Study Plans · Security+

The right schedule depends on your experience and the time you can commit each week. Three plans are provided below. Each assumes you will read the relevant chapters, answer the review questions, and spend some time on hands-on practice or flashcards.

Ten-Week Standard Plan (6–8 hours per week)

This plan suits most candidates who have some IT experience and are studying around a full-time job. Week Chapters Focus

1 Front matter, Ch.

1–2

Exam format; security controls, CIA, AAA, Zero Trust; change management 2 Ch. 3–4 Cryptography and PKI; threat intelligence, CVE and CVSS

3 Ch. 5–7 Threat actors; threat vectors; vulnerability types and attack surfaces 4 Ch. 8–9 Indicators of malicious activity; AI threats

5 Ch. 10–11 Architecture models; securing enterprise infrastructure

6 Ch. 12–13, Ch. 14 Data protection; resilience and recovery; mitigating controls 7 Ch. 15–18 Asset management; vulnerability management; monitoring; IAM 8 Ch. 19–21 Automation and AI in operations; incident response; investigations 9 Ch. 22–27 Governance, risk, third parties, compliance, audits, awareness 10 PBQ Workshop, Practice Exams, Quick Reference

Timed practice, review weak objectives, final memorization

Six-Week Accelerated Plan (12–15 hours per week)

This plan suits experienced administrators, or candidates who can study nearly full time.

Week Chapters Focus
1 Ch. 1–5 Domain 1 and the first half of Domain 2
2 Ch. 6–9 Remainder of Domain 2, including AI threats
3 Ch. 10–14 Domain 3 and mitigating controls
4 Ch. 15–21 Remainder of Domain 4
5 Ch. 22–27, PBQ Workshop Domain 5 and PBQ practice

6 Practice Exams, Quick Reference

Timed exams, targeted review, acronyms

Fourteen-Week Foundation Plan (4–5 hours per week)

This plan suits newcomers to IT security, students, and anyone with a heavy schedule. It builds in a review week after each domain.

Weeks Chapters Focus

1–2 Ch. 1–3 Domain 1 at a comfortable pace, with extra time for cryptography 3 Review Rework Domain 1 review questions; build flashcards

4–6 Ch. 4–9 Domain 2, one or two chapters per week
7 Ch. 10–11 Domain 3, first half
8 Ch. 12–13 Domain 3, second half; review Domains 2–3
9–11 Ch. 14–21 Domain 4, two to three chapters per week
12 Ch. 22–27 Domain 5

13 PBQ Workshop, Practice Exam A

Timed exam, review explanations

14 Practice Exam B, Quick Reference

Final exam simulation and memorization

Real-world scenario

A help desk technician with one year of experience plans to take the exam in three months. She chooses the fourteen-week plan but compresses the first two weeks because she already understands basic controls. She spends the saved time building a lab with two virtual machines, a firewall appliance, and a free log management tool. When she reaches Chapter 21 (investigations), the log analysis questions feel familiar because she has already read real logs from her own lab.