The CompTIA A+ exam costs $253 per attempt. Most people who walk in underprepared pay that twice. This guide covers what each CompTIA certification actually tests, which one you should pursue first based on your goals, and how to get through the material without wasting money on retakes.
CompTIA (Computing Technology Industry Association) is the dominant vendor-neutral certification body in IT. Unlike Cisco or Microsoft certs that lock you into a specific ecosystem, a CompTIA certification tells employers you can operate across environments. That neutrality is why the DoD mandates several CompTIA certs for its civilian IT workforce — and why help desk managers treat A+ as a baseline requirement rather than a bonus.
The CompTIA Certification Roadmap
CompTIA organizes its certifications into three rough tiers: core (entry-level), infrastructure, and cybersecurity. Most people start in core and move right or up depending on whether they want to specialize in networking or security.
Core Certifications
- IT Fundamentals (FC0-U61) — Pre-career fundamentals. Not worth pursuing if you already have any IT exposure; it doesn't count toward DoD 8570 and most employers don't recognize it as meaningful.
- A+ (220-1101 + 220-1102) — The entry-level standard. Two exams: Core 1 covers hardware, networking, and mobile devices; Core 2 (1102) covers operating systems, security, and troubleshooting. Both required to earn the A+ certification.
Infrastructure Track
- Network+ (N10-009) — Networking concepts, OSI model, subnetting, routing protocols. Typically pursued after A+ by people heading toward network administration or cloud roles.
- Server+ — Data center, virtualization, storage. Less popular than Network+; mostly valued in enterprise on-prem environments.
- Cloud+ (CV0-004) — Hybrid cloud deployment, cloud security, automation. Growing relevance as organizations move workloads off-prem.
Cybersecurity Track
- Security+ (SY0-701) — The most widely hired-against security certification at entry level. DoD 8570 IAT Level II baseline. Required or preferred for hundreds of thousands of federal and contractor roles.
- CySA+ (CS0-003) — Threat detection and analysis. Intermediate; assumes Security+ or equivalent experience.
- PenTest+ (PT0-003) — Offensive security, vulnerability assessment. Positioned as a mid-level alternative to CEH.
- SecurityX / CASP+ (CAS-005) — Advanced enterprise security architecture. Non-managerial expert level; DoD 8570 IAT Level III.
- SecAI+ (CY0-001) — CompTIA's newest certification, targeting AI security fundamentals. Early-mover advantage for candidates positioning around AI-adjacent roles.
CompTIA A+ 1102: What the Second Exam Actually Tests
The 220-1102 is the software-heavy half of the A+ certification. If 1101 is about knowing your way around physical hardware and basic networks, 1102 is about keeping systems secure, functional, and compliant with operational procedures.
Exam specifics: 90 questions, 90 minutes, passing score 700 out of 900. Mix of multiple-choice and performance-based questions (PBQs) — the PBQs simulate drag-and-drop tasks and command-line scenarios that you can't brute-memorize your way through.
Domain Breakdown (220-1102)
- Operating Systems (31%) — Windows 10/11 installation, configuration, command-line tools (ipconfig, netstat, sfc, diskpart), macOS and Linux basics, virtualization clients.
- Security (25%) — Physical security, malware types and removal, Windows security settings, browser security, basic encryption concepts, social engineering indicators.
- Software Troubleshooting (22%) — Diagnosing boot failures, application crashes, malware removal procedures, mobile device issues, browser troubleshooting.
- Operational Procedures (22%) — Documentation, change management, disaster recovery, ticketing systems, scripting basics, environmental and safety compliance.
The operational procedures domain trips up a lot of candidates who underestimate it. Change management workflows, backup methodologies (incremental vs. differential vs. full), and proper incident response documentation show up on the exam in practical scenarios — not just definition questions.
Who Should Take A+ First
If you're aiming at help desk, desktop support, or field technician roles and have fewer than two years of hands-on IT experience, start with A+. It's the most recognized entry point and signals to employers that you have verified foundational knowledge. If you already have 2+ years of practical experience and are targeting a network or security role, you might be better served skipping A+ entirely and sitting for Network+ or Security+ directly — both allow self-certification of experience.
CompTIA Security+: The Cert That Changes Salary Trajectories
Security+ is where the career math shifts noticeably. Entry-level A+ roles (help desk, desktop support) typically pay $38,000–$52,000 depending on market. Security+ roles — junior SOC analyst, security administrator, IT auditor — start at $55,000–$75,000 in most U.S. markets, with government contractor roles in the DC area consistently higher.
The SY0-701 exam covers threats and attacks (21%), architecture and design (15%), implementation (25%), operations and incident response (16%), and governance, risk, and compliance (23%). It's broader than A+ and requires you to think in terms of risk and policy, not just fix-it troubleshooting.
Security+ is also the most common DoD 8570/8140 baseline requirement, which means it's effectively a prerequisite for a large portion of federal civilian and contractor IT security jobs. If you're in or near a military installation, pursuing Security+ before or immediately after A+ is the highest-ROI sequencing.
Exam Costs and Total Investment
| Certification | Exam Fee (USD) | Renewal |
|---|---|---|
| A+ (both exams) | ~$506 total | 3 years, 20 CEUs or retake |
| Network+ | ~$358 | 3 years, 30 CEUs or retake |
| Security+ | ~$404 | 3 years, 50 CEUs or retake |
| CySA+ | ~$404 | 3 years, 60 CEUs or retake |
| SecurityX (CAS-005) | ~$509 | 3 years, 75 CEUs or retake |
Exam vouchers can sometimes be discounted through employers, CompTIA's own bundles, or authorized training partners. If your employer has a training budget, request reimbursement before purchasing — most finance teams will approve CompTIA vouchers without friction since the certs are industry-standard.
Top Courses for CompTIA Certification Prep
The prep course market for CompTIA is saturated with mediocre content. The courses below are rated highly specifically because they cover performance-based questions and exam simulations — which is where underprepared candidates fail.
CompTIA A+ Core 1 (220-1201) Full Course & Practice Exam
Covers the hardware-heavy Core 1 exam with lab simulations and full-length practice exams. The 220-1201 is the 2025-updated version of Core 1 — if you're sitting the new exam series, use this rather than older 1101 material.
CompTIA A+ Core 1 (220-1201) 6 Practice Tests [2026]
Six timed practice exams mapped to the current exam objectives. Useful as a final-week supplement after finishing a full course — the volume of varied questions helps surface weak spots before exam day.
CompTIA Security+ (SY0-701) Exam Prep 2026
Beginner-accessible Security+ prep built around the SY0-701 objectives. Covers GRC, cryptography, network security, and threat analysis in a structured sequence that mirrors the actual exam domain weighting.
CompTIA Security+ (SY0-701) 1,000+ Practice Questions 2026
Pure question bank — over 1,000 practice questions with detailed explanations. Best used after completing a lecture-based course; the explanations for wrong answers are where most of the real learning happens.
CompTIA SecAI+ Fundamentals: AI Cybersecurity Basics CY0-001
Covers CompTIA's newest certification targeting AI system security, prompt injection, adversarial ML, and AI governance. Early-mover territory — candidates who earn this now are positioning ahead of job descriptions that will require it in 18-24 months.
CompTIA SecurityX (CAS-005) 6 Practice Exams
Advanced-level practice for the CASP+ successor exam. Scenario-heavy questions that test enterprise architecture decisions, not just definitions — appropriate only after you have Security+ and 3+ years of experience.
FAQ
Do I need A+ before pursuing Security+?
No. CompTIA recommends A+ as a prerequisite but doesn't enforce it. Security+ has no formal prerequisites. If you already have IT experience — even self-taught or from a bootcamp — you can sit Security+ directly. That said, A+ builds foundational troubleshooting instincts that make Security+ concepts easier to contextualize. If you're starting from zero, A+ first is the more reliable path.
How long does it take to prepare for a CompTIA exam?
Varies significantly by baseline. For A+ with no IT background: 3–6 months of consistent study (10–15 hours/week). For Security+ after A+ and 1 year of IT work: 6–10 weeks. For CySA+ or PenTest+ after Security+ and relevant work experience: 4–8 weeks. The performance-based questions require hands-on practice, not just reading — budget time for labs or virtual environments.
Are CompTIA certifications worth it in 2026?
For entry-level IT roles, A+ remains the strongest signal you can show an employer without a degree. For security roles, Security+ is practically required for any government-adjacent work and widely respected in the private sector. The value drops off if you're chasing certs without pairing them with actual experience — employers are increasingly sophisticated at distinguishing candidates who can troubleshoot from those who only memorized exam objectives.
What's the difference between CompTIA A+ 1101 and 1102?
Both are required to earn the A+ certification. The 1101 (Core 1) covers hardware, networking fundamentals, mobile devices, and cloud computing basics. The 1102 (Core 2) covers operating systems, security, software troubleshooting, and operational procedures. You can take them in either order, but most candidates study 1101 first since hardware knowledge provides useful context for software troubleshooting.
How many CEUs do I need to renew a CompTIA certification?
It depends on the cert tier. A+ requires 20 CEUs per 3-year cycle. Network+ requires 30. Security+ requires 50. CySA+, PenTest+, and CASP+/SecurityX each require 60–75. Higher-level certs (SecurityX) also require a minimum number of CEUs from activities specifically relevant to the cert domain, not just any IT training.
What is the new CompTIA SecAI+ certification?
SecAI+ (CY0-001) is CompTIA's AI cybersecurity certification launched in 2025. It covers securing AI systems, identifying AI-specific attack vectors (prompt injection, data poisoning, model inversion), AI governance frameworks, and evaluating AI tools for enterprise security use. It's early-stage in terms of employer recognition but relevant for security professionals working in environments that are actively deploying AI systems.
Bottom Line
If you're deciding which CompTIA certification to start with: A+ if you're targeting help desk or desktop support with no prior experience; Security+ if you have any IT background and want to move into security or federal contracting roles; Network+ if you're specifically interested in network administration or cloud infrastructure.
The certification itself doesn't get you hired — it gets you past the resume filter. What gets you hired is being able to answer troubleshooting scenarios in an interview and demonstrating that the cert reflects real knowledge, not just memorized answers. Use practice exams extensively, spend time in virtual labs, and treat the performance-based questions as the primary study target rather than the multiple-choice content.
CompTIA certifications are renewable every three years. Plan your CEU activities from the day you pass — it's much easier to accumulate continuing education credits gradually than to scramble for them 90 days before expiration.