The CompTIA Security+ exam is a vendor-neutral exam that tests applicants' knowledge of IT security and their ability to perform core security functions. Around 20% of the questions will cover the topics of threats, vulnerabilities, and attacks. Applicants will have to understand various types of compromise and understand penetration testing and vulnerability scanning. An equal portion of the test will cover the technologies and tools a security professional will use to accomplish security tasks. Next, about 16% of the test will be questions that test a candidate’s knowledge of identity and access management. Around 15% of the exam will cover secure network concepts, architecture, and design. The remaining portion of the exam will validate an applicant's knowledge of risk management best practices, cryptography, and Public Key Infrastructure (PKI).