Which IT certification should you take first?

There is no single right first certification, but there is a right first certification for a given track. None of these exams has an enforced prerequisite, so the order below is about what makes the next exam easier, not about what you are allowed to sit.

IT support and security: CompTIA

  1. A+ (220-1201 and 220-1202) — two exams, both required. The usual entry point for help desk and desktop support, and the one most often named in job postings for a first IT role.
  2. Network+ (N10-009) — the vocabulary every later exam assumes: addressing, routing, ports, and topologies. Skip it only if you already work with networks daily.
  3. Security+ (SY0-701) — the baseline security certification, and the one that satisfies the US DoD 8140 baseline for many roles. It leans hard on networking, which is why it sits after Network+.

Networking: Cisco

CCNA (200-301) is a single exam with no prerequisite, and it goes deeper than Network+ on routing, switching, and IOS configuration. Network+ first is a gentler ramp and is vendor-neutral; going straight to CCNA is normal if networking is the actual goal. Expect hands-on simulations: the exam runs 120 minutes and the configuration items are a large part of it.

Cloud: AWS and Microsoft

Both vendors put a cheap, non-expiring fundamentals exam in front of their role-based ones, and both are worth it if the vocabulary is new to you.

A shortcut that actually works

Sit a timed practice exam cold before you buy anything. It costs nothing here, it is scored on the real scale, and it answers the question far better than any recommendation can: if you are already near the cut line, start higher up the ladder.

Common questions

Do I need A+ before Network+ or Security+?

No. CompTIA recommends that order but enforces no prerequisites, so you can sit any of them in any order. If you already work in IT, starting at Network+ or Security+ is common and completely allowed.

Is A+ worth it if I already work in IT?

If you are already doing the job, A+ mostly certifies what you can already do. It still helps for HR filters and government contracting roles, but Network+ or Security+ usually moves the needle more for someone already employed in IT.

Should I do a cloud fundamentals exam before an associate one?

It is the cheapest way to find out whether the vocabulary is there. Cloud Practitioner and AZ-900 are inexpensive, do not expire, and cover the terminology the associate exams assume. If you already administer that cloud daily, going straight to the associate exam is reasonable.

Does Security+ expire?

CompTIA certifications are valid for three years and renew through continuing education or a higher certification. Microsoft fundamentals certifications such as AZ-900 and SC-900 do not expire; role-based ones such as AZ-104 renew annually through a free online assessment.

More free practice tests

Back to all cert900 exams