CompTIA CySA+ Study Guide

Preparing for CompTIA CySA+ V4 (CS0-004)? You are in the right place: CompTIA describes CySA+ as a certification that "validates your ability to detect, analyze, and respond to threats in security operations and vulnerability management roles". V4 launched on June 23, 2026, with a maximum of 85 questions in 165 minutes and a passing score of 750 on a scale of 100 to 900.

The skills CompTIA lists include "Identify, prioritize, and mitigate vulnerabilities using risk-based approaches," and its objectives summary names the inputs to that prioritizing: "scoring systems, threat intelligence, and business context." So a severity score alone does not decide which fix comes first. Threat indicators call for the same weighing: RFC 9424 explains that an indicator delivered with context lets a defender choose to "simply log it, actively monitor it, or outright block it."

CompTIA's CySA+ V4 exam objectives summary groups the objectives into four domains, Security Operations (34%), Vulnerability Management (26%), Incident Response and Management (24%), and Reporting and Communication (16%). Start with Security Operations, the largest domain, or pick any domain from the list beside this page.