TL;DR
Ninety questions in 90 minutes means one minute per question on average, with the performance section opening the exam. Give sims a capped first pass (about four minutes each, flag and move on past that), bank the multiple-choice middle at under a minute each, and spend the final stretch only on flagged items. Never leave a blank: wrong answers cost nothing, empty ones guarantee nothing.
By SecLern Editorial. Published 2026-10-18. Timing facts (90 questions maximum, 90 minutes, performance items first) reflect the published Security+ format; confirm the current tutorial on exam day, since vendors adjust interfaces. Budgets below are our tested method, not CompTIA instructions.
The arithmetic of 90 in 90
One minute per question is the headline, but no one spends it evenly. A fair split from our own timed mocks: up to 25 minutes for the opening sim section on first pass, about 45 minutes for the multiple-choice middle, and 20 minutes banked for flagged returns and review. That adds to 90 with no slack, which is the point: the budget forces flag discipline early so the clock funds the second pass. If your sim count differs from our practice shape, scale proportionally (fewer sims means a shorter first pass, never a longer one). The readiness rule from readiness explained applies here: only full timed sittings teach pacing, because untimed accuracy hides the transfer gap between knowing and knowing fast. Run at least two full simulations under this exact budget before booking.
First pass: sims with a hard cap
Open the sim section and confirm the controls in the tutorial: how to flag, how to navigate back, how the item submits. Then work each sim once with a four-minute cap. Progressing steadily means submit and advance; stuck means flag, move on, and trust the banked review time. Four minutes is enough for a firewall table or a log set when the method is rehearsed (firewall walkthrough, log walkthrough), and rehearsal is what the cap assumes. Do not burn eight minutes perfecting one sim while three multiple-choice questions each worth the same go unread; the exam weights items, not your pride in any single one. If a sim's interface confuses you, flag it instantly: confusion burns time at triple rate, and a fresh look after forty multiple-choice questions often dissolves it. First pass goal is simple: every sim touched, hard ones flagged, clock at or under 25 minutes.
The multiple-choice middle: speed with guardrails
With sims behind you, the middle is a rhythm game. Read the last line of each stem first so you know what is asked, eliminate the two options that violate procedure or scope, then choose between the survivors. Cap standard items at ninety seconds: past that, the question is either a trap for overthinkers or a gap in your knowledge, and neither resolves with more staring. Flag and move. Definition checks should fall in under thirty seconds; scenario stems with exhibits may take two minutes, borrowed from the definition surplus. Keep an eye on the clock at thirds: roughly 30 questions per 30 minutes keeps you honest without obsessive checking. Mark confidence honestly as you go if the interface or your scratch sheet supports it; the flagged list plus your own trap list (the three mistakes you personally repeat) becomes the second-pass agenda. Our weak-spot training method is built on exactly this honest-marking habit.
Second pass: flagged items only, then review
Spend banked time in strict order. First, flagged sims with fresh eyes and the remaining cap halved: two to three minutes each, because a second long stare rarely beats the first. Apply the verification passes from the walkthroughs (packet walk for firewalls, timeline recheck for logs) rather than re-thinking from scratch. Second, flagged multiple-choice: change answers only on new evidence (a misread stem, a spotted secure-variant cue), since changed answers without reason skew wrong. Third, unflagged review only if time remains: re-read stems you rushed, verify no item is blank, and confirm every sim shows submitted. Never leave early with meaningful time left; reviewing flagged items with twenty minutes beats leaving with twenty minutes. And never leave a blank anywhere: with no penalty for wrong answers, a guess is strictly better than nothing.
Rehearsal plan: two sims that teach the clock
First rehearsal, one week out: a full 90-question sitting under the exact budget with a clock visible, logging where each five-minute block went. Most candidates discover one slow domain (often logs or architecture scenarios) eating double its share; that domain becomes the week's patch list, not the whole syllabus. Second rehearsal, three days out: another full sitting testing whether the patch held, with flag discipline as the graded skill (count your flags; fewer than five usually means stubbornness, more than fifteen means method gaps). Between sittings, drill only misses plus timed ten-question bursts at exam pace. The evening before, stop: review your one-page trap list, confirm IDs and travel per the exam-day checklist, and sleep. Pacing is a trained reflex by then or not at all. One more edge case: the sim you cannot operate. Rarely, a sim interface genuinely confuses a prepared candidate through an unfamiliar control or a lagging handle. Spend at most ninety seconds testing the controls; if it still resists, answer whatever is answerable, flag it, and move on without emotional residue. A zero on one sim inside an otherwise clean run still passes, while a fifteen-minute interface battle sinks the whole section. Mention it to the proctor afterward if it looked like a defect rather than a skill gap. The exam measures security judgment, not widget fluency, and your time budget should reflect that priority every single sitting. Walk out with a submitted form and no blanks, whatever else the morning held.
The last ten minutes: endgame protocol
When the clock shows ten minutes, stop solving and run this order. One, confirm every item has an answer: page through the review screen and fill any blank with your best elimination guess, since blanks never score. Two, confirm every sim shows submitted rather than merely visited; an answered sim that never submitted is the most expensive interface error on the form. Three, revisit flagged sims once with the verification passes, capped at ninety seconds each, and change only what the check disproves. Four, revisit flagged multiple-choice with the new-evidence rule from the FAQ below. Five, with under three minutes left, stop changing anything and re-read the five questions you flagged first; early flags carry the most information because they marked genuine confusion rather than fatigue. If time expires mid-protocol, steps one and two already protected the bulk of the points. Practice this exact sequence in both rehearsal sittings so the real thing runs on rails. Ending calm with a submitted form beats ending clever with an open one.
Sources
- CompTIA Security+ V7 page (90 questions maximum, 90 minutes, format)
- SecLern timed-simulation data, verified in-app 2026-10-18 (25/45/20 budget split from our own mocks)
Read next
Learn the sim methods in PBQ firewall rules and PBQ log triage, the booking rule in readiness explained, and the full 48-hour routine in the exam-day checklist. Timed reps live under study.