CompTIA CySA+

Exam cost

Not verified

Questions · time · passing score

up to 85 questions · 165 minutes · Pass: 750 (100–900 scale)

Prerequisites

Recommended: four years in a SOC analyst (level 2) or vulnerability analyst role.

Estimated salary premium

Not established by comparable evidence

Renewal requirements

Not verified in this audit; confirm with issuer.

Difficulty

Not rated

Domains covered

• Security operations (34%)
• Vulnerability management (26%)
• Incident response and management (24%)
• Reporting and communication (16%)

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

• SOC Director →
• Security Manager/IT-to-Cyber →
• Foundations — Career Changers →

Recent catalog changes

1. CompTIAexam update2026-10-29

   CompTIA CySA+

   CompTIA CySA+: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   Maximum of 85 questions, a mix of multiple-choice and performance-based questions. Duration: 165 minutes. Passing score: 750 (on a scale of 100-900).

   After

   CS0-004 V4: maximum 85 multiple-choice and performance-based questions; 165 minutes; passing score 750 (100–900 scale). Confirm version availability when booking.

   Review source
2. CompTIAupdated2026-10-29

   CompTIA CySA+

   CompTIA CySA+: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   10

   After

   Not verified

   Review source
3. CompTIAdomain change2026-10-29

   CompTIA CySA+

   CompTIA CySA+: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   ** Security operations processes · threat intelligence · threat hunting · malicious activity identification · vulnerability assessments · vulnerability prioritization · mitigation strategies · incident response · incident management lifecycle · log ingestion · network architecture · IAM · encryption · sensitive data protection · network anomalies analysis · host issues analysis · application irregularities analysis · social engineering attacks analysis · Wireshark · SIEM · VirusTotal · Python scripting · PowerShell scripting · threat actors · TTP · intelligence sharing · hunting techniques · vulnerability scanning · asset discovery · cloud infrastructure assessments · CVSS interpretation · exploitability assessment · zero-day vulnerabilities · XSS mitigation · overflow vulnerabilities mitigation · data poisoning mitigation · compensating controls · patching · configuration management · secure SDLC · threat modeling · cyber kill chains · MITRE ATT&CK · OSSTMM · OWASP testing guide · incident detection · incident analysis · incident containment · incident eradication · incident recovery · incident response plans · forensic analysis · root cause analysis · compliance reporting · stakeholder communication

   After

   Security operations (34%) · Vulnerability management (26%) · Incident response and management (24%) · Reporting and communication (16%)

   Review source
4. CompTIAupdated2026-10-29

   CompTIA CySA+

   CompTIA CySA+: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   Not verified

   After

   https://lecbyo.files.cmp.optimizely.com/download/68b1eae88e5011f08868a275d699e612

   Review source
5. CompTIAupdated2026-10-29

   CompTIA CySA+

   CompTIA CySA+: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   3

   After

   Not verified

6. CompTIAupdated2026-10-29

   CompTIA CySA+

   CompTIA CySA+: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   10

   After

   Not verified

   Review source
7. CompTIAupdated2026-10-29

   CompTIA CySA+

   CompTIA CySA+: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   https://www.comptia.org/en-us/certifications/cybersecurity-analyst/

   After

   https://lecbyo.files.cmp.optimizely.com/download/68b1eae88e5011f08868a275d699e612

   Review source
8. CompTIAexam update2026-10-29

   CompTIA CySA+

   CompTIA CySA+: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   In-person at Pearson VUE testing centers or online proctored via Pearson VUE OnVUE.

   After

   Not verified

9. CompTIAprice change2026-10-29

   CompTIA CySA+

   CompTIA CySA+: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   404

   After

   Not verified

10. CompTIAupdated2026-10-29

    CompTIA CySA+

    CompTIA CySA+: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed

    Before

    $150 for the three-year renewal period

    After

    Not verified

Sources and verification

• https://lecbyo.files.cmp.optimizely.com/download/68b1eae88e5011f08868a275d699e612