OpenExamsFREE PRACTICE — ANY EXAM

CompTIA Cybersecurity Analyst (CySA+) — Requirements & Free Practice

US · License preparation

200 free questions · Answer explanations · No signup required

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Loading selected examination banks…

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

CompTIA Cybersecurity Analyst (CySA+)

A cybersecurity certification validating threat detection, analysis and response in security operations and vulnerability management roles.

Licensing authority: CompTIA, Inc.

Initial by examination
CompTIA CySA+
Version Choice
This route records the CS0-004 V4 examination choice. CompTIA also lists the retiring CS0-003 V3 examination during the transition; it is an alternative version, not a concurrent examination.

CompTIA CySA+

Format
Multiple-choice and performance-based
Time limit
165 minutes
Passing score
750 (on a scale of 100–900)
Examination outline
  • Security Operations (34%)
    • Explain concepts related to system and network architecture in security operations.
    • Given a scenario, analyze indicators of potential malicious activity.
    • Given a scenario, use tools to determine malicious activity.
    • Explain threat intelligence and threat-hunting concepts.
    • Explain the importance of efficiency and process improvement in security operations.
    • Summarize concepts related to the use of AI in security operations.
  • Vulnerability Management (26%)
    • Given a scenario, implement the appropriate vulnerability scanning method.
    • Given a scenario, analyze output from vulnerability assessment tools.
    • Given a scenario, analyze data to prioritize and mitigate vulnerabilities.
    • Explain concepts related to control types, risks, and vulnerability management.
  • Incident Response and Management (24%)
    • Summarize concepts related to attack methodology frameworks.
    • Summarize the incident response process.
    • Given a scenario, implement incident response techniques.
  • Reporting and Communication (16%)
    • Explain the importance of vulnerability management reporting and communication.
    • Explain the importance of security operations and incident response reporting and communication.
Examination sources