CompTIA Security+ (SY0-701) Skill

A full adaptive coaching system for the CompTIA Security+ exam (SY0-701), packaged as a Claude Skill. Unlike a static study plan, the skill runs real coaching sessions, tracks your weak spots across conversations, and tells you when you are genuinely ready to sit the exam.

What the skill does

• Two-phase coaching. Phase 1 builds coverage across all five SY0-701 domains (General Concepts 12%, Threats/Vulns/Mitigations 22%, Security Architecture 18%, Security Operations 28%, Program Management 20%). Phase 2 is full-difficulty exam simulation with more PBQ-style and ordering items.
• 10-question sessions blending multiple choice, scenario PBQs, "FIRST step" questions, and ordering drills — the item types CompTIA actually tests.
• Spaced repetition. Every wrong answer gets re-asked in a disguised form in later sessions until you get it right twice in a row.
• A mnemonic for every mistake. Symmetric vs. asymmetric, IDS vs. IPS vs. WAF, SLE/ALE/ARO, NIST IR phases, MITRE ATT&CK tactics — wrong answers always come with a memory trick you can recall under exam pressure.
• Acronym drilling. The skill tracks which of the ~80 core SY0-701 acronyms you've seen and quizzes the ones you keep missing.
• HTML progress tracker. After every session the skill generates a standalone HTML file with a mastery gauge, per-domain progress bars, weak-topic chips, a session history strip, and an "EXAM READY" banner when thresholds are hit.
• Readiness signal. The skill declares you exam-ready when all domains reach 70% and you score 85%+ on 3 consecutive Phase 2 sessions — no guessing.

How it works

1. Intake — on first run the skill introduces itself, asks your level (beginner / intermediate / advanced), background (networking, helpdesk, none), known weak areas, and target exam date.
2. Per-session loop — one question at a time, A/B/C/D. Correct answers get brief reinforcement. Wrong answers get a full breakdown + mnemonic, and the topic goes into your weak-topics list.
3. End-of-session artifacts — a summary table, a running scores table, the HTML progress tracker, and a phase-transition check.
4. Phase 2 flip — when all domains are ≥ 70% and your 3-session average is ≥ 75%, Phase 2 starts automatically. Harder scenarios, more ordering questions, higher bar (85%+ × 3 in a row).
5. Continuity across sessions — the skill reads prior conversation state, so your weak spots, acronym gaps, and coaching persona carry forward without you having to restate them.

How to use it

1. Click ⬇ Download this Claude Skill above.
2. Import the .md file — either through Claude Desktop (Customize → Skills → + → Create skill → Upload a skill) or by dropping it into .claude/commands/ or ~/.claude/commands/ for Claude Code. Full walkthrough in the import tutorial.
3. Invoke the skill:

   /comptia-security-plus
   

   or pass your level up front:

   /comptia-security-plus intermediate, 2 years helpdesk
   

4. Run a session. Come back tomorrow, next week, or a month later — the coaching picks up where you left off.

---

Quick-start prompt (no download)

Prefer a one-shot study plan without installing anything? Paste this into Claude:

Act as a CompTIA-certified Security+ instructor. I have [X] weeks, [Y] hours per day, and my background is [networking / helpdesk / none]. Produce:

1. A weekly study plan with hours distributed proportional to the 5 SY0-701 domain weights, front-loading Security Operations and Threats/Vulnerabilities/Mitigations.
2. An acronym deck covering at minimum the CIA triad, AAA, RBAC, ABAC, MAC, DAC, Zero Trust, PKI, CA, CRL, OCSP, HSM, TPM, IDS/IPS, WAF, SIEM, SOAR, XDR, EDR, DLP, IoC, TTPs, APT, CVSS, CVE, MITRE ATT&CK, RTO, RPO — each as acronym — expansion — meaning — where it shows up on the exam.
3. 6 scenario-based (PBQ-style) questions per domain with 3+ sentences of enterprise context each; at least 2 ordering questions and 1 "FIRST step" question per domain; answer key with 2-sentence rationale per question.
4. Comparison tables: symmetric vs. asymmetric encryption; hashing vs. encryption vs. encoding vs. obfuscation; IDS vs. IPS vs. WAF; stateful vs. stateless firewalls; qualitative vs. quantitative risk (SLE/ALE/ARO); hot/warm/cold site recovery.
5. A threat-actor-to-attack-vector map and an incident-response playbook with a worked ransomware scenario and a worked credential-stuffing scenario across all NIST IR phases.

Every concept should include the attack, the defense, and the control family (technical / administrative / physical). Anchor frameworks to NIST CSF 2.0, NIST 800-53 Rev. 5, and MITRE ATT&CK.

Tips:

• The downloadable skill is the better path if you have more than one study session planned — it's the difference between a static plan and a coach that remembers you.
• PBQs are worth more points than multiple-choice — prioritize scenario drills over flashcards.
• Ask for "FIRST step" framings on every topic; CompTIA loves that qualifier.
• Re-read the acronym deck the morning of the exam; a third of the questions hinge on knowing what the acronym stands for.

⚠ This skill has been tested and optimized for Claude. Results may vary with other AI assistants.