CompTIA A+ → Network+ → Security+ → ITIL 4 Foundation: Complete IT Certification Roadmap
QUICK ANSWER For someone starting or developing a career in IT support, infrastructure, networking, cybersecurity, or IT service management, the following is...
QUICK ANSWER
For someone starting or developing a career in IT support, infrastructure, networking, cybersecurity, or IT service management, the following is a practical certification path:
CompTIA A+ → CompTIA Network+ → CompTIA Security+ → ITIL 4 Foundation
Each certification adds a different layer of knowledge:
| Certification | Primary Focus | What It Adds |
|---|---|---|
| CompTIA A+ | Hardware, operating systems and technical support | Core IT support skills |
| CompTIA Network+ | Networking and troubleshooting | Network infrastructure knowledge |
| CompTIA Security+ | Cybersecurity | Security fundamentals |
| ITIL 4 Foundation | IT service management | Processes, services and business-oriented IT management |
This sequence moves from support → networking → security → service management.
However, these certifications are not strict prerequisites for one another. An experienced professional can start at Network+, Security+, or ITIL depending on existing knowledge and career goals.
2026 Note: ITIL is undergoing a generational transition. ITIL 4 Foundation remains available, but PeopleCert has introduced the newer ITIL qualification scheme. PeopleCert currently plans to sunset ITIL 4 modules on 31 December 2027. Anyone planning an ITIL certification should therefore check the current PeopleCert certification options before purchasing training or an exam voucher.
COMPLETE ARTICLE
Why Follow an IT Certification Roadmap?
IT is a very broad profession.
An IT engineer may need to understand:
- computer hardware
- Windows and other operating systems
- software installation
- user troubleshooting
- TCP/IP networking
- switches and routers
- Wi-Fi
- DNS and DHCP
- firewalls
- cybersecurity
- identity and access management
- backup and recovery
- incident management
- service desk procedures
- IT service management
Trying to learn everything simultaneously can be confusing for someone entering the industry.
A structured certification path provides a logical progression.
A useful example is:
CompTIA A+
↓
CompTIA Network+
↓
CompTIA Security+
↓
ITIL 4 Foundation
The important point is that this is a recommended learning sequence, not a mandatory certification chain.
You do not have to pass A+ before Network+, nor Network+ before Security+.
Stage 1: CompTIA A+
What Is CompTIA A+?
CompTIA A+ is an entry-level professional IT certification designed around fundamental technical support and IT operational skills.
It is particularly useful for people entering roles involving computers, operating systems, end-user devices and technical troubleshooting.
Typical areas of study include:
- desktop computers
- laptops
- mobile devices
- processors
- memory
- storage
- peripherals
- printers
- Windows
- operating-system installation
- networking fundamentals
- security fundamentals
- virtualization
- cloud concepts
- troubleshooting
- operational procedures
A+ therefore provides a broad technical foundation before moving deeper into networking or cybersecurity.
Who Should Consider CompTIA A+?
A+ is particularly suitable for:
- IT beginners
- computer technicians
- desktop support engineers
- help desk technicians
- service desk engineers
- field support engineers
- technical support executives
- junior system administrators
- people moving from non-IT careers into IT
An experienced system or network administrator may not need to begin with A+.
What Practical Skills Should You Learn Alongside A+?
Certification study becomes much more valuable when combined with hands-on practice.
Build or use a test computer and practice tasks such as:
- installing Windows
- creating and managing user accounts
- installing device drivers
- partitioning disks
- formatting drives
- troubleshooting boot problems
- using Device Manager
- using Disk Management
- configuring printers
- configuring IP addresses
- connecting shared folders
- checking Windows services
- reading Event Viewer
- troubleshooting application problems
You should also become comfortable with common Windows commands.
For example:
ipconfig
ping
tracert
nslookup
hostname
whoami
systeminfo
tasklist
netstat
These commands help connect certification theory with everyday IT-support work.
Stage 2: CompTIA Network+
After developing basic hardware and operating-system knowledge, networking is a logical next step.
What Is CompTIA Network+?
CompTIA Network+ validates foundational knowledge required to understand, configure, maintain and troubleshoot networks.
Network knowledge is valuable even if you do not intend to become a dedicated network engineer.
Almost every modern IT system depends on networking.
Examples include:
- Internet access
- business applications
- cloud services
- file servers
- Active Directory
- remote desktops
- printers
- VoIP
- VPNs
- Wi-Fi
- cybersecurity systems
Important Network+ Topics
Network+ study typically includes concepts such as:
TCP/IP
You should understand how devices communicate using TCP/IP.
IPv4 and IPv6
Learn how IP addressing identifies systems on a network.
Subnetting
Understand networks, subnets, address ranges and network segmentation.
DNS
DNS converts names such as:
server01.company.local
into IP addresses.
DHCP
DHCP automatically supplies devices with network configuration such as:
- IP address
- subnet mask
- default gateway
- DNS servers
Switching
Understand how Ethernet switches connect devices within local networks.
Routing
Understand how routers move traffic between different networks.
VLANs
VLANs logically separate network devices even when they use common switching infrastructure.
Wireless Networking
Learn concepts involving:
- Wi-Fi standards
- frequency bands
- channels
- interference
- authentication
- wireless security
VPN
Virtual Private Networks can provide protected connectivity between remote users, offices and networks.
Network Troubleshooting
You should become comfortable troubleshooting problems such as:
- no Internet connection
- DNS failures
- duplicate IP addresses
- incorrect gateways
- DHCP failures
- slow connections
- packet loss
- Wi-Fi interference
- cable problems
- routing issues
Useful Network Troubleshooting Commands
Windows administrators should practice commands including:
ipconfig /all
ping
tracert
pathping
nslookup
arp -a
route print
netstat -ano
Some commands may require an elevated Command Prompt or PowerShell for particular administrative operations.
Do not simply memorize commands for an examination. Understand what information each command provides and how that information helps isolate a problem.
Stage 3: CompTIA Security+
Once networking fundamentals are understood, cybersecurity becomes considerably easier to learn.
What Is CompTIA Security+?
CompTIA Security+ is a widely recognized foundational cybersecurity certification.
It introduces security concepts that apply to:
- endpoints
- servers
- networks
- applications
- cloud environments
- identities
- organizational security
Security+ is not only useful for dedicated cybersecurity professionals.
System administrators, network engineers, cloud administrators and IT support engineers increasingly need cybersecurity knowledge as part of their normal responsibilities.
Major Security+ Knowledge Areas
Threats and Attacks
Understand common security threats such as:
- malware
- ransomware
- phishing
- social engineering
- credential attacks
- application attacks
- network attacks
Vulnerabilities
A vulnerability is a weakness that may potentially be exploited.
Examples can include:
- unpatched software
- insecure configurations
- weak passwords
- unnecessary services
- excessive privileges
- outdated operating systems
Identity and Access Management
Learn concepts including:
- authentication
- authorization
- least privilege
- role-based access
- multifactor authentication
- privileged accounts
Encryption
Understand the role of cryptography in protecting information.
Important concepts include:
- encryption
- hashing
- digital certificates
- public-key infrastructure
- symmetric encryption
- asymmetric encryption
Network Security
Networking knowledge becomes especially valuable here.
Security technologies can include:
- firewalls
- VPNs
- network segmentation
- IDS/IPS
- secure protocols
- access controls
Incident Response
Security professionals must know how organizations prepare for and respond to security incidents.
The objective is not merely to detect an attack but also to:
- contain it
- investigate it
- recover services
- preserve relevant evidence
- reduce the chance of recurrence
Why Network+ Before Security+ Makes Sense
It is possible to study Security+ without obtaining Network+ first.
However, networking knowledge makes many Security+ topics easier to understand.
For example, consider:
Firewall
VPN
TCP
UDP
DNS
DHCP
Ports
Protocols
VLAN
Routing
Network segmentation
IDS/IPS
Without basic networking knowledge, these may become terminology that a student simply memorizes.
With networking knowledge, the student understands how the technology actually works and therefore how it can be secured.
That is why this learning sequence is useful:
Network fundamentals → Network security
rather than trying to learn security concepts in isolation.
Stage 4: ITIL 4 Foundation
The first three certifications are largely technical.
ITIL introduces another important dimension:
How IT services should be managed and continually improved to deliver value to users and organizations.
What Is ITIL 4 Foundation?
ITIL 4 Foundation introduces the principles and terminology of IT service management.
Instead of concentrating on repairing one computer or configuring one network, ITIL encourages professionals to consider the complete service being provided.
For example:
A technician may think:
"The server is running."
IT service management asks broader questions:
"Is the business service available, reliable and delivering the expected value to its users?"
That difference becomes increasingly important as an IT professional progresses into senior support, administration, service management and leadership roles.
Important ITIL Concepts
ITIL 4 Foundation introduces concepts involving:
- service management
- value
- stakeholders
- service relationships
- guiding principles
- governance
- service value system
- service value chain
- continual improvement
- ITIL management practices
It helps technical professionals understand IT from both the technology and service perspectives.
ITIL 4 Foundation Exam Overview
PeopleCert currently describes the ITIL 4 Foundation examination as:
| Exam Property | ITIL 4 Foundation |
|---|---|
| Questions | 40 |
| Question type | Multiple choice |
| Duration | 60 minutes |
| Exam format | Closed book |
| Passing score | 65% |
Certification and exam policies can change, so candidates should verify the latest information with PeopleCert before purchasing an examination or training package.
Important 2026 Update: ITIL 4 and ITIL Version 5
Anyone following this certification roadmap should be aware of an important change.
PeopleCert has introduced a newer ITIL qualification scheme, commonly described as ITIL (Version 5).
PeopleCert states that existing ITIL 4 qualifications remain recognized as prerequisites for higher-level Version 5 certifications.
An ITIL Foundation Bridge (Version 5) is also available for eligible ITIL 4-certified professionals who want to update their Foundation-level knowledge.
According to PeopleCert's current transition information, ITIL 4 modules are planned to be sunset on:
31 December 2027
Therefore, someone beginning this roadmap in 2026 should check whether taking ITIL 4 Foundation or moving directly into the current newer ITIL Foundation pathway makes more sense at the time they are ready for the certification.
This is particularly important because certification schemes, examination availability and transition dates can change.
How These Four Certifications Work Together
The value of this roadmap becomes clearer when we examine what each stage contributes.
| Stage | Certification | Core Question |
|---|---|---|
| 1 | CompTIA A+ | How do computers and operating systems work and how do I support them? |
| 2 | CompTIA Network+ | How do computers and systems communicate? |
| 3 | CompTIA Security+ | How do I protect those systems, networks and information? |
| 4 | ITIL Foundation | How should IT services be organized, managed and improved? |
Together they provide a broad foundation covering:
Hardware + Operating Systems + Networking + Security + IT Service Management
Example Real-World Scenario
Consider an employee who reports:
"I cannot connect to the company application."
An engineer with only basic desktop knowledge might check the application and restart the computer.
Someone with broader training can approach the problem systematically.
A+ Knowledge
Check:
- Windows configuration
- application installation
- local services
- device problems
- operating-system errors
Network+ Knowledge
Check:
ipconfig /all
ping gateway
ping server
nslookup server-name
tracert server-address
Investigate:
- DHCP
- DNS
- routing
- VLAN
- Wi-Fi
- switch connectivity
Security+ Knowledge
Consider:
- firewall rules
- authentication
- account permissions
- VPN configuration
- endpoint security
- suspicious activity
- compromised credentials
ITIL Knowledge
Consider whether the problem represents:
- an incident affecting one user
- a wider service outage
- a recurring problem requiring root-cause analysis
- a change-related failure
- an issue affecting an agreed service level
This demonstrates why combining technical certifications with IT service-management knowledge can be valuable.
Recommended Hands-On Lab
Certifications should not replace practical experience.
A small home or office lab can greatly improve learning.
For example:
Internet
|
Router / Firewall
|
Switch
|
------------------------------
| | |
Windows PC Windows Server Linux VM
Using virtualization software, students can build much of this environment on one sufficiently powerful computer.
Practice:
- Windows installation
- Windows Server
- Active Directory
- DNS
- DHCP
- shared folders
- NTFS permissions
- user accounts
- Group Policy
- remote desktop
- firewall configuration
- network troubleshooting
- backups
- virtualization
The objective should be:
Learn → Configure → Break → Troubleshoot → Repair → Document
That process develops practical engineering ability much more effectively than memorizing examination questions alone.
Recommended Career Progression
Beginner
Start with:
CompTIA A+
Possible roles include:
- Help Desk Technician
- Desktop Support Technician
- IT Support Technician
- Field Support Engineer
Networking Foundation
Continue with:
CompTIA Network+
Possible roles can include:
- Network Support Technician
- IT Infrastructure Support
- NOC Technician
- Junior Network Administrator
- System Support Engineer
Job titles vary considerably between organizations, and certification alone does not guarantee qualification for a particular role.
Security Foundation
Continue with:
CompTIA Security+
This can support progression toward roles involving:
- cybersecurity support
- SOC operations
- security administration
- network security
- systems security
- infrastructure security
Again, practical experience and role-specific knowledge remain essential.
IT Service Management
Add:
ITIL Foundation
This becomes especially useful for people working in environments involving:
- service desks
- managed service providers
- enterprise IT departments
- IT operations
- incident management
- problem management
- change management
- service delivery
- IT management
Is This Certification Path Good for System Administrators?
Yes.
A system administrator needs knowledge across several areas:
Operating Systems
↓
Networking
↓
Security
↓
Service Management
Therefore:
A+ → Network+ → Security+ → ITIL Foundation
provides a broad foundation.
After this, administrators may specialize further in technologies such as:
- Windows Server
- Microsoft Azure
- Microsoft 365
- Linux
- AWS
- virtualization
- backup and disaster recovery
- cybersecurity
Is This Path Good for Network Engineers?
Yes, but someone specifically targeting networking may eventually need deeper vendor-specific networking knowledge.
A possible path could become:
A+ → Network+ → CCNA → Security+
with ITIL added for service-management knowledge.
Network+ provides broad vendor-neutral networking fundamentals, while a certification such as Cisco CCNA can take the learner deeper into network implementation and administration.
Is This Path Good for Cybersecurity?
Yes as a foundation.
A logical learning progression is:
A+ → Network+ → Security+
After Security+, the learner can specialize according to career goals in areas such as:
- SOC operations
- penetration testing
- cloud security
- identity security
- digital forensics
- incident response
- governance, risk and compliance
Security is a very broad profession, so there is no single certification path suitable for everyone.
Do You Need to Take Every Certification?
No.
This is one of the most important points about certification roadmaps.
A person with several years of desktop support experience may already understand most A+ concepts.
An experienced network administrator may decide to move directly to Security+.
A service desk manager may prioritize ITIL.
Therefore, select certifications based on:
- current experience
- existing knowledge
- job requirements
- employer requirements
- desired career path
- certification cost
- available study time
Do not collect certifications merely to increase the number of badges on your CV.
The objective should be to develop useful, demonstrable skills.
Certification vs Practical Experience
Certifications and experience should complement one another.
A certification demonstrates that you have studied and successfully demonstrated knowledge against a defined syllabus.
Practical experience demonstrates that you can apply knowledge to real systems and real problems.
A strong IT professional therefore develops:
Knowledge + Certification + Lab Practice + Real-World Experience + Documentation Skills
For example, knowing the definition of DNS is useful.
Being able to diagnose why a workstation resolves public websites but cannot resolve an internal application server is considerably more valuable in actual IT operations.
Suggested Study Strategy
A practical sequence is:
Step 1 — Learn the concepts
Study official certification objectives and reliable training material.
Step 2 — Build a lab
Use virtual machines or spare hardware.
Step 3 — Practice troubleshooting
Create intentional problems and diagnose them.
Examples:
- incorrect DNS server
- incorrect gateway
- disabled network adapter
- blocked firewall port
- expired user password
- stopped service
- incorrect permissions
Step 4 — Learn diagnostic commands
Understand the output rather than memorizing commands.
Step 5 — Practice documentation
Write short troubleshooting notes such as:
Problem:
User unable to access application server.
Cause:
Incorrect DNS configuration.
Resolution:
Correct DNS server configured on network adapter.
Verification:
Hostname resolved successfully and application connection restored.
Documentation is an important professional IT skill that certification candidates sometimes overlook.
Step 6 — Prepare for the examination
Use the current official exam objectives and legitimate practice examinations.
Avoid relying on unauthorized exam dumps. Memorizing leaked questions does not develop professional competence and may violate certification-provider policies.
Which Certification Should You Start With?
Use your current experience as the deciding factor.
| Current Knowledge | Suggested Starting Point |
|---|---|
| Completely new to IT | CompTIA A+ |
| Experienced desktop technician | Network+ may be appropriate |
| Strong networking knowledge | Security+ may be appropriate |
| Service desk/team leader | ITIL Foundation may be immediately useful |
| System administrator | Network+ or Security+, depending on existing knowledge |
| Network administrator | Security+ may be the logical next step |
| IT manager/service manager | ITIL may be particularly relevant |
There is no requirement that everyone follow exactly the same sequence.
Complete Certification Roadmap
For a beginner seeking a broad infrastructure and support foundation:
CompTIA A+
↓
Computer Hardware
Operating Systems
Troubleshooting
Technical Support
↓
CompTIA Network+
↓
TCP/IP
DNS
DHCP
Switching
Routing
Wi-Fi
Network Troubleshooting
↓
CompTIA Security+
↓
Cybersecurity
Threats
Identity
Access Control
Encryption
Network Security
Incident Response
↓
ITIL Foundation
↓
IT Service Management
Incident Management
Problem Management
Change Enablement
Service Delivery
Continual Improvement
From there, specialization can begin.
┌─ Networking / Cisco
│
├─ Windows / Microsoft
│
A+ → Network+ → ├─ Cloud / Azure / AWS
Security+ → ITIL → ├─ Cybersecurity
│
├─ Linux
│
└─ IT Service Management
FAQ
Is CompTIA A+ required before Network+?
No. CompTIA certifications do not have to be completed in this exact sequence. A+ is useful for beginners because it establishes broad IT fundamentals.
Should I take Network+ before Security+?
It is not mandatory, but it can be beneficial. Security concepts involving ports, protocols, firewalls, VPNs, segmentation and network attacks are easier to understand with solid networking fundamentals.
Is Security+ only for cybersecurity professionals?
No. Security knowledge is increasingly important for system administrators, network engineers, cloud administrators and IT support professionals as well.
Is ITIL a technical certification?
ITIL primarily focuses on IT and digital service management rather than hardware configuration or network engineering. It complements technical certifications by teaching how services are managed and improved.
Is ITIL 4 Foundation still available in 2026?
Yes, PeopleCert currently lists ITIL 4 Foundation. However, the certification scheme is transitioning to the newer ITIL generation, and PeopleCert currently plans to sunset ITIL 4 modules on 31 December 2027. Candidates should verify the current pathway before purchasing an exam.
Does ITIL 4 become useless after the new ITIL version?
No. PeopleCert states that ITIL 4 qualifications are recognized as prerequisites for higher-level certifications in the newer ITIL scheme. Transition options are also available.
Can I skip A+ if I already work in IT support?
Possibly. Experienced professionals should review the current exam objectives and decide whether A+ adds sufficient value before spending money on the examination.
Is Network+ enough to become a network engineer?
Network+ provides useful networking fundamentals, but professional network-engineering positions may require deeper knowledge, hands-on experience and possibly vendor-specific certifications such as Cisco CCNA.
Is Security+ enough to become a cybersecurity expert?
No. Security+ is a foundational cybersecurity certification. Advanced cybersecurity careers normally require practical experience and deeper specialization.
Do certifications guarantee a job?
No. Certifications can strengthen a CV and demonstrate structured knowledge, but employers may also evaluate education, practical skills, experience, communication ability and troubleshooting capability.
Should I build a home lab while studying?
Yes. Hands-on practice can significantly improve understanding of Windows, networking, security and troubleshooting concepts.
Which certification is best for an IT support engineer?
For someone new to professional IT support, CompTIA A+ is a logical starting point. Network+ can then broaden networking skills, followed by Security+ for security fundamentals.
FINAL RECOMMENDATION / CONCLUSION
CompTIA A+ → Network+ → Security+ → ITIL Foundation is a strong general-purpose certification roadmap for someone who wants broad knowledge across IT support, infrastructure, networking, cybersecurity and service management.
The progression is logical:
A+ teaches you the computer.
Network+ teaches you how computers communicate.
Security+ teaches you how to protect those systems and communications.
ITIL teaches you how those technologies should contribute to reliable, valuable IT services.
For a complete beginner, following the sequence from A+ onward makes sense.
For an experienced IT professional, however, there is no reason to repeat knowledge purely to follow the sequence. Review the current certification objectives and start at the level appropriate to your experience.
Most importantly, do not treat certification as a substitute for hands-on work.
The strongest approach is:
Certification + Practical Lab + Troubleshooting Experience + Real-World Implementation
That combination builds professional capability rather than examination knowledge alone.
Because ITIL is currently transitioning to a newer qualification scheme, candidates planning their ITIL examination in 2026 or later should verify the current PeopleCert pathway before purchasing training or an exam voucher.
#CompTIA #CompTIAAPlus #APlus #NetworkPlus #SecurityPlus #ITIL #ITIL4 #ITILFoundation #ITCertification #ITCertifications #CertificationRoadmap #ITCareer #ITCareerRoadmap #ITSupport #TechnicalSupport #HelpDesk #ServiceDesk #DesktopSupport #SystemAdministrator #NetworkAdministrator #NetworkEngineer #Cybersecurity #CyberSecurityCareer #Networking #NetworkSecurity #ITSecurity #InformationSecurity #ITSM #ITServiceManagement #WindowsSupport #WindowsServer #ActiveDirectory #TCPIP #DNS #DHCP #NetworkTroubleshooting #WindowsTroubleshooting #ITInfrastructure #InfrastructureEngineer #ITOperations #IncidentManagement #ProblemManagement #ChangeManagement #ServiceManagement #CompTIACertification #ITTraining #ITSkills #HomeLab #PeopleCert #ITProfessionals
Was this guide useful?
Your answer helps us keep BISONKB accurate and practical.