SY0-801 prerequisites: what you need first
CompTIA Security+ SY0-801 has no hard prerequisites. CompTIA lists the recommended experience as a security administrator with two years of hands-on experience, and nothing is enforced at booking. This page explains what that means for someone planning to start the study plan, and which IT background you will use constantly.
What CompTIA says
For SY0-801 (Security+ V8) CompTIA’s page names one recommendation: a security administrator with two years of hands-on experience. I could not confirm a recommended certification for V8 on the official page. Earlier material for SY0-701 recommended Network+, but that is not stated for V8, so treat it as a sensible path rather than an official requirement. Our Security+ vs SY0-701 comparison covers other differences between versions.
The background that helps
Networking
Ports, protocols, firewalls, VPNs, segmentation and DNS appear in every domain. You should know what TCP and UDP are, what a subnet is, and why traffic on port 443 differs from port 23. If this is your gap, the Network+ section teaches it properly.
Operating systems and administration
Users, groups, file permissions, services and logs on Windows and Linux. Access control, hardening and incident response questions assume you know what a normal system looks like.
Basic cloud and virtualisation
What a virtual machine is, and the difference between on-premises and cloud hosting. The shared responsibility idea comes up repeatedly in security architecture.
Everyday security awareness
Phishing, passwords, multi-factor authentication and software updates are familiar from daily life. The exam wants the formal names and the right control for each scenario, as the threats guide shows.
Reading scenarios
Performance-based questions put you into a short situation. Practising slow, careful reading is background in itself.
What you do not need
| You do not need | Why |
|---|---|
| Two years in a security job | A recommendation; the exam is entry to intermediate |
| Network+ or A+ | Not required to book |
| Programming skills | The exam asks about concepts and tools, not code |
| A degree | Not mentioned on CompTIA’s page |
| Vendor product experience | The exam is vendor-neutral |
A short self-check
- What is the difference between authentication and authorisation?
- What does a firewall do, and where might you place one?
- What is the principle of least privilege?
- What is phishing?
- Why do systems need patching?
If most are easy, begin. If networking questions feel unfamiliar, spend a week on networking basics first. Is SY0-801 hard? describes what to expect.
Where it leads
Read the exam format for dates and mechanics, then the study plan. After Security+, CySA+ CS0-004 goes deeper into analysis, and SecAI+ CY0-001 adds AI security.