer-and-information-technology\/information-security-analysts.htm\" target=\"_blank\" rel=\"noopener\">Bureau of Labor Statistics<\/a> reports that information security analysts earned a median of $129,180 in 2025, that the occupation held about 192,900 jobs, and that employment is projected to grow 21% from 2025 to 2035, adding roughly 40,600 positions. BLS lists a bachelor&#8217;s degree as the typical entry requirement, so Security+ works best as one credential among several rather than a substitute for experience.<\/p>\n<p>That is also why the version question should not cost anyone sleep. A credential earned on either exam carries the same name and the same three-year clock, and the hands-on skill behind it is what decides how far it takes you.<\/p>\n<h2>Preparing for SY0-701 Now Without Wasting the Work<\/h2>\n<p>Study time spent on SY0-701 transfers better than people expect, because the biggest domains barely moved. Security Operations is 28% in one version and 27% in the other, and Security Architecture is 18% and 19%. The material that carries straight across includes:<\/p>\n<ul>\n<li>Identity and access management, including SSO, federation, MFA, and access control models<\/li>\n<li>Vulnerability management, from scanning and prioritization through reporting<\/li>\n<li>Logging, monitoring, and SIEM concepts<\/li>\n<li>Incident response phases and digital forensics basics<\/li>\n<li>Resilience and recovery, including backups, RTO, and RPO<\/li>\n<\/ul>\n<p>If you are working toward the current exam, a question bank is useful mainly for finding weak domains rather than memorizing answers. DirectCertify&#8217;s <a href=\"https:\/\/www.directcertify.com\/comptia\/sy0-701\">SY0-701 practice test with 902 questions<\/a> was last updated on October 1, 2026, and it covers the version you can book today. DirectCertify does not carry SY0-801 yet, so anyone planning to wait for V8 will need to confirm what is available when the exam launches.<\/p>\n<p><em>A note on sourcing: DirectCertify is an independent certification prep provider, and nothing here is affiliated with, endorsed by, or sponsored by CompTIA. Launch dates, voucher prices, and retirement schedules can shift, so confirm the current details on CompTIA&#8217;s own Security+ pages before you book or buy anything.<\/em><\/p>\n<h2>Security+ SY0-801 Questions Candidates Ask<\/h2>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">When does SY0-801 launch, and when does SY0-701 retire?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">CompTIA&#8217;s Security+ V8 page lists a launch date of November 17, 2026. SY0-701 retires on June 11, 2027 in English, and on August 13, 2027 in Japanese, Portuguese, Spanish, and Thai, according to CompTIA&#8217;s V7 page.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Does my SY0-701 certification expire when the exam retires?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">No. Retirement only closes the exam to new test takers. A Security+ certification stays valid for three years from the day you pass, whichever version you sat, so a pass in spring 2027 runs into 2030.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Is SY0-801 harder than SY0-701?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">CompTIA does not publish difficulty ratings, and the format is identical: a maximum of 90 questions, 90 minutes, and a passing score of 750 out of 900. What changes is the content mix. Governance falls from 20% to 14% of the exam, while General Security Concepts rises from 12% to 16% and a new objective covers AI threats.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Does SY0-801 test AI security?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Yes, at an awareness level. Objective 2.6 covers AI threats such as prompt injection, poisoning, and jailbreaking, objective 2.4 lists large language models as an attack surface, and objective 4.6 covers agentic AI as part of security automation. It does not replace a dedicated AI security credential.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Can I take SY0-801 in a language other than English?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Not at launch, based on CompTIA&#8217;s V8 page, which lists English only. Candidates who test in Japanese, Portuguese, Spanish, or Thai can still sit SY0-701 until August 13, 2027.<\/div>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Security+ SY0-801 launches Nov 17 and SY0-701 retires June 11, 2027. See what the final objectives changed and which exam fits your date.<\/p>\n","protected":false},"author":3,"featured_media":555,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Security+ SY0-801 vs SY0-701: Which Exam to Sit in 2026","rank_math_description":"Security+ SY0-801 launches Nov 17 and SY0-701 retires June 11, 2027. See what the final objectives changed and which exam fits your date.","rank_math_focus_keyword":"Security+ SY0-801","footnotes":""},"categories":[81],"tags":[],"class_list":["post-554","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-comptia"],"_links":{"self":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/comments?post=554"}],"version-history":[{"count":1,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/554\/revisions"}],"predecessor-version":[{"id":556,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/554\/revisions\/556"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/media\/555"}],"wp:attachment":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/media?parent=554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/categories?post=554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/tags?post=554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}