SY0-701 Domains
Organized around the current official five-domain exam structure.
General Security Concepts
Security controls, fundamental security concepts (CIA, AAA, non-repudiation, Zero Trust), change management, and cryptographic solutions including PKI.
100 published questions
Domain 2 · 22%Threats, Vulnerabilities, and Mitigations
Threat actors and vectors, malware, social engineering, application/network/wireless attacks, vulnerabilities, and mitigation techniques.
100 published questions
Domain 3 · 18%Security Architecture
Enterprise, cloud, and hybrid infrastructure security; data protection; resilience and recovery strategies.
100 published questions
Domain 4 · 28%Security Operations
Monitoring, SIEM/SOAR, incident response, digital forensics, identity and access management, and automation.
100 published questions
Domain 5 · 20%Security Program Management and Oversight
Governance, risk management, third-party risk, compliance, and security awareness training.
100 published questions