Getting certified · Requirements
CySA+ requirements and prerequisites
CySA+ has no required prerequisites: you can buy a voucher and book CS0-004 without holding another certification or proving work history. CompTIA recommends Network+ and Security+ knowledge, or the equivalent, plus about four years of hands-on work as a level-2 security operations center (SOC) analyst or vulnerability analyst (CS0-004 exam objectives, checked October 2026).
Required versus recommended
| Item | Required | Recommended |
|---|---|---|
| Prior certification | None | Network+ and Security+, or equivalent knowledge |
| Work experience | None | About 4 years hands-on: SOC analyst (level 2) or vulnerability analyst |
| Degree | None stated | None stated |
| Passing the exam | 750 on a 100–900 scale | — |
The retiring CS0-003 page words the experience as at least four years as an incident response analyst, SOC analyst or equivalent. Either way it is guidance for your preparation.
Skipping Security+ is allowedRule
CompTIA lets you go straight to CySA+ but says it is generally not recommended unless you already have substantial cybersecurity experience (CompTIA FAQ, June 12, 2026). The CySA+ vs Security+ comparison shows what the foundation exam covers.
What you need to sit the exam
- A CS0-004 voucher: US retail $425 (CompTIA FAQ, June 12, 2026), varying by country. The CySA+ exam voucher page covers where to buy and how long it lasts.
- A booking with Pearson VUE, which delivers the exam at a test center or online through OnVUE proctoring.
- For OnVUE: a webcam, microphone and speaker (no headphones), one display, a clear room and a valid ID. Failing a requirement on the day cancels the exam and forfeits the fee, per Pearson VUE.
- A score of 750 or higher on the 100–900 scale.
Reading the four-year recommendation
The four years describe the candidate CompTIA wrote CS0-004 for: someone who has worked a SOC queue and a vulnerability backlog. The exam's scenario items, including performance-based questions (PBQs) that ask you to work through logs or tool output, assume you have seen that material before.
A practical self-check is to go domain by domain. Can you read a security information and event management (SIEM) alert and name the next query? Can you rank three scanner findings when the CVSS (Common Vulnerability Scoring System) scores disagree with the asset values? Can you put containment, eradication and recovery steps in order for a ransomware case? Each no marks a study area, whatever your job title.
Weight the gaps by the blueprint. Security operations is 34% of CS0-004 and vulnerability management 26%, so a missing skill there costs more than one in reporting and communication at 16%. Gaps in the 24% incident response domain tend to surface in the scenario items, where you order the response.
If you are still short of the analyst seat itself, the path into a cybersecurity analyst job covers the stages before CySA+.
DoD 8140 work roles CompTIA maps CySA+ to
| Code | DoD work role |
|---|---|
| 141 | Warning Analyst |
| 211 | Forensics Analyst |
| 212 | Cyber Defense Forensics Analyst |
| 221 | Cyber Crime Investigator |
| 461 | Systems Security Analyst |
| 511 | Cyber Defense Analyst |
| 531 | Cyber Defense Incident Responder |
| 541 | Vulnerability Assessment Analyst |
| 612 | Security Control Assessor |
Source: CompTIA framework alignment. CompTIA states CySA+ is approved for DoDM 8140.03 requirements. Proficiency levels for each role are set in the US Department of Defense (DoD) 8140 qualification matrix; confirm the level your role needs with your command or contracting officer.
Edge cases before you book
Do I need Network+ before CySA+?
No. CompTIA recommends Network+-level knowledge for CS0-004 but does not require the certification.
Is there a degree requirement?
CompTIA's CS0-004 pages list none (CompTIA CySA+ V4, checked October 2026). A degree matters for some employers, which is a hiring question rather than an exam one.
Does CySA+ meet DoD 8140?
CompTIA describes CySA+ as approved for DoDM 8140.03 requirements and maps it to the work roles in the table above. Check the proficiency level your role needs against the current DoD matrix.
Can I take CySA+ online from home?
Yes, through Pearson VUE OnVUE, if you meet its room and equipment rules. Pearson VUE does not accept IDs from Belarus, Cuba, Iran, North Korea, Russia, Syria or restricted regions of Ukraine for OnVUE (Pearson VUE OnVUE for CompTIA, checked October 2026).
Can I still book CS0-003 instead?
In English, until December 22, 2026; Japanese, Portuguese and Spanish run until March 23, 2027 (CompTIA CySA+ V3, checked October 2026). Neither version has hard prerequisites.
What can cost me the certification after I pass?
Using unauthorized brain-dump material. The CS0-004 objectives warn that CompTIA revokes certifications and suspends candidates found using it (CS0-004 objectives, page 1).
Sources
- CompTIA CySA+ CS0-004 exam objectives, version 2.0 (PDF) (checked October 9, 2026)
- CompTIA CySA+ V4 (CS0-004) exam page (checked October 9, 2026)
- CompTIA CySA+ V3 (CS0-003) exam page (checked October 9, 2026)
- CompTIA blog: The New CompTIA CySA+ (V4), Your Certification Questions Answered · published June 12, 2026 (checked October 9, 2026)
- CompTIA framework alignment page · DoDM 8140.03 work roles (checked October 9, 2026)
- Pearson VUE, OnVUE online testing for CompTIA (checked October 9, 2026)
Facts checked. Now practice.
Take CySA+ practice questions with you in our app for iPhone and Android.