Questions
85
Time limit
165 min
Passing score
750 / 900
Format
MCQ + PBQs
CompTIA CySA+ targets the intermediate cybersecurity analyst role. CS0-003 covers security operations, vulnerability management, incident response & management, and reporting & communication. The exam emphasises hands-on analysis — log correlation, threat hunting, and forensic basics.
Prerequisites
Security+ recommended plus 4 years of hands-on security experience. Solid Linux + Windows admin skills required for the lab-style questions.
Career outcomes
Five focus areas with the weight each domain carries on the real exam. We have practice questions and PBQs for every domain.
Security Operations
Monitoring, threat hunting, log analysis, SIEM correlation.
Vulnerability Management
Scanning, prioritization, remediation, validation.
Incident Response & Management
Detection, containment, eradication, recovery, lessons-learned.
Reporting & Communication
Reporting findings, stakeholder communication, metrics.
Curated MCQs
Hundreds of CySA+ MCQs aligned to every objective. Filter by domain, difficulty, or take a full timed exam.
6 PBQ simulation types
Firewall configs, log analysis, terminal investigations, network configs, drag-drops, troubleshoot wizards — exam-realistic.
Video lessons by domain
Walkthroughs for each CySA+ domain. Watch, then quiz yourself.
AI tutor on every question
Stuck? Ask the AI tutor. It's grounded in this cert's objectives, not generic web answers.
Flashcards with spaced repetition
AI-generated decks for each domain. Review the cards you keep getting wrong.
Per-domain analytics
See exactly which CySA+ domains need more work. Stop guessing what to study.
Based on what we've seen work for CySA+ candidates. Adjust to your pace — most people land between 4 and 10 weeks.
Week 1–3
Security ops + log analysis (heaviest domain). Use our terminal-style PBQs.
Week 4–5
Vulnerability management — scanning tools, scoring (CVSS), prioritisation.
Week 6
Incident response playbooks + practice exams.
Week 7
Reporting & communication. Write up a few incident reports.
Is CySA+ harder than Security+?
Yes — CySA+ is intermediate. The exam is longer (165 min vs 90), the PBQs are more demanding, and you need real analysis skills, not just memorised concepts.
Does CySA+ count for DoD 8570 / 8140?
Yes — CySA+ is baseline approved for CSSP Analyst, Infrastructure Support, Incident Responder, and Auditor.