CompTIA certification path

Updated September 20, 2026

Take Network+ (N10-009) before any security certification — networking is the foundation security sits on, and skipping it leaves gaps that surface in every later exam. SecAI+ (CY0-001) is a specialist exam about securing AI systems and assumes you already work in security; it is not a next step from Network+.

The two exams covered here

ExamLevelAssumesTake it if
N10-009CoreSome hands-on IT experienceYou work in infrastructure, support or are moving into security
CY0-001SpecialistWorking security experienceYou secure AI systems or advise on how to

Why Network+ comes first

CompTIA’s vendor-neutral core sequence runs roughly A+, Network+, Security+. Network+ is the one that repays itself most across everything afterwards.

The reason is simple: most security work is network work with different vocabulary. Segmentation, ACLs, VLANs, DNS behaviour, routing, TLS — these are networking concepts that security exams assume you already hold. People who skip Network+ tend to pass Security+ by memorisation and then struggle in the job, because the mental model underneath is missing.

The N10-009 version weights troubleshooting most heavily at 24%, followed by networking concepts at 23%, implementation at 20%, operations at 19% and security at 14%. That troubleshooting emphasis is deliberate and it is the part that transfers best to real work.

One practical note: CompTIA does not publish a single price for Network+ that holds across regions, and voucher prices vary considerably. Check the price for your own country rather than trusting a figure you read somewhere.

Where SecAI+ fits

CY0-001 is not a progression from Network+. It is a specialist certification for people already working in security who now have AI systems in scope.

Its weighting tells you what it is: securing AI systems carries 40%, AI-assisted security 24%, AI governance risk and compliance 19%, and basic AI concepts related to cybersecurity 17%. The bulk of it is attack and defence against AI systems — prompt injection, data poisoning, model extraction, membership inference, agent blast radius.

Take it if you already hold a security role and AI has arrived in your remit. Do not take it as a way into security; it assumes the security fundamentals rather than teaching them.

A realistic sequence

If you are starting out in IT: Network+ first, then Security+ if security interests you, then consider a specialist exam once you are actually doing the work.

If you already work in infrastructure: Network+ will still likely find gaps, particularly in troubleshooting method and wireless. It is a fast exam to prepare for with real experience behind you.

If you already work in security and AI has landed on your desk: go to SecAI+ and skip the rest of this page.

How long each takes

  • N10-009 — four to six weeks with some hands-on experience, eight to ten weeks without
  • CY0-001 — four to six weeks for a working security professional

Network+ rewards labs more than reading. Building a small network, breaking it and fixing it teaches the troubleshooting domain in a way no course does.

What to do next

Read the N10-009 exam format guide to see what the exam actually asks, then take the free 20-question practice test. The troubleshooting questions are the ones worth paying attention to — if those go badly, the exam will too.

If AI security is the goal, AAISM vs SecAI+ explains which of the two suits a practitioner and which suits a manager. See also the exam changes tracker for current versions.