Return to the Ultimate Security+ Certification Guide for the complete certification, career, and job-search roadmap.
Your 16-week Security+ plan
This is the most appropriate pace for most candidates because it gives you room to learn the current SY0-701 objectives, practice the five official domains repeatedly, build safe hands-on familiarity, and correct weaknesses before exam week. Confirm active objectives and testing details in the Security+ Exam Guide before you choose resources or book an appointment.
Use a simple weekly rhythm: two focused learning sessions, one video or course session, one authorized lab or scenario session, a timed question block, and a short review session. Keep a missed-question log with the objective, your reasoning error, the correct principle, and the source you used to repair the gap.
No downloadable planner is linked here because CareerOS does not currently publish a live downloadable Security+ planner. Use this page as your working checklist rather than following a broken or unverified download link.
Before week 1: set your baseline
- Download the current official objectives and mark each item as new, familiar, or can explain and apply.
- Pick a primary resource using Best Security+ Books and Study Resources, then keep your stack focused.
- Define a safe, authorized environment with Security+ Home Lab Planning. Only work on systems, accounts, and data you own or are explicitly authorized to use.
- Take a short untimed diagnostic only to identify gaps. Do not treat the score as an exam prediction.
- Start a single tracker for objective coverage, labs, missed questions, practice results, and career actions.
Week 1: establish the security foundation
Objective: Build the vocabulary and study system that will support every later domain.
- Exam domains: General security concepts (12%).
- Reading focus: Security controls, CIA, authentication versus authorization, change management, basic cryptographic purpose, and risk language.
- Video/course focus: An overview lesson that maps the current SY0-701 domains and explains controls through real-world scenarios.
- Lab or practical task: Create a one-page diagram of an authorized home network or fictional small business; label assets, data, users, and basic controls.
- Practice-question goal: 25 untimed foundation questions; log every miss.
- Review task: Explain five core terms aloud without notes and correct one diagram control decision.
- Progress measurement: Complete a baseline tracker and reach 80% or better on your own term-definition check.
- Career-development action: Create a target-job list of 10 realistic roles and highlight repeated security terms in three job descriptions.
Week 2: apply controls and cryptographic concepts
Objective: Connect security concepts to practical control choices and common cryptographic use cases.
- Exam domains: General security concepts (12%).
- Reading focus: Administrative, technical, and physical controls; hashes, encryption, certificates, PKI, key management, and secure protocols.
- Video/course focus: A cryptography and PKI module that shows why a control is chosen, not only its acronym.
- Lab or practical task: In an authorized environment, document where encryption in transit, encryption at rest, hashing, and certificates would apply to a simple web application.
- Practice-question goal: 35 questions across controls and cryptography.
- Review task: Turn every miss into a two-column note: “what it protects” and “what it does not protect.”
- Progress measurement: Score at least 75% on a fresh 20-question set and explain the reason behind each wrong answer.
- Career-development action: Draft a truthful LinkedIn headline and About-section sentence that reflects your target direction and active Security+ preparation.
Week 3: recognize threats and attack paths
Objective: Learn to distinguish threat actors, attack surfaces, vectors, vulnerabilities, and impact.
- Exam domains: Threats, vulnerabilities, and mitigations (22%).
- Reading focus: Social engineering, malware, application and network attacks, threat intelligence, indicators, and common attack lifecycle language.
- Video/course focus: A threat-analysis module using short incident scenarios and attacker objectives.
- Lab or practical task: Build a safe threat-model worksheet for the fictional environment from week 1: assets, likely threats, entry points, controls, and residual risk.
- Practice-question goal: 40 threat and attack questions.
- Review task: For each missed question, identify whether you confused the actor, vector, vulnerability, indicator, or mitigation.
- Progress measurement: Produce a threat model with at least three defensible control choices and score 75% or better on a new question set.
- Career-development action: Add a project note describing the threat-model objective, assumptions, controls, and lessons learned; do not overstate its scope.
Week 4: mitigate vulnerabilities deliberately
Objective: Connect vulnerabilities and misconfigurations to proportionate mitigation and validation steps.
- Exam domains: Threats, vulnerabilities, and mitigations (22%).
- Reading focus: Vulnerability management, hardening, patching, configuration baselines, segmentation, secure coding concepts, and compensating controls.
- Video/course focus: A vulnerability-management lesson focused on prioritization, remediation, and verification.
- Lab or practical task: Apply a hardening checklist to an authorized test system or produce a fictional remediation plan with owner, priority, control, and verification step.
- Practice-question goal: 45 questions, including scenario-based mitigation choices.
- Review task: Rework five misses by stating the risk, the best control, and why tempting alternatives are weaker.
- Progress measurement: Complete one documented hardening or remediation artifact and reach 78% on the week’s questions.
- Career-development action: Turn your documented task into one resume-ready evidence note using action, tool or control, scope, and learning outcome.
Week 5: design secure networks and access
Objective: Reason through architecture decisions for networks, remote access, identity, and segmentation.
- Exam domains: Security architecture (18%) and security operations (28%).
- Reading focus: Network segmentation, secure remote access, zero trust concepts, wireless security, firewalls, proxies, and identity architecture.
- Video/course focus: An architecture module that traces a user request from authentication to access enforcement and logging.
- Lab or practical task: Update your environment diagram with a trust boundary, a remote-access path, least-privilege access rules, and logging points.
- Practice-question goal: 45 architecture and IAM questions.
- Review task: Explain why segmentation and least privilege reduce different risks; revise one weak diagram decision.
- Progress measurement: Score 78% or better on a fresh set and be able to narrate the secure-access flow in two minutes.
- Career-development action: Compare five target job descriptions for IAM, networking, or security-operations terms and add only supportable terms to your skills inventory.
Week 6: secure platforms, cloud, and data
Objective: Apply security architecture concepts to endpoints, cloud services, virtualization, mobile, IoT, OT, and data protection.
- Exam domains: Security architecture (18%).
- Reading focus: Shared responsibility, secure configuration, virtualization, cloud controls, data classification, backups, resilience, and recovery.
- Video/course focus: A hybrid-environment course section that compares on-premises and cloud control responsibilities.
- Lab or practical task: Create a backup-and-recovery checklist for an authorized test asset or fictional service, including encryption, retention, restoration test, and owner.
- Practice-question goal: 50 architecture questions.
- Review task: Map five controls to the risk they reduce in cloud or endpoint scenarios.
- Progress measurement: Finish a one-page resilience plan and score 78% or better on a mixed architecture set.
- Career-development action: Update one LinkedIn project entry with the truthful outcome of your diagram, hardening, or recovery exercise.
Week 7: operate securely day to day
Objective: Build practical judgment around secure configuration, asset management, and operational controls.
- Exam domains: Security operations (28%).
- Reading focus: Secure baselines, endpoint security, asset lifecycle, mobile and wireless controls, automation concepts, and operational documentation.
- Video/course focus: A security-operations module focused on repeatable procedures and the evidence they create.
- Lab or practical task: Make an asset inventory for your authorized lab with owner, purpose, operating system, patch status, access level, and retirement or backup note.
- Practice-question goal: 50 operations questions.
- Review task: Select the 10 most repeated weak topics from weeks 1–7 and schedule targeted review blocks.
- Progress measurement: Maintain a complete inventory for the environment you described and reach 80% on a new operations set.
- Career-development action: Draft a concise STAR story about organizing, documenting, hardening, or improving a process from work, school, or your authorized lab.
Week 8: monitor, investigate, and respond
Objective: Understand how security teams use data, alerts, triage, and incident-response process.
- Exam domains: Security operations (28%).
- Reading focus: Logs, telemetry, alert triage, incident-response phases, evidence handling, escalation, forensics basics, and reporting.
- Video/course focus: An incident-response walkthrough that models detection, containment, communication, and lessons learned.
- Lab or practical task: Review benign logs from an authorized source or use sample data to write a short alert-triage note: observation, hypothesis, evidence needed, priority, and next step.
- Practice-question goal: 55 operations and incident-response questions.
- Review task: Revisit every question missed because of rushed reading; underline the actor, condition, and requested action before answering.
- Progress measurement: Produce one triage note and score 80% or better on fresh incident-response questions.
- Career-development action: Add a second STAR story about how you investigated an issue, followed a process, communicated risk, or improved documentation.
Week 9: manage identity and access in operations
Objective: Apply IAM concepts to real operating scenarios, not just definitions.
- Exam domains: Security operations (28%) and general security concepts (12%).
- Reading focus: Authentication factors, federation, SSO, MFA, authorization models, account lifecycle, privileged access, and access reviews.
- Video/course focus: A hands-on IAM lesson that follows onboarding, privilege changes, and offboarding.
- Lab or practical task: Write a least-privilege access matrix for the fictional organization or your authorized lab: roles, resources, approvals, MFA, and review cadence.
- Practice-question goal: 55 IAM-focused questions.
- Review task: Teach the difference between authentication, authorization, accounting, and federation using one scenario.
- Progress measurement: Complete the access matrix and reach 80% on a fresh IAM set.
- Career-development action: Audit your resume and LinkedIn profile for unsupported security claims; replace vague labels with accurate responsibilities, projects, or learning evidence.
Week 10: govern risk and policy
Objective: Connect technical security work to risk decisions, policy, compliance, and stakeholder communication.
- Exam domains: Security program management and oversight (20%).
- Reading focus: Risk assessment, treatment options, policies, standards, procedures, regulatory and privacy considerations, audits, and security awareness.
- Video/course focus: A GRC or risk-management section explaining how controls, evidence, and accountability work together.
- Lab or practical task: Create a mini risk register for three risks in your fictional environment, including likelihood, impact, owner, treatment, and review date.
- Practice-question goal: 50 governance and risk questions.
- Review task: Explain the distinction between a policy, standard, procedure, guideline, and control.
- Progress measurement: Finish the risk register and score 78% or better on fresh program-management questions.
- Career-development action: Add target employers, role locations, clearance or eligibility requirements, and salary research notes to your target-job list.
Week 11: manage third parties, resilience, and oversight
Objective: Practice balancing business, vendor, recovery, and accountability requirements.
- Exam domains: Security program management and oversight (20%) and security architecture (18%).
- Reading focus: Vendor risk, contracts and SLAs, business impact analysis, business continuity, disaster recovery, assessments, and audit evidence.
- Video/course focus: A continuity-and-third-party-risk module with realistic tradeoff scenarios.
- Lab or practical task: Draft a one-page business-impact and recovery priority worksheet for a fictional service: dependencies, RTO/RPO assumptions, owner, and test cadence.
- Practice-question goal: 55 questions across governance, resilience, and architecture.
- Review task: Review your weakest two domains from the first 10 weeks and write a targeted relearning plan.
- Progress measurement: Score 80% or better on a mixed 60-question set and complete the recovery worksheet.
- Career-development action: Choose two portfolio artifacts to refine into clear, safe project summaries for your resume, LinkedIn, or interview prep.
Week 12: connect domains through scenarios
Objective: Shift from studying topics in isolation to choosing the best response in mixed scenarios.
- Exam domains: All five domains, with emphasis on security operations (28%).
- Reading focus: Revisit the official objectives that appear in your missed-question log; prioritize concepts you cannot yet explain.
- Video/course focus: Scenario-based review sessions or course practice labs that require selecting and justifying a control.
- Lab or practical task: Run an authorized tabletop exercise for a phishing, lost-device, or ransomware scenario: detection, containment, communication, recovery, and lessons learned.
- Practice-question goal: 75 mixed questions in two timed blocks.
- Review task: Categorize every miss by knowledge gap, wording error, timing issue, or overthinking; then remediate one category at a time.
- Progress measurement: Reach 80% or better across the two blocks and produce a tabletop after-action note.
- Career-development action: Use the tabletop or another approved project to write one concise project entry with objective, action, tools or controls, and outcome.
Week 13: strengthen weak areas
Objective: Use evidence, not intuition, to close your largest knowledge gaps.
- Exam domains: Your two weakest domains, plus general security concepts as needed.
- Reading focus: Return to primary-source explanations for every recurring miss; avoid collecting new resources.
- Video/course focus: Targeted micro-lessons only for the objectives below your threshold.
- Lab or practical task: Repeat or improve the lab most closely connected to your weakest topic, then document what changed and why.
- Practice-question goal: 60 targeted questions plus 30 mixed questions.
- Review task: Build a one-page “teach-back” sheet for each weak domain with concepts, tradeoffs, and common distractors.
- Progress measurement: Improve each weak-domain score by at least 10 percentage points from your earliest comparable set.
- Career-development action: Tailor your resume’s summary and skills ordering to one target role using only experience, projects, and capabilities you can defend.
Week 14: rehearse applied reasoning
Objective: Improve pacing, question reading, and confidence with performance-based style reasoning.
- Exam domains: All five domains.
- Reading focus: Short review notes, objective checklist, and selected explanations from the missed-question log.
- Video/course focus: A final scenario-review module rather than a new full course section.
- Lab or practical task: Complete a timed, authorized troubleshooting or architecture scenario; narrate your assumptions, evidence, control choice, and validation steps.
- Practice-question goal: One timed 75-question mixed set.
- Review task: Spend at least as long reviewing the set as taking it; re-solve every miss before reading the explanation.
- Progress measurement: Reach 82% or better and identify no more than three high-priority objectives for final review.
- Career-development action: Prepare a short interview introduction that connects your background, active study, lab evidence, and target role without claiming certification completion.
Week 15: complete a full readiness simulation
Objective: Test endurance and reveal final priorities under realistic timing.
- Exam domains: All five domains, weighted toward your missed-question patterns.
- Reading focus: Only final-gap topics and official-objective references; do not start a new book or course.
- Video/course focus: Optional short refresher clips for final gaps; protect sleep and focus time.
- Lab or practical task: Review your project documentation and practice explaining one decision, tradeoff, and lesson from each artifact.
- Practice-question goal: One fresh, timed full-length simulation from a reputable source; avoid repeatedly memorizing one bank.
- Review task: Create a final review list organized by objective, not by random questions.
- Progress measurement: Use consistent scores across fresh, mixed sets—typically low-to-mid 80s or better—as one signal to consider scheduling; it is not a guarantee.
- Career-development action: Build a target-job application queue with role, employer, evidence match, resume version, and next action.
Week 16: consolidate and prepare responsibly
Objective: Consolidate knowledge, protect energy, and decide whether to test now or extend the plan.
- Exam domains: All five domains, with a light focus on your final review list.
- Reading focus: Your teach-back sheets, missed-question log, objective checklist, and testing logistics in the Security+ Exam Guide.
- Video/course focus: Light review only; stop consuming material that introduces new terminology or anxiety.
- Lab or practical task: Revisit one safe project and explain its objective, controls, evidence, and limitations in plain language.
- Practice-question goal: 25–40 light mixed questions early in the week; no last-minute marathon.
- Review task: Confirm identification, timing, appointment, policies, and current exam details directly with the provider; review only the three final weak areas.
- Progress measurement: Make a deliberate decision: schedule, keep the appointment, or add two focused weeks if scores and explanations show material gaps.
- Career-development action: Finalize your current resume, LinkedIn profile, two project summaries, and target-job list so your study momentum can support applications and interviews.
Adjust the plan to your starting point
Beginner variation
Keep the full 16 weeks and add 30–45 minutes of foundational networking, operating-system, and troubleshooting study on three days each week. Treat weeks 1–4 as non-negotiable. Use untimed questions first, take extra time to build the diagrams and project notes, and delay a full simulation until you can explain the major concepts in your own words.
Experienced professional variation
Use weeks 1–2 for a rigorous diagnostic and objective mapping rather than skipping them. Compress familiar topics only after you can explain why the correct control fits a scenario. Reinvest recovered time in Security+ vocabulary, governance, cloud, identity, and performance-based reasoning—areas that may differ from your day-to-day specialty.
Full-time worker variation
Plan five to seven hours per week: two 45-minute weekday sessions, one 60-minute video or reading block, a 90-minute weekend lab, and a 45-minute review block. If life interrupts, move the unfinished task forward rather than stacking two heavy weeks together. Protect the weekly review and missed-question log first.
Intensive learner variation
If you can consistently study 15–20 focused hours weekly and already have sound IT fundamentals, run the 16-week sequence in 8–10 weeks by combining adjacent weeks. Keep the same order, retain every lab and review checkpoint, and use fresh practice sets. Do not compress final simulations, sleep, or recovery into a last-minute cram period.