A realistic six-week plan assuming you already have Security+ or equivalent knowledge, at around 8 hours per week. Pair every topic with hands-on log analysis or triage practice.
| Week | Focus | Checkpoint |
|---|---|---|
| 1 | Security Operations: monitoring and SIEM | You can read logs and spot an anomaly |
| 2 | Security Operations: threat intel and IoCs | You can use indicators of compromise in detection |
| 3 | Vulnerability Management: scanning and CVSS | You can score and prioritise vulnerabilities |
| 4 | Vulnerability Management: remediation | You can plan and validate a fix |
| 5 | Incident Response and Reporting | You can sequence the IR lifecycle and report findings |
| 6 | Full-length timed reviews + PBQ practice | You consistently pass timed reviews |
Final-week tips
Drill performance-based questions and time management. Concentrate on Security Operations and Vulnerability Management, which together are over 60% of the exam. Do not use “real exam questions” sites - they violate CompTIA policy and copyright.