A Winning Formula to Pass the CompTIA Security+ Exam

[By Nichole Schmitt]

Overview 

CompTIA Security+ is an industry respected certification that validates baseline skills in cybersecurity. The current version is SY0-701. Passing this exam shows you can perform core security functions and pursue an IT security career. 

Many community colleges teaching cybersecurity offer courses to prepare students for this exam. Earning this certification along with a college degree gives graduates greater success in getting hired. 

The following tips come from my personal self-study experience. For three months, I used this multi-faceted approach and passed the CompTIA Security+ 701 exam on the first try. 

Background Experience 

Exam candidates should have some understanding of IT. If you’ve not worked in IT or attended college classes, it’s important to first study CompTIA Network+ and A+. Either sit for these exams to earn the certifications or take practice exams until you score 85% or greater. This background knowledge of IT is a necessary foundation for passing the Security+ exam. 

As a disclaimer, my own work experience involves QA in the software development world with a deep knowledge of server hardware, clustering, virtualization, and IaaS. However, a similar foundation can be built by studying Network+ and A+. 

Components of a Successful Study Strategy 

[1] Courses and Lectures – Online, Pre-recorded, Self-paced 

For those new to cybersecurity, textbooks may be hard to digest without guidance. Hearing an experienced practitioner interpret the concepts in plain language is quite valuable and saves you time.  

For a monthly subscription cost, Cybrary.IT is a good source for lecture material on this topic and many others. These are the best Network+ lectures I’ve ever seen.  But you could also try Udemy or Coursera.

For a free option, Professor Messer offers well known and respected CompTIA exam prep lectures. They are organized and straight to the point. I chose this option, listening while doing chores or getting ready for work. 

[2] Books 

For $56 on Amazon, I purchased the official CompTIA Security+ Study Guide (published by SYBEX). The set includes the main textbook along with another book of exam practice questions. Mike Chapple and David Seidl’s writing style is clear and easy to follow. Electronic copies of the books are included. 

I appreciated the paper copy where I could underline and make notes. Studies in neuroscience show that learning is more impactful when taking notes by hand. I draw my own diagrams from memory to be sure I’ve grasped the concepts. This is helpful when the exam’s performance-based questions ask you to “draw” a network diagram, for example, placing the firewall, load balancers, and web servers in proper positions. If you’ve only read about it, but never drawn your own diagram, it will be tough to get this right in the exam. 

[3] Hands-on Practice 

These are just some of the concepts that require hands-on practice: 

• Configure Wifi router settings
• Create a self-signed certificate in Windows
• Configure VPN settings
• Using Wireshark
• Attempt a SQL injection, cross site scripting, or DoS attack using Kali Linux tools
• Command-line navigation in Windows and Linux
• Examining routing tables

To gain such hands-on experience, you can subscribe to a variety of online tools where these environments are simulated, and tutorials are provided. 

Online Providers: 

• Cyber Range Poulsbo. Free for Washington state students and educators.
• HackTheBox.com. Free for basic challenges.
• TryHackMe.com. Gamified learning. Free for basic levels.
• UCertify.com. Online textbook with hands-on exercises connected to each chapter. Also includes gamified test prep. Cost: $280. I used this option because the topic layout is tightly aligned with the SY0-701 exam.

[4] Practice Exams 

Science shows that practice exams are the most effective way to recall information that you’ll need to pass the real exam. Also, it desensitizes you to test anxiety, making you calm and confident on exam day. Flashcards and practice exams are called Retrieval Practice in the neuroscience world. This process of pulling information from memory also fosters “deep learning,” enabling students to draw inferences and make new connections among facts in various contexts. 

I used the following practice exams and jammed on these for several hours: 

1. UCertify
2. Exams provided by Sybex at http://www.wiley.com/go/sybextestprep. After logging in, register your hard copy textbook, then access hundreds of test questions. (Question verbiage and accuracy was better than UCertify.)

[5] Flashcards 

Yes, good old-fashioned flashcards. I purchased 3x5 index cards and hand-wrote mine. Why not? It’s a tried-and-true method. I also used the UCertify flashcards, but didn’t find them as effective as my own paper cards. 

For a digital version of self-generated flashcards, try Anki for free. Load it on your phone and use the desktop version. Your cards will synchronize across devices as you add, update, and test yourself. Many STEM students swear by this tool. 

Description of the Exam 

Steps: Create an account at CompTIA.org and click Schedule Exam. Choose to be tested at a Pearson Vue testing center or online at home. I selected the online option. On test day, the proctor examined my room using my computer’s camera, and I was monitored through the whole session. Cost ~$400. 

The exam started out with a couple of performance-based questions and the rest were multiple choice. I was very happy that I’d done so many practice exams! 

Other Details About Security+

Security+ SY0-701 Exam Objectives: <link> 

Career Pathways Roadmap: <link>  

Department of Defense work roles aligned with Security+: <link> 

More Study Tips

Discover your learning style: Visual, Auditory, ReadWrite, Kinesthetic.  <link>

Use all 5 senses while studying. <link>

Study skills booklet from Western Washington University. <link>

Study tips for those with ADHD. <link>

Schedule a focus buddy at FocusMate.com. Cameras stay on but audio is muted. Buddies support each other by staying on screen and on task. Furthermore, everyone in your household will respect your study time because you're “in a meeting.” At the end of the session, buddies ask each other if they accomplished their goal for the hour. <link>

Use headphones and binaural beats to keep your brainwave frequencies at optimal wavelengths for concentration. <link>