Exam version change
CySA+ CS0-003 vs CS0-004
CS0-004 launched on June 23, 2026 and CS0-003 retires on December 22, 2026. Here’s what changes between the two versions, and which one to sit.
- CS0-004 launched
- June 23, 2026
- CS0-003 retires
- December 22, 2026
Last updated
Domain weights
What changed
Each domain’s share of the exam under CS0-003 and CS0-004, as CompTIA publishes them.
| Domain | CS0-003 | CS0-004 | Change |
|---|---|---|---|
| Security Operations | CS0-00333% | CS0-00434% | Change+1 point |
| Vulnerability Management | CS0-00330% | CS0-00426% | Change−4 points |
| Incident Response and ManagementWas: Incident Response Management | CS0-00320% | CS0-00424% | Change+4 points |
| Reporting and Communication | CS0-00317% | CS0-00416% | Change−1 point |
In short
- Incident Response and Management grows the most, from 20% to 24% of the exam.
- Vulnerability Management shrinks the most, from 30% to 26%.
- Incident Response Management is now called Incident Response and Management.
Weights come from CompTIA’s exam guides. How we check our facts
Your exam
Which version should you take?
You can sit CS0-003 until December 22, 2026. Take it if you’ve already studied for it and can book a date before then. If you’re starting now, study for CS0-004.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take CS0-003 or CS0-004?
You can sit CS0-003 until December 22, 2026. Take it if you’ve already studied for it and can book a date before then. If you’re starting now, study for CS0-004.
What changed between CS0-003 and CS0-004?
Incident Response and Management grows the most, from 20% to 24% of the exam. Vulnerability Management shrinks the most, from 30% to 26%. Incident Response Management is now called Incident Response and Management.
When does CS0-003 retire?
CS0-003 retires on December 22, 2026. That’s the last day you can take it.
Is my certification still valid if I passed CS0-003?
Yes. You earn the same CySA+ certification whichever version you pass, and it stays valid for its usual term.
Which version does the free CySA+ practice test follow?
CS0-004. Its 10 questions are spread across that version’s domains by their weights.
