CompTIA SecurityX CAS-005 CertMaster Perform V5 – Full Course Outline & Contents

CompTIA SecurityX CAS-005 CertMaster Perform V5: Full Course Outline & Contents

Stop studying about security architecture. Start doing it.

SecurityX is where cybersecurity stops being about knowing the answer and starts being about making the call: which control, which trade-off, which risk to accept. CompTIA SecurityX CertMaster Perform V5 is built for exactly that level. It prepares you for the CAS-005 exam and for the enterprise security decisions that follow it.

This is not a textbook with a quiz bolted on. It is an interactive training environment that combines in-depth written content, expert-led instructional videos, interactive activities and hands-on Live Labs, so you walk into the exam ready and walk into your next role ready to lead.

Start your SecurityX training now →

Who Is This For?

• Security professionals moving from practitioner to architect or engineer roles.
• Analysts, penetration testers and security engineers who want to prove advanced, enterprise-level expertise.
• Anyone preparing for CompTIA SecurityX (CAS-005) who wants to practice, not just read.

Why CertMaster Perform V5 Is Different

Passive video courses teach you to recognize concepts. CertMaster Perform teaches you to apply them.

• Written lessons plus expert-led videos: Theory explained clearly, then reinforced visually.
• Hands-on Live Labs: Run Dynamic Application Security Testing, implement Azure MFA, conduct malware analysis and more.
• Interactive activities: Practice scenario-style tasks such as creating a DLP policy or implementing the right PKI solution.
• A safe, simulated VM environment: Configure firewalls, implement Zero Trust models and hunt for threats without risking production systems.
• Built-in assessment: A preassessment at the start, a quiz after every lesson and module, and full practice exams at the end.

How to Read the Course Outline

• [LAB] — Live Lab in a simulated VM environment.
• [PBQ] — Interactive, performance-based activity.
• [VIDEO] — Video lesson.
• [QUIZ] — Assessment, including preassessment, lesson review, module quiz or practice exam.
• No tag — Reading lesson.

Complete Course Outline: All Modules, Lessons, Labs and Practice Exams

Getting Started

Know where you stand before you begin. The preassessment pinpoints your strengths and exposes the gaps, so you spend your study time where it matters most.

Course Introduction

1.0 Preassessment

• Module 1.0 Introduction
• 1.1 Preassessment [QUIZ]

2.0 Summarizing Governance, Risk, and Compliance

Learn the frameworks and regulations that shape enterprise security strategy, and keep your organization compliant and risk-aware.

Module 2.0 Introduction

2.1 Implement Appropriate Governance Components

Build the governance foundation: security program documentation and management, governance frameworks, change and configuration management, GRC tools, data governance and the legal and privacy implications of AI use. You also take your first steps inside the VM lab environment.

• 2.1.1 Security Program Documentation
• 2.1.2 Security Program Management
• 2.1.3 Governance Frameworks
• 2.1.4 Change / Configuration Management
• 2.1.5 Governance Risk and Compliance (GRC) Tools
• 2.1.6 Data Governance in Staging Environments
• 2.1.7 Legal and Privacy Implications of AI Use
• 2.1.8 Live Lab: Explore the VM Lab Environment [LAB]
• 2.1.9 Lesson Review [QUIZ]

2.2 Explain Legal Compliance

Understand industry-specific compliance, standards, security and reporting frameworks, the difference between audits, assessments and certifications, privacy regulations and cross-jurisdictional requirements, then apply them in an activity.

• 2.2.1 Awareness of Industry-Specific Compliance
• 2.2.2 Industry Standards
• 2.2.3 Security and Reporting Frameworks
• 2.2.4 Audits vs. Assessments vs. Certifications
• 2.2.5 Privacy Regulations
• 2.2.6 Awareness of Cross-Jurisdictional Compliance Requirements
• 2.2.7 Activity: Laws and Regulations [PBQ]
• 2.2.8 Lesson Review [QUIZ]

2.3 Apply Risk Management Strategies

Move from identifying risk to managing it: impact analysis, risk assessment, risk strategies, third-party risk, availability, confidentiality, integrity and privacy risk, the specific risks of AI usage, crisis management and breach response. Includes a disaster recovery testing activity.

• 2.3.1 Impact Analysis
• 2.3.2 Risk Assessment and Management
• 2.3.3 Applying the Appropriate Risk Strategies [VIDEO]
• 2.3.4 Third-Party Risk Management
• 2.3.5 Availability Risk Considerations
• 2.3.6 Activity: DR Testing Concepts [PBQ]
• 2.3.7 Confidentiality Risk Considerations
• 2.3.8 Integrity Risk Considerations
• 2.3.9 Privacy Risk Considerations
• 2.3.10 Risks of AI Usage
• 2.3.11 Crisis Management
• 2.3.12 Breach Response
• 2.3.13 Lesson Review [QUIZ]

2.4 Module Quiz

[QUIZ]

3.0 Implementing Architecture and Design

Learn how to build secure, resilient architectures from the ground up, across on-premises, hybrid and cloud environments.

Module 3.0 Introduction

3.1 Apply Software Development

Build security into software from the first requirement: assurance, secure integration, CI/CD, supply chain risk, hardware assurance and end-of-life considerations. Two applied labs let you test an application with DAST and design a CI/CD pipeline.

• 3.1.1 Security Requirements Definition
• 3.1.2 Software Assurance
• 3.1.3 Securely Integrating Software Applications [VIDEO]
• 3.1.4 Continuous Integration/Continuous Deployment (CI/CD)
• 3.1.5 Activity: Software Security Testing [PBQ]
• 3.1.6 Supply Chain Risk Management
• 3.1.7 Hardware Assurance
• 3.1.8 End-of-Life (EOL) Considerations
• 3.1.9 Applied Live Lab: Dynamic Application Security Testing (DAST) [LAB]
• 3.1.10 Applied Live Lab: Designing a CICD Pipeline [LAB]
• 3.1.11 Lesson Review [QUIZ]

3.2 Integrate Software Architecture

Shrink the attack surface and design for detection: attack surface management, threat-hunting enablers, information and data security design, Data Loss Prevention (DLP), hybrid infrastructures, third-party integrations and control effectiveness.

• 3.2.1 Attack Surface Management and Reduction
• 3.2.2 Detection and Threat-Hunting Enablers
• 3.2.3 Detection and Threat-Hunting Enablers Part 1 [VIDEO]
• 3.2.4 Detection and Threat-Hunting Enablers Part 2 [VIDEO]
• 3.2.5 Information and Data Security Design
• 3.2.6 Information and Data Security Design [VIDEO]
• 3.2.7 Data Loss Prevention (DLP)
• 3.2.8 Implementing Data Security Techniques [VIDEO]
• 3.2.9 Activity: Create a DLP Policy [PBQ]
• 3.2.10 Hybrid Infrastructures
• 3.2.11 Third-Party Integrations
• 3.2.12 Control Effectiveness
• 3.2.13 Applied Live Lab: Evaluating Attack Surface Management and Reduction [LAB]
• 3.2.14 Applied Live Lab: Evaluating Information and Data Security Design [LAB]
• 3.2.15 Lesson Review [QUIZ]

3.3 Support Operational Resilience

Design for availability and integrity, inspect network traffic, and control access with network access control, proxies and VPNs. Labs cover testing a Web Application Firewall and investigating and remediating vulnerabilities.

• 3.3.1 Availability and Integrity Design Considerations
• 3.3.2 Network Traffic Inspection
• 3.3.3 Network Access Control & VPN
• 3.3.7 Applied Live Lab: Testing a Web Application Firewall (WAF) [LAB]
• 3.3.8 Applied Live Lab: Investigating and Remediating Vulnerabilities [LAB]
• 3.3.9 Lesson Review [QUIZ]

3.4 Implement Cloud Infrastructure

The largest lesson in the domain. Secure the cloud with CASB, the shared responsibility model, Terraform and Ansible, container security and orchestration, serverless and API security, and detect Shadow IT. Three applied labs put it into practice.

• 3.4.1 Cloud Access Security Broker (CASB)
• 3.4.2 Shadow IT Detection
• 3.4.3 Shared Responsibility Model
• 3.4.4 CI/CD Pipeline
• 3.4.5 Continuous Integration/Continuous Deployment [VIDEO]
• 3.4.6 Terraform
• 3.4.7 Ansible
• 3.4.8 Package Monitoring
• 3.4.9 Container Security
• 3.4.10 Container Orchestration
• 3.4.11 Serverless
• 3.4.12 API Security
• 3.4.13 Cloud vs. Customer-Managed
• 3.4.14 Cloud Data Security Considerations
• 3.4.15 Cloud Data Security Considerations [VIDEO]
• 3.4.16 Cloud Control Strategies
• 3.4.17 Cloud Control Strategies [VIDEO]
• 3.4.18 Customer-to-Cloud Connectivity
• 3.4.19 Cloud Service Integration
• 3.4.20 Cloud Service Adoption
• 3.4.21 Applied Live Lab: Detecting Shadow IT [LAB]
• 3.4.22 Applied Live Lab: Implementing API Security [LAB]
• 3.4.23 Applied Live Lab: Implementing Container Security [LAB]
• 3.4.24 Lesson Review [QUIZ]

3.5 Integrate Zero Trust Concepts

Put Zero Trust into practice: continuous authorization, context-based reauthentication, network architecture, API validation, asset attestation, security boundaries and deperimeterization. Ends with a Challenge Live Lab where you evaluate findings from an assessment.

• 3.5.1 Continuous Authorization
• 3.5.2 Context-Based Reauthentication
• 3.5.3 Network Architecture
• 3.5.4 Analyzing Security Requirements to Ensure Secure Network Architecture [VIDEO]
• 3.5.5 Activity: Traditional Security Architecture [PBQ]
• 3.5.6 API Integration and Validation
• 3.5.7 Asset Identification, Management, and Attestation
• 3.5.8 Security Boundaries
• 3.5.9 Deperimeterization
• 3.5.10 Defining Subject-Object Relationships
• 3.5.11 Applied Live Lab: Implementing Continuous Authentication [LAB]
• 3.5.12 Challenge Live Lab: Evaluate Findings from Assessment [LAB]
• 3.5.13 Lesson Review [QUIZ]

3.6 Troubleshoot Using AAA and IAM

Manage identity end to end: provisioning, federation and conditional access, policy decision and enforcement points, access control models, PKI architecture, biometrics, secrets management, cloud IAM and privileged identity management. Two Azure labs give you real configuration practice.

• 3.6.1 Provisioning/Deprovisioning
• 3.6.2 Activity: Identify Virtualization Technologies [PBQ]
• 3.6.4 Conditional Access
• 3.6.5 Identity and Service Providers
• 3.6.6 Policy Decision and Enforcement Points
• 3.6.7 Access Control Models
• 3.6.8 Logging and Auditing
• 3.6.9 Public Key Infrastructure (PKI) Architecture
• 3.6.10 Activity: Implement Appropriate PKI Solutions [PBQ]
• 3.6.11 Access Control Systems
• 3.6.12 Subject Access Control
• 3.6.13 Activity: Analyze Access Control Models and Best Practices [PBQ]
• 3.6.14 Biometrics
• 3.6.15 Secrets Management
• 3.6.16 Secrets Management [VIDEO]
• 3.6.17 Cloud IAM Access and Trust Policies
• 3.6.18 Logging and Monitoring
• 3.6.19 Privilege Identity Management
• 3.6.20 Authentication and Authorization
• 3.6.21 Live Lab: Implementing an Azure Conditional Access Control Policy [LAB]
• 3.6.22 Live Lab: Implementing Azure MFA [LAB]
• 3.6.23 Lesson Review [QUIZ]

3.7 Module Quiz

[QUIZ]

Ready to practice, not just read? Get CertMaster Perform V5 →

4.0 Understanding Security Engineering

Deploy and configure the technical controls that defend advanced enterprise networks against sophisticated threats.

Module 4.0 Introduction

4.1 Enhance Endpoint Security

Harden the endpoint: EDR, privilege management, attack surface monitoring, endpoint protection tools, MDM technologies and secure configurations for enterprise mobility, plus the special challenges of embedded and legacy systems. Labs cover HIPS/HIDS and host-based firewalls.

• 4.1.1 Endpoint Detection Response (EDR)
• 4.1.2 Configure and Implement Endpoint Security Controls [VIDEO]
• 4.1.3 Endpoint Privilege Management
• 4.1.4 Attack Surface Monitoring and Reduction
• 4.1.5 Endpoint Protection Tools
• 4.1.6 Activity: Identify Web Application Vulnerabilities [PBQ]
• 4.1.7 Mobile Device Management (MDM) Technologies
• 4.1.8 Applying Secure Configurations to Enterprise Mobility [VIDEO]
• 4.1.9 Activity: Mobile Device Management [PBQ]
• 4.1.10 Threat-actor Tactics, Techniques, and Procedures (TTPs)
• 4.1.11 Activity: Threat Intelligence [PBQ]
• 4.1.12 Specialized and Embedded Systems
• 4.1.13 Security and Privacy Considerations
• 4.1.14 Industry-Specific Challenges
• 4.1.15 Characteristics of Specialized/Legacy Systems
• 4.1.16 Applied Live Lab: Host-based Intrusion Detection and Prevention Systems (HIPS/HIDS) [LAB]
• 4.1.17 Applied Live Lab: Implementing Host-Based Firewalls [LAB]
• 4.1.18 Lesson Review [QUIZ]

4.2 Configure Network Infrastructure

Find and fix what breaks networks: misconfigurations, IPS/IDS issues, observability, DNS and email security, and resource exhaustion. The lab has you troubleshoot network misconfigurations hands-on.

• 4.2.1 Network Misconfigurations
• 4.2.2 IPS/IDS Issues
• 4.2.3 Observability
• 4.2.4 Domain Name System (DNS) Security
• 4.2.5 Email Security
• 4.2.8 Resource Exhaustion
• 4.2.9 Applied Live Lab: Troubleshooting Network Misconfigurations [LAB]
• 4.2.10 Lesson Review [QUIZ]

4.3 Initiate Security Automation

Automate defense: hardware security technologies and Secure Boot, host-based encryption, scripting, scheduling and event triggers, Generative AI, SOAR and workflow automation. Two labs cover event-based triggers and SOAR investigation.

• 4.3.1 Hardware Security Technologies
• 4.3.2 Secure Boot [VIDEO]
• 4.3.3 Hardware Security Features
• 4.3.4 Host-Based Encryption [VIDEO]
• 4.3.5 Threat-Actor TTPs
• 4.3.6 Scripting, Scheduling and Event Triggers
• 4.3.7 Generative AI
• 4.3.8 Security Orchestration, Automation, and Response (SOAR)
• 4.3.9 Workflow Automation
• 4.3.10 Applied Live Lab: Implementing Event-Based Triggers [LAB]
• 4.3.11 Applied Live Lab: Investigating Security Orchestration Automate and Response (SOAR) [LAB]
• 4.3.12 Lesson Review [QUIZ]

4.4 Apply Cryptography Concepts

Stay ahead of the curve: Post-Quantum Cryptography (PQC), key stretching, key splitting and envelope encryption, homomorphic encryption, secure multiparty computation, forward secrecy, AEAD, data security states, blockchain and software integrity.

• 4.4.1 Post-Quantum Cryptography (PQC)
• 4.4.2 Key Stretching, Key Splitting, and Envelope Encryption
• 4.4.3 Homomorphic Encryption and Secure Multiparty Computation
• 4.4.4 Forward Secrecy, Mutual Authentication, and AEAD
• 4.4.5 Mutual Authentication [VIDEO]
• 4.4.6 Cryptographic Performance vs. Security
• 4.4.7 Data Security States
• 4.4.8 Implementing the Appropriate Cryptographic Protocols and Algorithms [VIDEO]
• 4.4.9 Encryption and Authentication Mechanisms
• 4.4.10 Data Protection Techniques
• 4.4.11 Activity: Implementing the Appropriate Cryptographic Protocols and Algorithms [PBQ]
• 4.4.12 Blockchain and Immutable Records
• 4.4.13 Legal and Resource Considerations
• 4.4.14 Software Integrity and Provenance
• 4.4.15 Data Protection and Privacy
• 4.4.16 Data Integrity and Authenticity
• 4.4.17 Encryption Techniques
• 4.4.18 Lesson Review [QUIZ]

4.5 Module 04 Quiz

[QUIZ]

5.0 Applying Security Operations and Incident Response

Become a proactive defender: hunt threats, analyze malware and lead incident response.

Module 5.0 Introduction

5.1 Perform Threat Modeling

Profile threats, run structured threat assessments, determine attack surfaces and evaluate AI-enabled attacks and AI assistants. The lab applies the MITRE ATT&CK framework.

• 5.1.1 Understanding and Profiling Threats
• 5.1.2 Structured Threat Assessment
• 5.1.3 Threat Modeling Methods [VIDEO]
• 5.1.4 Attack Surface Determination
• 5.1.5 Modeling Applicability of Threats to the Organization/Environment
• 5.1.6 Threats to the Model
• 5.1.7 AI-Enabled Attacks
• 5.1.8 AI-Enabled Assistants/Digital Workers
• 5.1.9 Applied Live Lab: Implementing MITRE ATT&CK Framework [LAB]
• 5.1.10 Lesson Review [QUIZ]

5.2 Examine Security Monitoring

Turn data into detection: data collection and integration, behavioral benchmarking, diverse data sources, alerting practices and reporting metrics. Two labs cover behavior baselines and analytics, and logging, auditing and alerting.

• 5.2.1 Data Collection and Integration
• 5.2.2 Data Processing and Behavioral Benchmarking
• 5.2.3 Incorporating Diverse Data Sources [VIDEO]
• 5.2.4 Alerting Concepts and Practices
• 5.2.5 Reporting and Metrics
• 5.2.6 Applied Live Lab: Establishing Behavior Baselines and Analytics [LAB]
• 5.2.7 Applied Live Lab: Logging Auditing and Alerting [LAB]
• 5.2.8 Lesson Review [QUIZ]

5.3 Analyze Known Attack Methods and Associated Mitigations

Learn the vulnerabilities and the fixes side by side: input and output manipulation, memory and execution flaws, cryptographic issues, system configuration, supply chain and external dependencies, and the mitigations including secure coding practices.

• 5.3.1 Vulnerabilities: Input and Output Manipulation
• 5.3.2 Activity: Vulnerability Assessment Tools [PBQ]
• 5.3.3 Vulnerabilities: Memory and Execution Vulnerabilities
• 5.3.4 Vulnerabilities: Cryptographic Issues
• 5.3.5 Vulnerabilities: System Configuration and Management
• 5.3.6 Vulnerabilities: Supply Chain and External Dependencies
• 5.3.7 Analyzing Vulnerabilities and Recommending Risk Mitigations [VIDEO]
• 5.3.8 Mitigations: Input and Output Security
• 5.3.9 Mitigations: Secure Coding Practices
• 5.3.10 Mitigations: System Maintenance and Management
• 5.3.11 Mitigations: Data Security and Management
• 5.3.12 Lesson Review [QUIZ]

5.4 Apply Threat Hunting Tools and Technologies

Hunt with intelligence: internal and external sources, counterintelligence and operational security, Threat Intelligence Platforms (TIPs), Indicator of Compromise (IoC) sharing and rule-based languages. Three labs cover external intelligence, IoCs and Indicators of Attack.

• 5.4.1 Internal Intelligence Sources
• 5.4.2 External Intelligence Sources
• 5.4.3 Counterintelligence and Operational Security
• 5.4.4 Threat Intelligence Platforms (TIPs)
• 5.4.5 Indicator of Compromise (IoC) Sharing
• 5.4.6 Analyzing Indicators of Compromise [VIDEO]
• 5.4.7 Rule-Based Languages
• 5.4.8 Applied Live Lab: Investigating External Intelligence Sources [LAB]
• 5.4.9 Applied Live Lab: Investigating Indicators of Compromise (IoC) [LAB]
• 5.4.10 Applied Live Lab: Auditing Indicators of Attack [LAB]
• 5.4.11 Lesson Review [QUIZ]

5.5 Evaluate Incident Analysis and Response

Lead the response: malware analysis, forensic analysis, detection and initial analysis, metadata analysis, continuous improvement, and preparedness and prevention. Three labs, including a Challenge Live Lab, have you conduct malware analysis and extract and analyze metadata.

• 5.5.1 Malware Analysis
• 5.5.2 Malware Analysis [VIDEO]
• 5.5.3 Forensic Analysis
• 5.5.4 Detection and Initial Analysis
• 5.5.5 Metadata Analysis [VIDEO]
• 5.5.6 Continuous Improvement
• 5.5.7 Preparedness and Prevention
• 5.5.8 Applied Live Lab: Conducting Malware Analysis [LAB]
• 5.5.9 Applied Live Lab: Extracting and Analyzing Metadata [LAB]
• 5.5.10 Challenge Live Lab: Enhancing Cybersecurity through Practical Analysis [LAB]
• 5.5.11 Lesson Review [QUIZ]

5.6 Module Quiz

[QUIZ]

A.0 SecurityX CAS-005 Practice Exams

Finish with exam strategy and full practice exams, so exam day feels familiar.

Module A.0 Introduction

A.1 Prepare for CompTIA SecurityX Certification

Exam details, testing strategies and pro tips: why take a certification exam, what to expect from the SecurityX (CAS-005) exam, how to take it and how to approach it on the day.

• A.1.1 Why Should I Take a Certification Exam?
• A.1.2 Exam Details for SecurityX (CAS-005)
• A.1.3 How to Take the Certification Exam
• A.1.4 Tips for Taking the Exam

A.2 SecurityX CAS-005 Practice Exams

Test your readiness with targeted practice exams for all four domains, finishing with a full 90-minute SecurityX CAS-005 exam practice simulation.

• A.2.1 Exam Practice 1: Governance, Risk, and Compliance [QUIZ]
• A.2.2 Exam Practice 2: Security Architecture [QUIZ]
• A.2.3 Exam Practice 3: Security Engineering [QUIZ]
• A.2.4 Exam Practice 4: Security Operations [QUIZ]
• A.2.5 SecurityX CAS-005 Exam Practice [QUIZ]

Ready to Take the Final Step?

SecurityX is the credential that says you do not just defend systems, you design the strategy behind them. With written lessons, videos, interactive activities, Live Labs and full-length practice exams in one platform, you have everything you need to prepare with confidence.

Get CompTIA SecurityX CertMaster Perform V5 today →