SY0-701

Five domains

Weights follow the public exam blueprint. Each domain page is a landing pad for the items under it.

• 1.0 · 12% · 5 items

  General Security Concepts

  Controls, the CIA triad, non-repudiation, and the cryptographic tools you are expected to pick under a short scenario. Smallest domain, and the one Objective Maps opens first.

• 2.0 · 22% · 7 items

  Threats, Vulnerabilities, and Mitigations

  Who attacks, how they get in, which weakness they use, and the mitigation that actually stops the spread. This is the highest-search domain on the public index.

• 3.0 · 18% · 4 items

  Security Architecture

  Zero trust, bastion access, where a WAF sits, and how card data is shown to a person who should never see all of it.

• 4.0 · 28% · 6 items

  Security Operations

  The largest domain. Identity, scanning, correlation, and the first move in an incident. Section exams live here and in Threats.

• 5.0 · 20% · 6 items

  Security Program Management and Oversight

  Policy versus standard, ALE math, vendor audit rights, PCI scope, and the difference between a tabletop and a pentest.