Skip to content
Oluma Cyber Security Awareness
OLUMA CYBER SECURITY
COMPTIA

CompTIA CySA+ (CS0-004)

PROFESSIONAL OFFICIAL CERT

Covers security operations, vulnerability management, incident response and management, and reporting and communication — including the new AI-in-the-SOC content added in the V4 (CS0-004) refresh. Practice with 100 original exam-style questions, including realistic SELECT TWO items, weighted to match the real exam’s current domain breakdown.

100Practice questions
4Exam domains
165 minReal exam length
750/900Real passing score
Exam codeCS0-004 (V4)
Launch dateJune 23, 2026
Length of test165 minutes
Number of questionsMaximum of 85 (real exam)
Question typesMultiple choice (incl. SELECT TWO) and performance-based
Passing score750 (on a scale of 100–900)
Recommended experience~4 years as a SOC analyst or vulnerability analyst
ReplacesCS0-003 (V3), same-day retirement
Official Exam Page →

CS0-004 (V4) launched June 23, 2026 and is now the current version of CySA+, replacing CS0-003 the same day. It keeps the same four domain names as V3 but rebalances their weights and adds new coverage of AI risks, AI governance, and AI use cases in security operations. Exam details, pricing, and policies can change — always confirm the current version on CompTIA’s official site before booking.

1.0 Security Operations

34%

Indicator analysis (IOC vs. IOA), SIEM/EDR/XDR telemetry, threat intelligence, threat hunting, log correlation, and the new V4 coverage of AI risks (hallucination, prompt injection, sensitive-data exposure), AI governance, and AI use cases in the SOC.

2.0 Vulnerability Management

26%

Scanning (authenticated/unauthenticated), CVSS and risk-based prioritization, validation, compensating controls, asset inventory, SBOMs, and remediation tracking.

3.0 Incident Response and Management

24%

The full incident lifecycle — containment, eradication, and recovery — plus chain of custody, forensic acquisition, the Cyber Kill Chain and Diamond Model, root cause analysis, and lessons learned.

4.0 Reporting and Communication

16%

Translating technical findings into stakeholder-appropriate reports, executive communication during active incidents, KPIs/KRIs (MTTD, MTTR), and distinguishing confirmed facts from unconfirmed hypotheses.

View Official Objectives →

Domain weights are current for the CS0-004 (V4) exam released June 2026 — Incident Response and Management gained weight over V3, while Vulnerability Management lost the same amount. CompTIA periodically revises objectives — confirm the current outline on the official page before your exam.

OLUMA CYBER SECURITY
Practice questions are original and written to reflect the style and weighting of the official CompTIA CySA+ CS0-004 objectives — they are not real exam questions. Verify current exam details with CompTIA.