SY0-701 hands-on labs — CompTIA Security+
SY0-701 is the exam for CompTIA Security+. 148 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 172 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 71 come with StationX Membership ($299/year) and 77 need StationX Infrastructure Labs ($149/year).
This exam retires in English on 11 Jun 2027.
148 labsabout 172 hoursStationX Membership · $299 / year · 71 labsStationX Infrastructure Labs · $149 / year · 77 labs
Access
StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
StationX Infrastructure Labs — 3 attempts per lab
🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab
Already have access? Sign in.
SY0-701 at a glance
- Exam code
- SY0-701
- Certification
- CompTIA Security+
- Vendor
- CompTIA
- Labs
- 77 in StationX Infrastructure Labs · 71 in StationX Membership
- How the labs are mapped
- 148 from the StationX roadmap
- Practice time
- About 172 hours, every lab states a duration
- Lab levels
- Guided 51 · Advanced 18 · Expert 6 · Getting Started 2 · not stated 71
The 148 SY0-701 labs
- Additional Scanning Options
- Analyze Log Files for Malicious Activity
- Applying Filters to TCPDump and Wireshark
- Auditing Service Accounts and Setting Up Automated Log Collection
- Back Up and Restore Data in Linux
- Back Up and Restore Data in Windows
- Baseline Systems in Accordance with Policy Documentation
- Basics of Metasploit
- BCP DRP and Test Planning
- BitLocker Setup
- Block Incoming Traffic on Known Port
- Can You Add Server Access for a Group?
- Can You Back Up and Restore Data in Windows and Linux?
- Can You Configure Drive Encryption by Using LUKS and BitLocker?
- Can You Configure Remote Administration by Using PuTTY and SSH?
- Can You Configure Standard Linux and Windows Permissions?
- Can You Configure the Firewall in Linux and Windows?
- Can You Configure Update Management in Linux and Windows?
- Can You Deploy a Certificate Authority and Issue Certificates?
- Can You Enumerate Network Services by Using Port Scanning in Linux?
- Can You Harden a Linux Web Server?
- Can You Harden a Server by Restricting Access per Protocol?
- Can You Harden the SSH Service on a Linux Server?
- Can You Harden Windows Hosts?
- Can You Manage Access in Linux and Windows?
- Can You Manage Password Requirements in Windows and Linux?
- Can You Manage Users and Groups in Windows and Linux?
- Can You Manage Windows and Linux Systems?
- Can You Secure a Website with an SSL/TLS Certificate?
- Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?
- Can You Secure Host Settings Through Firewall Settings and Group Policy?
- Can You Secure Network Access?
- Can You Use PKI to Secure a Network Environment?
- Can You Use PowerShell to Gather Computer Information in Windows?
- Can You Use the Sysinternals Suite to Review Permissions on a Windows System?
- Centralized Monitoring
- CIRP Creation and Disaster
- Comparing Controls
- Conduct Baseline Comparison for Indicators of Compromise
- Configure a Jump Box
- Configure a Local Security Policy on Server 2016
- Configure a Windows PPTP VPN
- Configure a Wireless Access Point
- Configure and Test the Firewall in Linux
- Configure and Test the Firewall in Windows
- Configure Custom Certificate Templates and Deployment Options
- Configure Devices by Using Ansible
- Configure IPSec
- Configure Linux Firewall ACL Rules
- Configure Password Management in Linux
- Configure Password Management in Windows
- Configure Patch Management in Linux
- Configure Security Settings by Using Microsoft Group Policy
- Configure Standard Linux Permissions
- Configure Standard Windows Permissions
- Configure Update Management in Windows
- Configure Windows Defender on a Windows System
- Configure Windows Firewall ACL Rules
- Creating a Baseline Using Autopsy
- Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server
- Creating a Secondary Baseline and Conducting Comparison
- Creation of BCP and DRP
- Creation of Standard Operating Procedures for Recovery
- Cryptography: Attacking Classic Ciphers
- Cryptography: Breaking Repeated Key XOR Cipher
- Cryptography: Breaking Weak RSA Keys
- Cryptography: Decrypting Files With a Dictionary Attack
- Cryptography: Forging Digital Signatures
- Cryptography: Forging MACs With Side Channels
- Cryptography: Hidden Veracrypt Containers
- Cryptography: Man In the Middle Attack
- Cryptography: Password Cracking
- Cryptography: Setting Up HTTPS in Windows and Linux
- Cryptography: Setting Up Two Factor Authentication
- Cryptography: Steganography
- Cryptography: Using GPG for Encryption and Key Management
- Cryptography: Using the OpenSSL CLI Tool
- Data Backup to Prep for Recovery
- Data Downloads and Validation
- Deploy a Docker Container
- Deploy a Private Certificate Authority
- Deploy a Virtual Machine
- Digitally Sign Code To Verify Authenticity
- DNS as a Remote Shell
- Enable Client SSL/TLS
- Enable DNSSEC
- Enable SSL/TLS on a Website
- Enhance Security by Using SELinux
- Escalate Privileges in Linux
- Event Log
- Examine Log Files to Block Bad Actors
- Firewall Setup and Configuration
- Force Point: DLP Email Overview
- Force Point: DLP Network Overview
- Force Users to Change Password Upon First Sign In
- Gap Analysis of Firewall Rules
- Getting Started with Cybersecurity Defensive Tools
- Getting Started with Security Concepts in Windows and Linux Environments
- Harden a Server by Limiting Access to a Single Subnet
- Host Data Integrity Baselining
- Identify and Manage Old Software
- Identify Non-secure Network Traffic
- Identifying Key Assets
- Implementing Least-Privilege on Windows
- Installing Patches and Testing Software
- Leveraging Internal Intelligence Resources
- Log Correlation & Analysis to Identify Potential IOC
- Manage Configurations by Using Ansible
- Manage File Redundancy for Resilience and Recovery
- Manage System Restore Using Windows 11
- Manage Users and Groups in Linux
- Manage Users and Groups in Windows
- Managing Log Files on a Windows Server
- Manually Creating a Baseline with MD5Deep
- Manually Request a PKI Certificate
- MITRE - Attack
- MITRE - Defend
- Monitoring and Verifying Management Systems
- Network Discovery
- Network Segmentation (FW/DMZ/WAN/LAN)
- Network Topology Generation
- Open and Close Ports on Windows 7
- Open Source Collection
- Open Source Password Cracking
- Perform Security Audits on Linux Services
- Phishing
- Post Incident Service Restoration
- Ransomware
- Recover from SQL Injection Attack
- Recovering Data and Data Integrity Checks
- Remove a User Account
- Sanitize Storage Disks
- Scanning From Windows
- Sensitive Information Identification
- Setting Up Zones in a Firewall
- Snorby Setup and Operation
- TCPDump
- Tweaking Firewall Rules for Detection
- Use a Password Cracking Utility in Linux
- Use Alerting and Monitoring Tools
- Use EFS To Encrypt Files on NTFS Volumes
- Use Git to Manage Code
- Using Encryption to Secure Information
- Using Snort and Wireshark to Analyze Traffic
- Vulnerability Identification and Remediation
- Windows Deployment Services
- Windows Event Log Manipulation via Windows Event Viewer
- Wireshark
Roadmaps for SY0-701
- CompTIA Security+ (SY0-701) — certification roadmap: courses, labs and practice tests in order
- SOC Analyst — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Penetration Tester — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Threat Hunter — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Digital Forensics Analyst — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Threat Intelligence Analyst — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Cloud Security Engineer — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Security Engineer — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Security Architect — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Network Security Engineer — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Security Administrator — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Cyber Security Manager — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Cyber Security Risk Manager — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- Cyber Security Compliance Officer — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap
- AI Security Engineer — career roadmap; follows the CompTIA Security+ (SY0-701) roadmap














