Skip to content
Servers & HostingAdvanced

CompTIA A+ → Network+ → Security+ → ITIL 4 Foundation: Complete IT Certification Roadmap

QUICK ANSWER For someone starting or developing a career in IT support, infrastructure, networking, cybersecurity, or IT service management, the following is...

BI
Bison Technical Team Enterprise IT specialists
Updated 05 Sep 2026 15 min read 2 total views

QUICK ANSWER

For someone starting or developing a career in IT support, infrastructure, networking, cybersecurity, or IT service management, the following is a practical certification path:

CompTIA A+ → CompTIA Network+ → CompTIA Security+ → ITIL 4 Foundation

Advertisement

Each certification adds a different layer of knowledge:

Certification Primary Focus What It Adds
CompTIA A+ Hardware, operating systems and technical support Core IT support skills
CompTIA Network+ Networking and troubleshooting Network infrastructure knowledge
CompTIA Security+ Cybersecurity Security fundamentals
ITIL 4 Foundation IT service management Processes, services and business-oriented IT management

This sequence moves from support → networking → security → service management.

However, these certifications are not strict prerequisites for one another. An experienced professional can start at Network+, Security+, or ITIL depending on existing knowledge and career goals.

2026 Note: ITIL is undergoing a generational transition. ITIL 4 Foundation remains available, but PeopleCert has introduced the newer ITIL qualification scheme. PeopleCert currently plans to sunset ITIL 4 modules on 31 December 2027. Anyone planning an ITIL certification should therefore check the current PeopleCert certification options before purchasing training or an exam voucher.


COMPLETE ARTICLE

Why Follow an IT Certification Roadmap?

IT is a very broad profession.

An IT engineer may need to understand:

  • computer hardware
  • Windows and other operating systems
  • software installation
  • user troubleshooting
  • TCP/IP networking
  • switches and routers
  • Wi-Fi
  • DNS and DHCP
  • firewalls
  • cybersecurity
  • identity and access management
  • backup and recovery
  • incident management
  • service desk procedures
  • IT service management

Trying to learn everything simultaneously can be confusing for someone entering the industry.

A structured certification path provides a logical progression.

A useful example is:

CompTIA A+

CompTIA Network+

CompTIA Security+

ITIL 4 Foundation

The important point is that this is a recommended learning sequence, not a mandatory certification chain.

You do not have to pass A+ before Network+, nor Network+ before Security+.


Stage 1: CompTIA A+

What Is CompTIA A+?

CompTIA A+ is an entry-level professional IT certification designed around fundamental technical support and IT operational skills.

It is particularly useful for people entering roles involving computers, operating systems, end-user devices and technical troubleshooting.

Typical areas of study include:

  • desktop computers
  • laptops
  • mobile devices
  • processors
  • memory
  • storage
  • peripherals
  • printers
  • Windows
  • operating-system installation
  • networking fundamentals
  • security fundamentals
  • virtualization
  • cloud concepts
  • troubleshooting
  • operational procedures

A+ therefore provides a broad technical foundation before moving deeper into networking or cybersecurity.


Who Should Consider CompTIA A+?

A+ is particularly suitable for:

  • IT beginners
  • computer technicians
  • desktop support engineers
  • help desk technicians
  • service desk engineers
  • field support engineers
  • technical support executives
  • junior system administrators
  • people moving from non-IT careers into IT

An experienced system or network administrator may not need to begin with A+.


What Practical Skills Should You Learn Alongside A+?

Certification study becomes much more valuable when combined with hands-on practice.

Build or use a test computer and practice tasks such as:

  • installing Windows
  • creating and managing user accounts
  • installing device drivers
  • partitioning disks
  • formatting drives
  • troubleshooting boot problems
  • using Device Manager
  • using Disk Management
  • configuring printers
  • configuring IP addresses
  • connecting shared folders
  • checking Windows services
  • reading Event Viewer
  • troubleshooting application problems

You should also become comfortable with common Windows commands.

For example:

ipconfig
ping
tracert
nslookup
hostname
whoami
systeminfo
tasklist
netstat

These commands help connect certification theory with everyday IT-support work.


Stage 2: CompTIA Network+

After developing basic hardware and operating-system knowledge, networking is a logical next step.

What Is CompTIA Network+?

CompTIA Network+ validates foundational knowledge required to understand, configure, maintain and troubleshoot networks.

Network knowledge is valuable even if you do not intend to become a dedicated network engineer.

Almost every modern IT system depends on networking.

Examples include:

  • Internet access
  • business applications
  • cloud services
  • email
  • file servers
  • Active Directory
  • remote desktops
  • printers
  • VoIP
  • VPNs
  • Wi-Fi
  • cybersecurity systems

Important Network+ Topics

Network+ study typically includes concepts such as:

TCP/IP

You should understand how devices communicate using TCP/IP.

IPv4 and IPv6

Learn how IP addressing identifies systems on a network.

Subnetting

Understand networks, subnets, address ranges and network segmentation.

DNS

DNS converts names such as:

server01.company.local

into IP addresses.

DHCP

DHCP automatically supplies devices with network configuration such as:

  • IP address
  • subnet mask
  • default gateway
  • DNS servers

Switching

Understand how Ethernet switches connect devices within local networks.

Routing

Understand how routers move traffic between different networks.

VLANs

VLANs logically separate network devices even when they use common switching infrastructure.

Wireless Networking

Learn concepts involving:

  • Wi-Fi standards
  • frequency bands
  • channels
  • interference
  • authentication
  • wireless security

VPN

Virtual Private Networks can provide protected connectivity between remote users, offices and networks.

Network Troubleshooting

You should become comfortable troubleshooting problems such as:

  • no Internet connection
  • DNS failures
  • duplicate IP addresses
  • incorrect gateways
  • DHCP failures
  • slow connections
  • packet loss
  • Wi-Fi interference
  • cable problems
  • routing issues

Useful Network Troubleshooting Commands

Windows administrators should practice commands including:

ipconfig /all
ping
tracert
pathping
nslookup
arp -a
route print
netstat -ano

Some commands may require an elevated Command Prompt or PowerShell for particular administrative operations.

Do not simply memorize commands for an examination. Understand what information each command provides and how that information helps isolate a problem.


Stage 3: CompTIA Security+

Once networking fundamentals are understood, cybersecurity becomes considerably easier to learn.

What Is CompTIA Security+?

CompTIA Security+ is a widely recognized foundational cybersecurity certification.

It introduces security concepts that apply to:

  • endpoints
  • servers
  • networks
  • applications
  • cloud environments
  • identities
  • organizational security

Security+ is not only useful for dedicated cybersecurity professionals.

System administrators, network engineers, cloud administrators and IT support engineers increasingly need cybersecurity knowledge as part of their normal responsibilities.


Major Security+ Knowledge Areas

Threats and Attacks

Understand common security threats such as:

  • malware
  • ransomware
  • phishing
  • social engineering
  • credential attacks
  • application attacks
  • network attacks

Vulnerabilities

A vulnerability is a weakness that may potentially be exploited.

Examples can include:

  • unpatched software
  • insecure configurations
  • weak passwords
  • unnecessary services
  • excessive privileges
  • outdated operating systems

Identity and Access Management

Learn concepts including:

  • authentication
  • authorization
  • least privilege
  • role-based access
  • multifactor authentication
  • privileged accounts

Encryption

Understand the role of cryptography in protecting information.

Important concepts include:

  • encryption
  • hashing
  • digital certificates
  • public-key infrastructure
  • symmetric encryption
  • asymmetric encryption

Network Security

Networking knowledge becomes especially valuable here.

Security technologies can include:

  • firewalls
  • VPNs
  • network segmentation
  • IDS/IPS
  • secure protocols
  • access controls

Incident Response

Security professionals must know how organizations prepare for and respond to security incidents.

The objective is not merely to detect an attack but also to:

  • contain it
  • investigate it
  • recover services
  • preserve relevant evidence
  • reduce the chance of recurrence

Why Network+ Before Security+ Makes Sense

It is possible to study Security+ without obtaining Network+ first.

However, networking knowledge makes many Security+ topics easier to understand.

For example, consider:

Firewall
VPN
TCP
UDP
DNS
DHCP
Ports
Protocols
VLAN
Routing
Network segmentation
IDS/IPS

Without basic networking knowledge, these may become terminology that a student simply memorizes.

With networking knowledge, the student understands how the technology actually works and therefore how it can be secured.

That is why this learning sequence is useful:

Network fundamentals → Network security

rather than trying to learn security concepts in isolation.


Stage 4: ITIL 4 Foundation

The first three certifications are largely technical.

ITIL introduces another important dimension:

How IT services should be managed and continually improved to deliver value to users and organizations.

What Is ITIL 4 Foundation?

ITIL 4 Foundation introduces the principles and terminology of IT service management.

Instead of concentrating on repairing one computer or configuring one network, ITIL encourages professionals to consider the complete service being provided.

For example:

A technician may think:

"The server is running."

IT service management asks broader questions:

"Is the business service available, reliable and delivering the expected value to its users?"

That difference becomes increasingly important as an IT professional progresses into senior support, administration, service management and leadership roles.


Important ITIL Concepts

ITIL 4 Foundation introduces concepts involving:

  • service management
  • value
  • stakeholders
  • service relationships
  • guiding principles
  • governance
  • service value system
  • service value chain
  • continual improvement
  • ITIL management practices

It helps technical professionals understand IT from both the technology and service perspectives.


ITIL 4 Foundation Exam Overview

PeopleCert currently describes the ITIL 4 Foundation examination as:

Exam Property ITIL 4 Foundation
Questions 40
Question type Multiple choice
Duration 60 minutes
Exam format Closed book
Passing score 65%

Certification and exam policies can change, so candidates should verify the latest information with PeopleCert before purchasing an examination or training package.


Important 2026 Update: ITIL 4 and ITIL Version 5

Anyone following this certification roadmap should be aware of an important change.

PeopleCert has introduced a newer ITIL qualification scheme, commonly described as ITIL (Version 5).

PeopleCert states that existing ITIL 4 qualifications remain recognized as prerequisites for higher-level Version 5 certifications.

An ITIL Foundation Bridge (Version 5) is also available for eligible ITIL 4-certified professionals who want to update their Foundation-level knowledge.

According to PeopleCert's current transition information, ITIL 4 modules are planned to be sunset on:

31 December 2027

Therefore, someone beginning this roadmap in 2026 should check whether taking ITIL 4 Foundation or moving directly into the current newer ITIL Foundation pathway makes more sense at the time they are ready for the certification.

This is particularly important because certification schemes, examination availability and transition dates can change.


How These Four Certifications Work Together

The value of this roadmap becomes clearer when we examine what each stage contributes.

Stage Certification Core Question
1 CompTIA A+ How do computers and operating systems work and how do I support them?
2 CompTIA Network+ How do computers and systems communicate?
3 CompTIA Security+ How do I protect those systems, networks and information?
4 ITIL Foundation How should IT services be organized, managed and improved?

Together they provide a broad foundation covering:

Hardware + Operating Systems + Networking + Security + IT Service Management


Example Real-World Scenario

Consider an employee who reports:

"I cannot connect to the company application."

An engineer with only basic desktop knowledge might check the application and restart the computer.

Someone with broader training can approach the problem systematically.

A+ Knowledge

Check:

  • Windows configuration
  • application installation
  • local services
  • device problems
  • operating-system errors

Network+ Knowledge

Check:

ipconfig /all
ping gateway
ping server
nslookup server-name
tracert server-address

Investigate:

  • DHCP
  • DNS
  • routing
  • VLAN
  • Wi-Fi
  • switch connectivity

Security+ Knowledge

Consider:

  • firewall rules
  • authentication
  • account permissions
  • VPN configuration
  • endpoint security
  • suspicious activity
  • compromised credentials

ITIL Knowledge

Consider whether the problem represents:

  • an incident affecting one user
  • a wider service outage
  • a recurring problem requiring root-cause analysis
  • a change-related failure
  • an issue affecting an agreed service level

This demonstrates why combining technical certifications with IT service-management knowledge can be valuable.


Recommended Hands-On Lab

Certifications should not replace practical experience.

A small home or office lab can greatly improve learning.

For example:

Internet
   |
Router / Firewall
   |
Switch
   |
------------------------------
|             |              |
Windows PC   Windows Server   Linux VM

Using virtualization software, students can build much of this environment on one sufficiently powerful computer.

Practice:

  • Windows installation
  • Windows Server
  • Active Directory
  • DNS
  • DHCP
  • shared folders
  • NTFS permissions
  • user accounts
  • Group Policy
  • remote desktop
  • firewall configuration
  • network troubleshooting
  • backups
  • virtualization

The objective should be:

Learn → Configure → Break → Troubleshoot → Repair → Document

That process develops practical engineering ability much more effectively than memorizing examination questions alone.


Recommended Career Progression

Beginner

Start with:

CompTIA A+

Possible roles include:

  • Help Desk Technician
  • Desktop Support Technician
  • IT Support Technician
  • Field Support Engineer

Networking Foundation

Continue with:

CompTIA Network+

Possible roles can include:

  • Network Support Technician
  • IT Infrastructure Support
  • NOC Technician
  • Junior Network Administrator
  • System Support Engineer

Job titles vary considerably between organizations, and certification alone does not guarantee qualification for a particular role.


Security Foundation

Continue with:

CompTIA Security+

This can support progression toward roles involving:

  • cybersecurity support
  • SOC operations
  • security administration
  • network security
  • systems security
  • infrastructure security

Again, practical experience and role-specific knowledge remain essential.


IT Service Management

Add:

ITIL Foundation

This becomes especially useful for people working in environments involving:

  • service desks
  • managed service providers
  • enterprise IT departments
  • IT operations
  • incident management
  • problem management
  • change management
  • service delivery
  • IT management

Is This Certification Path Good for System Administrators?

Yes.

A system administrator needs knowledge across several areas:

Operating Systems
        ↓
Networking
        ↓
Security
        ↓
Service Management

Therefore:

A+ → Network+ → Security+ → ITIL Foundation

provides a broad foundation.

After this, administrators may specialize further in technologies such as:

  • Windows Server
  • Microsoft Azure
  • Microsoft 365
  • Linux
  • AWS
  • virtualization
  • backup and disaster recovery
  • cybersecurity

Is This Path Good for Network Engineers?

Yes, but someone specifically targeting networking may eventually need deeper vendor-specific networking knowledge.

A possible path could become:

A+ → Network+ → CCNA → Security+

with ITIL added for service-management knowledge.

Network+ provides broad vendor-neutral networking fundamentals, while a certification such as Cisco CCNA can take the learner deeper into network implementation and administration.


Is This Path Good for Cybersecurity?

Yes as a foundation.

A logical learning progression is:

A+ → Network+ → Security+

After Security+, the learner can specialize according to career goals in areas such as:

  • SOC operations
  • penetration testing
  • cloud security
  • identity security
  • digital forensics
  • incident response
  • governance, risk and compliance

Security is a very broad profession, so there is no single certification path suitable for everyone.


Do You Need to Take Every Certification?

No.

This is one of the most important points about certification roadmaps.

A person with several years of desktop support experience may already understand most A+ concepts.

An experienced network administrator may decide to move directly to Security+.

A service desk manager may prioritize ITIL.

Therefore, select certifications based on:

  • current experience
  • existing knowledge
  • job requirements
  • employer requirements
  • desired career path
  • certification cost
  • available study time

Do not collect certifications merely to increase the number of badges on your CV.

The objective should be to develop useful, demonstrable skills.


Certification vs Practical Experience

Certifications and experience should complement one another.

A certification demonstrates that you have studied and successfully demonstrated knowledge against a defined syllabus.

Practical experience demonstrates that you can apply knowledge to real systems and real problems.

A strong IT professional therefore develops:

Knowledge + Certification + Lab Practice + Real-World Experience + Documentation Skills

For example, knowing the definition of DNS is useful.

Being able to diagnose why a workstation resolves public websites but cannot resolve an internal application server is considerably more valuable in actual IT operations.


Suggested Study Strategy

A practical sequence is:

Step 1 — Learn the concepts

Study official certification objectives and reliable training material.

Step 2 — Build a lab

Use virtual machines or spare hardware.

Step 3 — Practice troubleshooting

Create intentional problems and diagnose them.

Examples:

  • incorrect DNS server
  • incorrect gateway
  • disabled network adapter
  • blocked firewall port
  • expired user password
  • stopped service
  • incorrect permissions

Step 4 — Learn diagnostic commands

Understand the output rather than memorizing commands.

Step 5 — Practice documentation

Write short troubleshooting notes such as:

Problem:
User unable to access application server.

Cause:
Incorrect DNS configuration.

Resolution:
Correct DNS server configured on network adapter.

Verification:
Hostname resolved successfully and application connection restored.

Documentation is an important professional IT skill that certification candidates sometimes overlook.

Step 6 — Prepare for the examination

Use the current official exam objectives and legitimate practice examinations.

Avoid relying on unauthorized exam dumps. Memorizing leaked questions does not develop professional competence and may violate certification-provider policies.


Which Certification Should You Start With?

Use your current experience as the deciding factor.

Current Knowledge Suggested Starting Point
Completely new to IT CompTIA A+
Experienced desktop technician Network+ may be appropriate
Strong networking knowledge Security+ may be appropriate
Service desk/team leader ITIL Foundation may be immediately useful
System administrator Network+ or Security+, depending on existing knowledge
Network administrator Security+ may be the logical next step
IT manager/service manager ITIL may be particularly relevant

There is no requirement that everyone follow exactly the same sequence.


Complete Certification Roadmap

For a beginner seeking a broad infrastructure and support foundation:

CompTIA A+
     ↓
Computer Hardware
Operating Systems
Troubleshooting
Technical Support
     ↓
CompTIA Network+
     ↓
TCP/IP
DNS
DHCP
Switching
Routing
Wi-Fi
Network Troubleshooting
     ↓
CompTIA Security+
     ↓
Cybersecurity
Threats
Identity
Access Control
Encryption
Network Security
Incident Response
     ↓
ITIL Foundation
     ↓
IT Service Management
Incident Management
Problem Management
Change Enablement
Service Delivery
Continual Improvement

From there, specialization can begin.

                    ┌─ Networking / Cisco
                    │
                    ├─ Windows / Microsoft
                    │
A+ → Network+ →     ├─ Cloud / Azure / AWS
Security+ → ITIL →  ├─ Cybersecurity
                    │
                    ├─ Linux
                    │
                    └─ IT Service Management

FAQ

Is CompTIA A+ required before Network+?

No. CompTIA certifications do not have to be completed in this exact sequence. A+ is useful for beginners because it establishes broad IT fundamentals.

Should I take Network+ before Security+?

It is not mandatory, but it can be beneficial. Security concepts involving ports, protocols, firewalls, VPNs, segmentation and network attacks are easier to understand with solid networking fundamentals.

Is Security+ only for cybersecurity professionals?

No. Security knowledge is increasingly important for system administrators, network engineers, cloud administrators and IT support professionals as well.

Is ITIL a technical certification?

ITIL primarily focuses on IT and digital service management rather than hardware configuration or network engineering. It complements technical certifications by teaching how services are managed and improved.

Is ITIL 4 Foundation still available in 2026?

Yes, PeopleCert currently lists ITIL 4 Foundation. However, the certification scheme is transitioning to the newer ITIL generation, and PeopleCert currently plans to sunset ITIL 4 modules on 31 December 2027. Candidates should verify the current pathway before purchasing an exam.

Does ITIL 4 become useless after the new ITIL version?

No. PeopleCert states that ITIL 4 qualifications are recognized as prerequisites for higher-level certifications in the newer ITIL scheme. Transition options are also available.

Can I skip A+ if I already work in IT support?

Possibly. Experienced professionals should review the current exam objectives and decide whether A+ adds sufficient value before spending money on the examination.

Is Network+ enough to become a network engineer?

Network+ provides useful networking fundamentals, but professional network-engineering positions may require deeper knowledge, hands-on experience and possibly vendor-specific certifications such as Cisco CCNA.

Is Security+ enough to become a cybersecurity expert?

No. Security+ is a foundational cybersecurity certification. Advanced cybersecurity careers normally require practical experience and deeper specialization.

Do certifications guarantee a job?

No. Certifications can strengthen a CV and demonstrate structured knowledge, but employers may also evaluate education, practical skills, experience, communication ability and troubleshooting capability.

Should I build a home lab while studying?

Yes. Hands-on practice can significantly improve understanding of Windows, networking, security and troubleshooting concepts.

Which certification is best for an IT support engineer?

For someone new to professional IT support, CompTIA A+ is a logical starting point. Network+ can then broaden networking skills, followed by Security+ for security fundamentals.


FINAL RECOMMENDATION / CONCLUSION

CompTIA A+ → Network+ → Security+ → ITIL Foundation is a strong general-purpose certification roadmap for someone who wants broad knowledge across IT support, infrastructure, networking, cybersecurity and service management.

The progression is logical:

A+ teaches you the computer.

Network+ teaches you how computers communicate.

Security+ teaches you how to protect those systems and communications.

ITIL teaches you how those technologies should contribute to reliable, valuable IT services.

For a complete beginner, following the sequence from A+ onward makes sense.

For an experienced IT professional, however, there is no reason to repeat knowledge purely to follow the sequence. Review the current certification objectives and start at the level appropriate to your experience.

Most importantly, do not treat certification as a substitute for hands-on work.

The strongest approach is:

Certification + Practical Lab + Troubleshooting Experience + Real-World Implementation

That combination builds professional capability rather than examination knowledge alone.

Because ITIL is currently transitioning to a newer qualification scheme, candidates planning their ITIL examination in 2026 or later should verify the current PeopleCert pathway before purchasing training or an exam voucher.

 

#CompTIA #CompTIAAPlus #APlus #NetworkPlus #SecurityPlus #ITIL #ITIL4 #ITILFoundation #ITCertification #ITCertifications #CertificationRoadmap #ITCareer #ITCareerRoadmap #ITSupport #TechnicalSupport #HelpDesk #ServiceDesk #DesktopSupport #SystemAdministrator #NetworkAdministrator #NetworkEngineer #Cybersecurity #CyberSecurityCareer #Networking #NetworkSecurity #ITSecurity #InformationSecurity #ITSM #ITServiceManagement #WindowsSupport #WindowsServer #ActiveDirectory #TCPIP #DNS #DHCP #NetworkTroubleshooting #WindowsTroubleshooting #ITInfrastructure #InfrastructureEngineer #ITOperations #IncidentManagement #ProblemManagement #ChangeManagement #ServiceManagement #CompTIACertification #ITTraining #ITSkills #HomeLab #PeopleCert #ITProfessionals

YOUR FEEDBACK

Was this guide useful?

Your answer helps us keep BISONKB accurate and practical.

THE BISON BRIEF

Practical IT knowledge, once a week.

New troubleshooting guides, scripts and infrastructure notes. No noise.

By subscribing, you agree to our privacy policy.