Description
Format: self-paced video
CompTIA SecurityX (formerly CASP+) is CompTIA’s expert-level security certification for senior security architects and engineers. This course prepares you for the current exam: CAS-005.
The CAS-005 exam has up to 90 questions and lasts 165 minutes. It covers:
- Governance, risk, and compliance (20%)
- Security architecture (27%)
- Security engineering (31%)
- Security operations (22%)
Prerequisites
There is no required prerequisite. CompTIA recommends: Minimum of 10 years of general hands-on IT experience, including 5 years of hands-on security, with Network+, Security+, CySA+, Cloud+, and PenTest+ or equivalent knowledge.
Curriculum (CAS-005)
1. Governance, risk, and compliance (20%)
- Security program documents, frameworks and GRC tools
- Risk assessment, third-party risk and threat modeling (ATT&CK, STRIDE)
- Compliance standards such as PCI DSS and ISO 27000
2. Security architecture (27%)
- Cloud security: CASB, shared responsibility and container security
- Network architecture, segmentation and SASE/SD-WAN
- Zero trust design and secure boundaries
3. Security engineering (31%)
- Security automation with scripting, IaC, SOAR and AI
- Vulnerability management and SCAP
- Advanced cryptography such as post-quantum and homomorphic encryption
4. Security operations (22%)
- SIEM monitoring and behavior baselines
- Threat hunting with internal and external intelligence
- Incident response, malware analysis and reverse engineering
