Security+ SY0-801 AI Objectives: What Candidates Should Know

Artificial intelligence is showing up in more business systems, and security teams are being asked to manage the risks that come with it. That makes one question timely for Security+ candidates: What does the SY0-801 exam actually expect you to know about AI?

The short answer: AI is part of a broader security foundation, not a substitute for one. The published Security+ V8 objectives add a dedicated objective on AI threats and vulnerabilities, covering topics such as prompt injection, poisoning, jailbreaking, hallucinations, and data loss. They also place AI alongside established responsibilities such as access control, monitoring, incident response, risk management, and security awareness.

That's a useful way to approach the topic: learn the AI-specific risks, then connect them to the security practices you already need to understand.

Why AI is part of the Security+ conversation

In an Oct. 15, 2026 research announcement, CompTIA cited its Corporate AI Adoption report, which found that about six in 10 organizations are shifting from experimentation and individual productivity use cases toward enterprise-wide implementation. The same survey ranked cybersecurity concerns as the second-largest challenge to AI adoption, behind finding the right balance between human employees and AI-powered tools and agents. CompTIA's accompanying research brief, Practical Implications of AI Safety, highlighted governance, cybersecurity, and workforce readiness as central requirements for companies moving beyond pilots.

For security practitioners, that shift creates practical questions: What information can an AI tool access? How is sensitive data protected? Who can use the system, and how is that use monitored? What happens when an AI-enabled workflow produces an unsafe or unreliable result?

Security+ is not an advanced AI engineering exam. But as organizations bring AI into everyday work, security administrators and other practitioners need to recognize where AI changes the risk picture and how standard security controls still apply.

What the published SY0-801 objectives say about AI

The exam series code for Security+ V8 is SY0-801, and CompTIA's Security+ V8 page lists the launch for on or around November 17, 2026. The exam has a maximum of 90 questions, a mix of multiple-choice and performance-based, with a 90-minute time limit and a passing score of 750 on a scale of 100 to 900.

The clearest AI-specific objective appears in Domain 2: Threats, Vulnerabilities, and Attacks, which is weighted at 24%. Objective 2.6 asks candidates to "Summarize threats and vulnerabilities associated with artificial intelligence (AI) usage." The official SY0-801 exam objectives list these topics under it:

• Model manipulation
• Poisoning
• Prompt injection
• Data loss
• Bias
• Explainability
• Hallucinations
• Jailbreaking
• Evasion
• Privacy
• Ethical considerations
• Session hijacking
• Code execution

Note the verb: summarize. At this level, you're expected to recognize each threat, explain what it means, and understand why it matters, not to build or attack models yourself.

Where else AI shows up in the objectives

Objective 2.6 isn't the only place AI appears:

• Objective 2.4 (vulnerabilities and attack surfaces) lists large language models (LLMs) as an attack surface, alongside items like shadow IT, misconfiguration, and public repositories.
• Objective 2.5 (indicators of malicious activity) includes deepfakes among social engineering attacks.
• Objective 4.6 (automation and orchestration) adds an AI section covering agentic and chatbot capabilities, predictive analysis, and AI-augmented baselines. In other words, AI shows up as a defensive tool as well as a risk.

In practice, candidates should be ready to reason about questions like:

• Could sensitive or confidential information be exposed through an AI tool or its inputs?
• How might a weakness in an AI system or model affect the confidentiality, integrity, or availability of information?
• What risks arise when a prompt or output is treated as trustworthy without review?
• Which access, data-handling, monitoring, or policy controls could reduce the risk?

Those are study prompts, not predictions of specific exam questions. CompTIA publishes objectives, not the questions candidates will see.

AI also connects to other parts of the blueprint. Security Operations (27%) includes monitoring, vulnerability management, incident response, and automation and orchestration. Security Program Management and Oversight (14%) covers governance, risk management, compliance, privacy, and security awareness. A good study approach treats AI as one thread through those broader responsibilities, rather than a standalone topic to cram in isolation.

A practical way to study the AI-related material

Start with the official objectives and make sure you can explain the risk in plain language. Then practice linking each risk to a security response:

1. Identify the asset and data. What system, model, prompt, output, or information is involved?
2. Describe the exposure. Could sensitive data be disclosed, altered, misused, or relied on without validation?
3. Choose a control. Consider appropriate access, data protection, policy, monitoring, or human-review measures.
4. Connect it to operations. Know how monitoring and incident response can help detect and handle a problem.
5. Check the governance angle. Understand why policies, risk ownership, privacy, and user awareness matter when AI becomes part of normal business workflows.

Example: prompt injection in a support chatbot. A company deploys an AI chatbot that can look up customer order history. An attacker types instructions disguised as a normal question, trying to get the bot to ignore its rules and reveal other customers' records.

• Asset and data: the chatbot, its connection to the order database, and customer personal information.
• Exposure: prompt injection could lead to data loss and a privacy violation.
• Control: limit the bot's database access to the authenticated user's own records (least privilege), validate and filter inputs and outputs, and apply data loss prevention.
• Operations: log and monitor chatbot interactions, alert on unusual query patterns, and include AI tools in incident response procedures.
• Governance: set an acceptable-use and data-handling policy for AI tools, assign a risk owner, and train staff on what the bot should and shouldn't be allowed to do.

This method keeps the topic anchored in Security+ fundamentals. It also helps with scenario-based questions, where the important skill is often selecting a reasonable control for the situation rather than memorizing a buzzword.

Should you change your study plan for SY0-801?

Don't let the AI headlines crowd out the rest of the exam. The published V8 domains cover general security concepts, threats and vulnerabilities, security architecture, operations, and program management. AI is one part of that wider blueprint.

The bigger decision is which version to take. SY0-701 doesn't disappear when SY0-801 launches: CompTIA has scheduled the English SY0-701 exam to retire in June 2027. A simple rule of thumb:

• Already deep into SY0-701 prep and able to test before it retires? Stay the course. Switching mid-plan costs you more than it gains. If you want help getting over the finish line, Trepa's Security+ training for SY0-701 is available now in live online and self-paced formats.
• Starting from scratch, or planning to test after mid-2027? Study for SY0-801 using the V8 objectives.

Whichever you pick, use that version's official objectives as your source of truth and stick to one objective set. Don't assume a practice resource built for one version maps cleanly to the other, especially given the new AI content and shifted domain weights. Check CompTIA's Security+ page again before booking, since launch and retirement dates can change.

The takeaway

The AI portion of Security+ SY0-801 is about security judgment: know the threats in objective 2.6 (prompt injection, poisoning, jailbreaking, hallucinations, data loss, and the rest), recognize LLMs as an attack surface, and connect those risks to controls, monitoring, incident response, and governance. Candidates do not need to chase every new AI headline. They do need a clear grasp of how AI changes familiar security problems.

Get notified when Trepa's SY0-801 prep launches

We're building SY0-801 practice exams and training mapped to the new V8 objectives, including the AI content in objective 2.6. Not ready to wait? Try a free Security+ practice quiz to see where you stand on the fundamentals today.

Subscribe below to be the first to know when our SY0-801 prep launches, plus new Security+ study guides as we publish them.