有目标的备考。
New and developing security professionals who need to connect security concepts with the decisions made in real operational scenarios.
CertSprint 结合了针对性练习、详细解析、基于表现的任务和分领域的准备度评估，让每次练习都清楚告诉你接下来该学什么。
CompTIA · 考试 SY0-701
围绕考试实际考察的判断力设计的 Security+ 练习题。
Prepare for security operations with scenario-driven practice covering threats, secure architecture, identity, risk, and incident response.
无需绑卡即可开始 · 一次性付款 · 永久访问
内容审核于 2026年9月
还不确定 Security+ 适不适合你？
先做免费的 10 题诊断——无需注册，即时评分并按领域给出详细分析，让你在做决定之前先了解自己的水平。
限时模拟考试
一次完整的限时模拟，包含 Security+ 道练习题，提交前不显示任何反馈——最接近真实考试的体验。
完整题库
超越 20 道题的预览版，进入围绕当前考纲的技能与场景组织的完整题库。
有启发性的解析
了解为什么正确答案符合证据，以及为什么其他选项不成立，从而培养判断力而不是死记硬背。
PBQ 与应用场景题
练习排序、匹配、排查和配置类任务，让知识在考试压力下也能真正用得上。
按领域评估准备度
正确率会映射到各考试领域，揭示薄弱环节，把考试日期变成切实可行的每日练习目标。
你将练习的内容
专注于 Security+ 的覆盖范围。
整个体验围绕相关的判断与故障排查设计，而不是零散的知识点。
- Threats, vulnerabilities, and mitigations
- Security architecture and operations
- Governance, risk, and identity controls
示例题目
Worked example考察的是推理，而不是措辞。
A company wants to prevent stolen employee passwords from being enough to access its cloud applications. Which control best addresses this risk?
完整访问权限包含每道已作答题目后的清晰解析，包括为什么其他选项不够合适。
Why this is the best answer
The requirement is to stop a stolen password alone from being sufficient. Multifactor authentication adds another authentication factor, directly addressing that requirement. In a real deployment, prefer phishing-resistant methods where supported and protect account recovery as well.
Why the other options fit less well
Disk encryption protects stored data, segmentation limits network reach, and data loss prevention governs sensitive data movement. These can be valuable controls, but they do not add a second factor to the sign-in described.
Microsoft: protecting identities and credentials考试是如何进行的
准确了解考试当天的情况。
CompTIA Security+（SY0-701）官方考试形式 — 预约前请到官方网站确认最新价格和政策，因为这些可能会变化。
形式1 exam
题目数量Up to 90 questions
时长90 minutes
及格分数750 (scored on a 100–900 scale)
题型Multiple-choice (single and multiple response) plus performance-based questions (PBQs)
考试方式Pearson VUE test center or online proctored (OnVUE)
重考政策Immediate retake allowed after a first fail; a 14-day wait applies before a third attempt
学习计划
一份按真实题库权重分配的 5 周计划。
每周的时长与该领域实际拥有的 Security+ 练习题数量成正比，而不是通用模板。可在仪表盘中跟踪真实进度。
- 1
General Security Concepts + Threats, Vulnerabilities & Mitigations
Smaller domains grouped together to keep every week substantive.
约每天 28 题 - 2
Security Architecture + Security Operations
Smaller domains grouped together to keep every week substantive.
约每天 32 题 - 3
Security Program Management & Oversight
19% of the full question bank — the single largest block this week.
约每天 14 题 - 4
Cumulative review
Mixed practice across every domain, prioritizing whichever ones your readiness tracker shows below 80% accuracy — not a fixed list, but whatever the data says is weakest this week.
- 5
Timed mock exam
Simulate the real exam: one sitting, the real question count and time limit, no pausing. Re-drill any domain that comes in under 80%.
用数据说话
免费开始 Security+ 在考试日发现之前，先找到你的薄弱领域。
免费试做 20 道 Security+ 题目。准备好后再解锁完整练习空间。
Go deeper on Security+
- Security+ performance-based questions: format and practice
- General Security Concepts: what Security+ tests
- Threats, Vulnerabilities & Mitigations: what Security+ tests
- Security Architecture: what Security+ tests
- Security Operations: what Security+ tests
- Security Program Management & Oversight: what Security+ tests
- How to read your domain readiness
- Should you take CompTIA Network+ or Security+ first?
- Should you take CompTIA Security+ or CySA+ first?
理解答案背后的判断。
先分析情境，找出关键证据，再对照解析检查自己的推理。根据各领域的得分决定下一次复习重点。练习正确率只能提示学习进度，不能预测正式考试成绩，也不等同于官方分数。