SY0-801 practice examsFinished
CompTIA Security+ V8 (SY0-801)
CompTIA Security+ V8 validates baseline cybersecurity skills: security concepts and cryptography, threats, vulnerabilities and attacks including the risks of AI, secure architecture and data protection, security operations from mitigation to incident response, and governance, risk and compliance.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| General Security Concepts | 16% |
| Threats, Vulnerabilities, and Attacks | 24% |
| Security Architecture | 19% |
| Security Operations | 27% |
| Security Program Management and Oversight | 14% |
Two sample questions
1. A company's web application uses JSON Web Tokens (JWT) for authentication. A security review discovers the application accepts tokens with the algorithm set to 'none,' effectively disabling signature verification. What is the impact of this vulnerability?
- Attackers can forge arbitrary tokens granting themselves any access level without a valid key — correct
- The tokens will expire more quickly because the 'none' algorithm reduces token validity time
- Token transmission speed will decrease because the 'none' algorithm adds processing overhead
- The application will refuse all authentication attempts because the algorithm is not recognized
Why: Accepting JWT tokens with algorithm 'none' means any token will be accepted without signature verification. An attacker can create a token with any claims (user ID, admin role) and the application will trust it, effectively bypassing all authentication.
2. Which component supplies battery power to bridge a short power outage until generators start or power returns?
- A PDU
- A UPS — correct
- A generator only
- A surge protector
Why: A UPS provides battery power that bridges short outages.
The real SY0-801 exam
| Length | 90 minutes |
|---|---|
| Questions | Maximum of 90 (multiple-choice and performance-based) |
| Pass mark | 750 on a scale of 100 to 900 |
| Price | Purchased per attempt through Pearson VUE |
| Recommended before you sit it | None enforced. CompTIA recommends two years of hands-on experience as a security administrator. |
| Valid for | 3 years, renewable through continuing education |
Exam facts as published by CompTIA; always check the vendor’s page before you book.
Study SY0-801 with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.