Table of Contents

Click Here to Return To the IT Career Playbook

CompTIA offers vendor-neutral credentials across IT support, networking, security, and Linux. Check job postings for the role and location you want before paying for an exam. A credential documents assessed knowledge. It does not replace work samples or experience.

Check each credential’s current renewal rules with CompTIA. Many use a three-year continuing education cycle, but accepted activities and automatic renewals differ by credential.

The CompTIA Certification Stack

CertificationExam CodeLevelWhat It Proves
CompTIA A+220-1201 / 220-1202EntryHardware, OS, networking basics, troubleshooting
CompTIA Network+N10-009Entry/IntermediateNetworking infrastructure, protocols, troubleshooting
CompTIA Security+SY0-701Entry/IntermediateSecurity fundamentals, threats, cryptography, compliance
CompTIA Linux+XK0-006IntermediateLinux administration, services, scripting, troubleshooting
CompTIA CySA+CS0-004IntermediateCybersecurity analysis, threat detection, incident response
CompTIA PenTest+PT0-003IntermediatePenetration testing methodology
CompTIA SecurityXCAS-005AdvancedEnterprise security architecture, risk management
CompTIA SecAI+CY0-001IntermediateAI security, AI systems integration
CompTIA SecOT+Draft SOT-001Pre-releaseOperational technology security topics, subject to final objectives

CompTIA A+ (220-1201 / 220-1202)

CompTIA A+ provides a starting point for many IT support paths. Federal work roles have specific qualification requirements under the DoD 8140 program. Check the applicable role and component before treating one credential as sufficient.

  • Two exams required: Core 1 (220-1201) covers mobile devices, networking, hardware, virtualization, and cloud; Core 2 (220-1202) covers operating systems, security, software troubleshooting, and operational procedures.
  • Study plan: map each official objective to a lesson, a lab, and a check result
  • Resources: compare current exam codes and outlines before using a course or practice bank

See the full course on this site: CompTIA A+ Course (220-1201 / 220-1202)

CompTIA Network+ (N10-009)

CompTIA Network+ assesses networking concepts across vendor environments. Compare its scope with role requirements and other networking credentials before choosing an exam.

  • Topics: Networking concepts, infrastructure, operations, security, network troubleshooting
  • Study plan: build and troubleshoot a small network, then check gaps against N10-009 objectives

See the full course on this site: CompTIA Network+ Course (N10-009)

CompTIA Security+ (SY0-701)

CompTIA Security+ assesses foundational security concepts. Employers and federal components set different role qualifications. For DoD positions, use the current 8140 work-role matrix and the hiring component’s requirements rather than the former 8570 IAT levels.

  • Topics: Attacks and threats, architecture, implementation, operations, governance, risk, compliance
  • Study plan: complete a control, incident, and risk exercise, then check gaps against SY0-701 objectives

See the full course on this site: CompTIA Security+ Course (SY0-701)

CompTIA Linux+ (XK0-006)

CompTIA Linux+ covers Linux administration at a level suitable for sysadmin and cloud engineering roles. Unlike Red Hat’s RHCSA, it is vendor-neutral and covers multiple distributions.

  • Topics: System management, services and users, security, automation and scripting, troubleshooting
  • Study plan: document a Linux VM’s storage, services, users, security, automation, and troubleshooting evidence

See the course path: CompTIA Linux+ XK0-006

CompTIA CySA+ (CS0-004)

CompTIA CySA+ targets security analysts, SOC analysts, and IT professionals taking on security responsibilities. It focuses on threat intelligence, vulnerability management, and behavioral analytics.

  • Topics: Threat intelligence, vulnerability management, incident response, reporting
  • Study plan: produce a detection, vulnerability triage, response, and reporting record
  • Federal roles: Check the current DoD 8140 work-role matrix and your component’s rules before choosing this credential for a position

See the course path: CompTIA CySA+ CS0-004

CompTIA PenTest+ (PT0-003)

CompTIA PenTest+ covers penetration testing methodology and is positioned between Security+ and the Offensive Security OSCP. It is vendor-neutral and emphasizes both technical and reporting skills.

See the full course on this site: CompTIA PenTest+ Course (PT0-003)

CompTIA SecurityX (CAS-005)

CompTIA SecurityX (formerly CASP+) is an advanced security certification for practitioners. It requires renewal under CompTIA’s continuing education program. Check the current SecurityX renewal options and the applicable DoD 8140 work-role matrix before planning a credential path.

See the course path: CompTIA SecurityX CAS-005


A structured progression for an IT professional targeting a security-aware sysadmin or cloud role:

  1. CompTIA A+ — hardware and OS fundamentals
  2. CompTIA Network+ — networking
  3. CompTIA Security+ — security baseline
  4. Branch based on specialization:
    • Sysadmin/Cloud path: Linux+ then cloud certs
    • Security path: CySA+ then consider CISSP
    • Networking path: Cisco CCNA (see Cisco Certifications Guide )

Do not stack certifications too fast without applying skills at work or in a home lab. Certifications without experience have diminishing returns.

Next Steps