SecurityX is where cybersecurity stops being about knowing the answer and starts being about making the call: which control, which trade-off, which risk to accept. CompTIA SecurityX CertMaster Perform V5 is built for exactly that level. It prepares you for the CAS-005 exam and for the enterprise security decisions that follow it.
This is not a textbook with a quiz bolted on. It is an interactive training environment that combines in-depth written content, expert-led instructional videos, interactive activities and hands-on Live Labs, so you walk into the exam ready and walk into your next role ready to lead.
👉 Start your SecurityX training now
Who Is This For?
- Security professionals moving from practitioner to architect or engineer roles
- Analysts, pen testers and security engineers who want to prove advanced, enterprise-level expertise
- Anyone preparing for CompTIA SecurityX (CAS-005) who wants to practice, not just read
Why CertMaster Perform V5 Is Different
Passive video courses teach you to recognize concepts. CertMaster Perform teaches you to apply them.
- 🎬 Written lessons plus expert-led videos: theory explained clearly, then reinforced visually.
- 🖱️ Hands-on Live Labs: run Dynamic Application Security Testing, implement Azure MFA, conduct malware analysis and more.
- 🧩 Interactive activities: practice scenario-style tasks such as creating a DLP policy or implementing the right PKI solution.
- 🛡️ A safe, simulated VM environment: configure firewalls, implement Zero Trust models and hunt for threats with no risk to production systems.
- 📝 Built-in assessment: a preassessment at the start, a quiz after every lesson and module, and full practice exams at the end.
Which CertMaster Option Fits Your Budget?
If budget isn't the main concern, CertMaster Perform for SecurityX (V5, CAS-005, the exam many people still call CASP+) is the best study material I know of. It is the complete package: lessons and videos to learn from, review questions after each section, then PBQs and hands-on labs so you actually practice what you read. There are games and flashcards in there too, though to be honest I barely touched those.
I studied from this exact material, along with some practice test questions. I didn't use braindump sites. Their fees seemed unreasonably high to me, and I would rather spend my time really learning the material.
If your budget is tighter, you can still prepare well. Start with the CertMaster Study book for the theory, add CertMaster Labs for the hands-on practice, and skip CertMaster Practice, since its price is on the high side. Instead, pair them with the exam-prep materials and mock exams from CertInstructor, which cost less.
Complete Course Outline: All Modules, Lessons, Labs and Practice Exams
How to read the outline:
- 📄 Reading lesson
- 🎬 Video lesson
- 🧩 Interactive activity (performance-based, scenario-style)
- 🖱️ Live Lab (hands-on, in a simulated VM environment)
- 📝 Assessment (preassessment, lesson review, module quiz or practice exam)
Getting Started
Know where you stand before you begin. The preassessment pinpoints your strengths and exposes the gaps, so you spend your study time where it matters most.
- 📄 Course Introduction
1.0 Preassessment
- 📄 Module 1.0 Introduction
- 📝 1.1 Preassessment
2.0 Summarizing Governance, Risk, and Compliance
Learn the frameworks and regulations that shape enterprise security strategy, and keep your organization compliant and risk-aware.
- 📄 Module 2.0 Introduction
2.1 Implement Appropriate Governance Components
Build the governance foundation: security program documentation and management, governance frameworks, change and configuration management, GRC tools, data governance and the legal and privacy implications of AI use. You also take your first steps inside the VM lab environment.
- 📄 2.1.1 Security Program Documentation
- 📄 2.1.2 Security Program Management
- 📄 2.1.3 Governance Frameworks
- 📄 2.1.4 Change / Configuration Management
- 📄 2.1.5 Governance Risk and Compliance (GRC) Tools
- 📄 2.1.6 Data Governance in Staging Environments
- 📄 2.1.7 Legal and Privacy Implications of AI Use
What the use of AI means for privacy and the law, and what governance needs to cover when an organization adopts it. - 🖱️ 2.1.8 Live Lab: Explore the VM Lab Environment
Get comfortable with the hands-on VM lab environment you will use throughout the course before the technical labs begin. - 📝 2.1.9 Lesson Review
2.2 Explain Legal Compliance
Understand industry-specific compliance, standards, security and reporting frameworks, the difference between audits, assessments and certifications, privacy regulations and cross-jurisdictional requirements, then apply them in an activity.
- 📄 2.2.1 Awareness of Industry-Specific Compliance
- 📄 2.2.2 Industry Standards
- 📄 2.2.3 Security and Reporting Frameworks
- 📄 2.2.4 Audits vs. Assessments vs. Certifications
- 📄 2.2.5 Privacy Regulations
- 📄 2.2.6 Awareness of Cross-Jurisdictional Compliance Requirements
- 🧩 2.2.7 Activity: Laws and Regulations
Match laws and regulations to the situations they apply to. - 📝 2.2.8 Lesson Review
2.3 Apply Risk Management Strategies
Move from identifying risk to managing it: impact analysis, risk assessment, risk strategies, third-party risk, availability, confidentiality, integrity and privacy risk, the specific risks of AI usage, crisis management and breach response. Includes a disaster recovery testing activity.
- 📄 2.3.1 Impact Analysis
- 📄 2.3.2 Risk Assessment and Management
- 🎬 2.3.3 Applying the Appropriate Risk Strategies
Video lesson on applying the appropriate risk strategies to a situation. - 📄 2.3.4 Third-Party Risk Management
- 📄 2.3.5 Availability Risk Considerations
- 🧩 2.3.6 Activity: DR Testing Concepts
Work through disaster recovery testing concepts and choose the right test for a scenario. - 📄 2.3.7 Confidentiality Risk Considerations
- 📄 2.3.8 Integrity Risk Considerations
- 📄 2.3.9 Privacy Risk Considerations
- 📄 2.3.10 Risks of AI Usage
The risks that come with using AI in an organization, and how to account for them in risk management. - 📄 2.3.11 Crisis Management
How an organization keeps operating and communicating through a major incident: roles, escalation and decision-making beyond the technical response. - 📄 2.3.12 Breach Response
How to respond when a breach happens: containing it, notifying the right parties and learning from it. - 📝 2.3.13 Lesson Review
- 📝 2.4 Module Quiz
3.0 Implementing Architecture and Design
Learn how to build secure, resilient architectures from the ground up, across on-premises, hybrid and cloud environments.
- 📄 Module 3.0 Introduction
3.1 Apply Software Development
Build security into software from the first requirement: assurance, secure integration, CI/CD, supply chain risk, hardware assurance and end-of-life considerations. Two applied labs let you test an application with DAST and design a CI/CD pipeline.
- 📄 3.1.1 Security Requirements Definition
- 📄 3.1.2 Software Assurance
- 🎬 3.1.3 Securely Integrating Software Applications
Video lesson on securely integrating software applications. - 📄 3.1.4 Continuous Integration/Continuous Deployment (CI/CD)
- 🧩 3.1.5 Activity: Software Security Testing
Practice choosing and applying the right software security testing approach. - 📄 3.1.6 Supply Chain Risk Management
- 📄 3.1.7 Hardware Assurance
- 📄 3.1.8 End-of-Life (EOL) Considerations
- 🖱️ 3.1.9 Applied Live Lab: Dynamic Application Security Testing (DAST)
Practice dynamic application security testing (DAST) against a running application to uncover vulnerabilities that only show up at runtime. - 🖱️ 3.1.10 Applied Live Lab: Designing a CICD Pipeline
Design a CI/CD pipeline with security built into the build and deployment stages. - 📝 3.1.11 Lesson Review
3.2 Integrate Software Architecture
Shrink the attack surface and design for detection: attack surface management, threat-hunting enablers, information and data security design, Data Loss Prevention (DLP), hybrid infrastructures, third-party integrations and control effectiveness.
- 📄 3.2.1 Attack Surface Management and Reduction
- 📄 3.2.2 Detection and Threat-Hunting Enablers
- 🎬 3.2.3 Detection and Threat-Hunting Enablers Part 1
Video lesson, part 1, on detection and threat-hunting enablers. - 🎬 3.2.4 Detection and Threat-Hunting Enablers Part 2
Video lesson, part 2, on detection and threat-hunting enablers. - 📄 3.2.5 Information and Data Security Design
- 🎬 3.2.6 Information and Data Security Design
Video lesson reinforcing information and data security design. - 📄 3.2.7 Data Loss Prevention (DLP)
How DLP tools and policies detect and stop sensitive data from leaving the organization. - 🎬 3.2.8 Implementing Data Security Techniques
Video lesson on implementing data security techniques. - 🧩 3.2.9 Activity: Create a DLP Policy
Build a Data Loss Prevention policy that matches what an organization needs to protect. - 📄 3.2.10 Hybrid Infrastructures
- 📄 3.2.11 Third-Party Integrations
- 📄 3.2.12 Control Effectiveness
- 🖱️ 3.2.13 Applied Live Lab: Evaluating Attack Surface Management and Reduction
Evaluate how well an environment's attack surface is managed and reduced, and spot where exposure remains. - 🖱️ 3.2.14 Applied Live Lab: Evaluating Information and Data Security Design
Evaluate an information and data security design and judge whether it protects data as intended. - 📝 3.2.15 Lesson Review
3.3 Support Operational Resilience
Design for availability and integrity, inspect network traffic, and control access with network access control, proxies and VPNs. Labs cover testing a Web Application Firewall and investigating and remediating vulnerabilities.
- 📄 3.3.1 Availability and Integrity Design Considerations
- 📄 3.3.2 Network Traffic Inspection
- 📄 3.3.3 Network Access Control & VPN
- 🖱️ 3.3.7 Applied Live Lab: Testing a Web Application Firewall (WAF)
Test a Web Application Firewall (WAF) and see how it handles malicious web traffic. - 🖱️ 3.3.8 Applied Live Lab: Investigating and Remediating Vulnerabilities
Investigate vulnerabilities in a simulated environment and practice remediating them. - 📝 3.3.9 Lesson Review
3.4 Implement Cloud Infrastructure
The largest lesson in the domain. Secure the cloud with CASB, the shared responsibility model, Terraform and Ansible, container security and orchestration, serverless and API security, and detect Shadow IT. Three applied labs put it into practice.
- 📄 3.4.1 Cloud Access Security Broker (CASB)
How a CASB gives visibility and control over cloud app usage and enforces security policy between users and cloud services. - 📄 3.4.2 Shadow IT Detection
How to find cloud apps and services in use without IT approval, and why they matter. - 📄 3.4.3 Shared Responsibility Model
Who secures what in the cloud: how responsibility is split between provider and customer. - 📄 3.4.4 CI/CD Pipeline
- 🎬 3.4.5 Continuous Integration/Continuous Deployment
Video lesson on continuous integration and continuous deployment in the cloud. - 📄 3.4.6 Terraform
Infrastructure as code with Terraform, and how it helps build cloud environments consistently and securely. - 📄 3.4.7 Ansible
Configuration automation with Ansible, and what it means for consistent, secure systems. - 📄 3.4.8 Package Monitoring
- 📄 3.4.9 Container Security
Security risks and controls for containers. - 📄 3.4.10 Container Orchestration
How container orchestration works and what it means for securing containerized workloads at scale. - 📄 3.4.11 Serverless
Security considerations for serverless architectures. - 📄 3.4.12 API Security
Common API risks and the controls that protect them. - 📄 3.4.13 Cloud vs. Customer-Managed
- 📄 3.4.14 Cloud Data Security Considerations
- 🎬 3.4.15 Cloud Data Security Considerations
Video lesson reinforcing cloud data security considerations. - 📄 3.4.16 Cloud Control Strategies
- 🎬 3.4.17 Cloud Control Strategies
Video lesson reinforcing cloud control strategies. - 📄 3.4.18 Customer-to-Cloud Connectivity
- 📄 3.4.19 Cloud Service Integration
- 📄 3.4.20 Cloud Service Adoption
- 🖱️ 3.4.21 Applied Live Lab: Detecting Shadow IT
Detect unsanctioned cloud apps and services in a simulated environment and assess the risk they introduce. - 🖱️ 3.4.22 Applied Live Lab: Implementing API Security
Implement API security controls in a hands-on environment. - 🖱️ 3.4.23 Applied Live Lab: Implementing Container Security
Apply container security controls in a hands-on environment. - 📝 3.4.24 Lesson Review
3.5 Integrate Zero Trust Concepts
Put Zero Trust into practice: continuous authorization, context-based reauthentication, network architecture, API validation, asset attestation, security boundaries and deperimeterization. Ends with a Challenge Live Lab where you evaluate findings from an assessment.
- 📄 3.5.1 Continuous Authorization
Why access should be re-evaluated continuously instead of granted once, a core idea in Zero Trust. - 📄 3.5.2 Context-Based Reauthentication
- 📄 3.5.3 Network Architecture
- 🎬 3.5.4 Analyzing Security Requirements to Ensure Secure Network Architecture
Video lesson on analyzing security requirements to design a secure network architecture. - 🧩 3.5.5 Activity: Traditional Security Architecture
Work through scenarios on traditional security architecture. - 📄 3.5.6 API Integration and Validation
- 📄 3.5.7 Asset Identification, Management, and Attestation
- 📄 3.5.8 Security Boundaries
- 📄 3.5.9 Deperimeterization
Moving security beyond the traditional network perimeter as users, devices and data spread across environments. - 📄 3.5.10 Defining Subject-Object Relationships
- 🖱️ 3.5.11 Applied Live Lab: Implementing Continuous Authentication
Implement continuous authentication, so access is verified throughout a session instead of only at login. - 🖱️ 3.5.12 Challenge Live Lab: Evaluate Findings from Assessment
A challenge lab: review the findings from an assessment and decide what they mean for the environment. - 📝 3.5.13 Lesson Review
3.6 Troubleshoot using AAA and IAM
Manage identity end to end: provisioning, federation and conditional access, policy decision and enforcement points, access control models, PKI architecture, biometrics, secrets management, cloud IAM and privileged identity management. Two Azure labs give you real configuration practice.
- 📄 3.6.1 Provisioning/Deprovisioning
- 🧩 3.6.2 Activity: Identify Virtualization Technologies
Identify virtualization technologies and where they fit. - 📄 3.6.4 Conditional Access
- 📄 3.6.5 Identity and Service Providers
- 📄 3.6.6 Policy Decision and Enforcement Points
- 📄 3.6.7 Access Control Models
- 📄 3.6.8 Logging and Auditing
- 📄 3.6.9 Public Key Infrastructure (PKI) Architecture
- 🧩 3.6.10 Activity: Implement Appropriate PKI Solutions
Choose and implement the right PKI solution for a given scenario. - 📄 3.6.11 Access Control Systems
- 📄 3.6.12 Subject Access Control
- 🧩 3.6.13 Activity: Analyze Access Control Models and Best Practices
Analyze access control models and decide which best practices fit each case. - 📄 3.6.14 Biometrics
How biometric authentication works, where it fits, and its strengths and limitations. - 📄 3.6.15 Secrets Management
How to store, distribute and protect secrets such as passwords, keys and tokens. - 🎬 3.6.16 Secrets Management
Video lesson reinforcing secrets management. - 📄 3.6.17 Cloud IAM Access and Trust Policies
- 📄 3.6.18 Logging and Monitoring
- 📄 3.6.19 Privilege Identity Management
Controlling and monitoring privileged accounts, since they carry the most risk. - 📄 3.6.20 Authentication and Authorization
- 🖱️ 3.6.21 Live Lab: Implementing an Azure Conditional Access Control Policy
Build and apply an Azure Conditional Access policy that controls access based on context. - 🖱️ 3.6.22 Live Lab: Implementing Azure MFA
Implement multifactor authentication (MFA) in Azure. - 📝 3.6.23 Lesson Review
- 📝 3.7 Module Quiz
👉 Ready to practice, not just read? Get CertMaster Perform V5
4.0 Understanding Security Engineering
Deploy and configure the technical controls that defend advanced enterprise networks against sophisticated threats.
- 📄 Module 4.0 Introduction
4.1 Enhance Endpoint Security
Harden the endpoint: EDR, privilege management, attack surface monitoring, endpoint protection tools, MDM technologies and secure configurations for enterprise mobility, plus the special challenges of embedded and legacy systems. Labs cover HIPS/HIDS and host-based firewalls.
- 📄 4.1.1 Endpoint Detection Response (EDR)
How EDR tools detect, investigate and respond to threats on endpoints. - 🎬 4.1.2 Configure and Implement Endpoint Security Controls
Video lesson on configuring and implementing endpoint security controls. - 📄 4.1.3 Endpoint Privilege Management
- 📄 4.1.4 Attack Surface Monitoring and Reduction
- 📄 4.1.5 Endpoint Protection Tools
- 🧩 4.1.6 Activity: Identify Web Application Vulnerabilities
Spot common web application vulnerabilities in realistic examples. - 📄 4.1.7 Mobile Device Management (MDM) Technologies
- 🎬 4.1.8 Applying Secure Configurations to Enterprise Mobility
Video lesson on applying secure configurations to enterprise mobility. - 🧩 4.1.9 Activity: Mobile Device Management
Apply mobile device management concepts to enterprise scenarios. - 📄 4.1.10 Threat-actor tactics, techniques, and procedures (TTPs)
- 🧩 4.1.11 Activity: Threat Intelligence
Practice applying threat intelligence to security scenarios. - 📄 4.1.12 Specialized and Embedded Systems
- 📄 4.1.13 Security and Privacy Considerations
- 📄 4.1.14 Industry-Specific Challenges
- 📄 4.1.15 Characteristics of Specialized/Legacy Systems
- 🖱️ 4.1.16 Applied Live Lab: Host-based Intrusion Detection and Prevention Systems (HIPS/HIDS)
Work with host-based intrusion detection and prevention (HIPS/HIDS) to detect and block threats at the endpoint. - 🖱️ 4.1.17 Applied Live Lab: Implementing Host-Based Firewalls
Implement host-based firewalls to control traffic on individual systems. - 📝 4.1.18 Lesson Review
4.2 Configure Network Infrastructure
Find and fix what breaks networks: misconfigurations, IPS/IDS issues, observability, DNS and email security, and resource exhaustion. The lab has you troubleshoot network misconfigurations hands-on.
- 📄 4.2.1 Network Misconfigurations
- 📄 4.2.2 IPS/IDS Issues
- 📄 4.2.3 Observability
- 📄 4.2.4 Domain Name System (DNS) Security
Threats to DNS and the controls that protect it. - 📄 4.2.5 Email Security
- 📄 4.2.8 Resource Exhaustion
- 🖱️ 4.2.9 Applied Live Lab: Troubleshooting Network Misconfigurations
Troubleshoot network misconfigurations in a simulated environment and restore secure, working connectivity. - 📝 4.2.10 Lesson Review
4.3 Initiate Security Automation
Automate defense: hardware security technologies and Secure Boot, host-based encryption, scripting, scheduling and event triggers, Generative AI, SOAR and workflow automation. Two labs cover event-based triggers and SOAR investigation.
- 📄 4.3.1 Hardware Security Technologies
- 🎬 4.3.2 Secure Boot
Video lesson on Secure Boot. - 📄 4.3.3 Hardware Security Features
- 🎬 4.3.4 Host-Based Encryption
Video lesson on host-based encryption. - 📄 4.3.5 Threat-Actor TTPs
- 📄 4.3.6 Scripting, Scheduling and Event Triggers
- 📄 4.3.7 Generative AI
How Generative AI can support security work, and what to watch out for. - 📄 4.3.8 Security Orchestration, Automation, and Response (SOAR)
How SOAR platforms connect tools and automate response to speed up security operations. - 📄 4.3.9 Workflow Automation
- 🖱️ 4.3.10 Applied Live Lab: Implementing Event-Based Triggers
Implement event-based triggers that automatically start security actions. - 🖱️ 4.3.11 Applied Live Lab: Investigating Security Orchestration Automate and Response (SOAR)
Investigate a security orchestration, automation and response (SOAR) platform and see how it automates response. - 📝 4.3.12 Lesson Review
4.4 Apply Cryptography Concepts
Stay ahead of the curve: Post-Quantum Cryptography (PQC), key stretching, key splitting and envelope encryption, homomorphic encryption, secure multiparty computation, forward secrecy, AEAD, data security states, blockchain and software integrity.
- 📄 4.4.1 Post-Quantum Cryptography (PQC)
Why quantum computing threatens today's cryptography and what post-quantum approaches aim to do about it. - 📄 4.4.2 Key Stretching, Key Splitting, and Envelope Encryption
- 📄 4.4.3 Homomorphic Encryption and Secure Multiparty Computation
Protecting data while it is being processed: the ideas behind homomorphic encryption and secure multiparty computation. - 📄 4.4.4 Forward Secrecy, Mutual Authentication, and AEAD
- 🎬 4.4.5 Mutual Authentication
Video lesson on mutual authentication. - 📄 4.4.6 Cryptographic Performance vs. Security
- 📄 4.4.7 Data Security States
- 🎬 4.4.8 Implementing the Appropriate Cryptographic Protocols and Algorithms
Video lesson on implementing the appropriate cryptographic protocols and algorithms. - 📄 4.4.9 Encryption and Authentication Mechanisms
- 📄 4.4.10 Data Protection Techniques
- 🧩 4.4.11 Activity: Implementing the Appropriate Cryptographic Protocols and Algorithms
Select cryptographic protocols and algorithms that fit each scenario. - 📄 4.4.12 Blockchain and Immutable Records
How blockchain and immutable records support integrity, and what to consider when using them. - 📄 4.4.13 Legal and Resource Considerations
- 📄 4.4.14 Software Integrity and Provenance
- 📄 4.4.15 Data Protection and Privacy
- 📄 4.4.16 Data Integrity and Authenticity
- 📄 4.4.17 Encryption Techniques
- 📝 4.4.18 Lesson Review
- 📝 4.5 Module 04 Quiz
5.0 Applying Security Operations and Incident Response
Become a proactive defender: hunt threats, analyze malware and lead incident response.
- 📄 Module 5.0 Introduction
5.1 Perform Threat Modeling
Profile threats, run structured threat assessments, determine attack surfaces and evaluate AI-enabled attacks and AI assistants. The lab applies the MITRE ATT&CK framework.
- 📄 5.1.1 Understanding and Profiling Threats
- 📄 5.1.2 Structured Threat Assessment
- 🎬 5.1.3 Threat Modeling Methods
Video lesson on threat modeling methods. - 📄 5.1.4 Attack Surface Determination
- 📄 5.1.5 Modeling Applicability of Threats to the Organization/Environment
- 📄 5.1.6 Threats to the Model
- 📄 5.1.7 AI-Enabled Attacks
How attackers use AI to make attacks faster and more convincing, and what that means for defense. - 📄 5.1.8 AI-Enabled Assistants/Digital Workers
The security considerations of AI-enabled assistants and digital workers. - 🖱️ 5.1.9 Applied Live Lab: Implementing MITRE ATT@CK Framework
Apply the MITRE ATT&CK framework to map and understand attacker behavior. - 📝 5.1.10 Lesson Review
5.2 Examine Security Monitoring
Turn data into detection: data collection and integration, behavioral benchmarking, diverse data sources, alerting practices and reporting metrics. Two labs cover behavior baselines and analytics, and logging, auditing and alerting.
- 📄 5.2.1 Data Collection and Integration
- 📄 5.2.2 Data Processing and Behavioral Benchmarking
- 🎬 5.2.3 Incorporating Diverse Data Sources
Video lesson on incorporating diverse data sources into monitoring. - 📄 5.2.4 Alerting Concepts and Practices
- 📄 5.2.5 Reporting and Metrics
- 🖱️ 5.2.6 Applied Live Lab: Establishing Behavior Baselines and Analytics
Establish behavior baselines and use analytics to recognize activity that falls outside normal. - 🖱️ 5.2.7 Applied Live Lab: Logging Auditing and Alerting
Set up logging, auditing and alerting so important events are captured and flagged. - 📝 5.2.8 Lesson Review
5.3 Analyze Known Attack Methods and Associated Mitigations
Learn the vulnerabilities and the fixes side by side: input and output manipulation, memory and execution flaws, cryptographic issues, system configuration, supply chain and external dependencies, and the mitigations including secure coding practices.
- 📄 5.3.1 Vulnerabilities: Input and Output Manipulation
- 🧩 5.3.2 Activity: Vulnerability Assessment Tools
Practice working with vulnerability assessment tools and interpreting what they report. - 📄 5.3.3 Vulnerabilities: Memory and Execution Vulnerabilities
- 📄 5.3.4 Vulnerabilities: Cryptographic Issues
- 📄 5.3.5 Vulnerabilities: System Configuration and Management
- 📄 5.3.6 Vulnerabilities: Supply Chain and External Dependencies
- 🎬 5.3.7 Analyzing Vulnerabilities and Recommending Risk Mitigations
Video lesson on analyzing vulnerabilities and recommending risk mitigations. - 📄 5.3.8 Mitigations: Input and Output Security
- 📄 5.3.9 Mitigations: Secure Coding Practices
- 📄 5.3.10 Mitigations: System Maintenance and Management
- 📄 5.3.11 Mitigations: Data Security and Management
- 📝 5.3.12 Lesson Review
5.4 Apply Threat Hunting Tools and Technologies
Hunt with intelligence: internal and external sources, counterintelligence and operational security, Threat Intelligence Platforms (TIPs), Indicator of Compromise (IoC) sharing and rule-based languages. Three labs cover external intelligence, IoCs and Indicators of Attack.
- 📄 5.4.1 Internal Intelligence Sources
- 📄 5.4.2 External Intelligence Sources
- 📄 5.4.3 Counterintelligence and Operational Security
- 📄 5.4.4 Threat Intelligence Platforms (TIPs)
How threat intelligence platforms collect, organize and share threat data. - 📄 5.4.5 Indicator of Compromise (IoC) Sharing
- 🎬 5.4.6 Analyzing Indicators of Compromise
Video lesson on analyzing indicators of compromise. - 📄 5.4.7 Rule-Based Languages
The rule-based languages used to detect and describe threats. - 🖱️ 5.4.8 Applied Live Lab: Investigating External Intelligence Sources
Investigate external intelligence sources to gather information about threats. - 🖱️ 5.4.9 Applied Live Lab: Investigating Indicators of Compromise (IoC)
Investigate indicators of compromise (IoCs) to identify signs of a breach. - 🖱️ 5.4.10 Applied Live Lab: Auditing Indicators of Attack
Audit indicators of attack (IoAs) to spot attacker activity as it unfolds. - 📝 5.4.11 Lesson Review
5.5 Evaluate Incident Analysis and Response
Lead the response: malware analysis, forensic analysis, detection and initial analysis, metadata analysis, continuous improvement, and preparedness and prevention. Three labs, including a Challenge Live Lab, have you conduct malware analysis and extract and analyze metadata.
- 📄 5.5.1 Malware Analysis
How malware is analyzed to understand what it does and how to respond. - 🎬 5.5.2 Malware Analysis
Video lesson on malware analysis. - 📄 5.5.3 Forensic Analysis
- 📄 5.5.4 Detection and Initial Analysis
- 🎬 5.5.5 Metadata Analysis
Video lesson on metadata analysis. - 📄 5.5.6 Continuous Improvement
- 📄 5.5.7 Preparedness and Prevention
- 🖱️ 5.5.8 Applied Live Lab: Conducting Malware Analysis
Conduct hands-on malware analysis in a safe, simulated VM environment. - 🖱️ 5.5.9 Applied Live Lab: Extracting and Analyzing Metadata
Extract and analyze metadata to gather evidence and context. - 🖱️ 5.5.10 Challenge Live Lab: Enhancing Cybersecurity through Practical Analysis
A challenge lab: apply practical analysis skills to strengthen an organization's cybersecurity. - 📝 5.5.11 Lesson Review
- 📝 5.6 Module Quiz
A.0 SecurityX CAS-005 Practice Exams
Finish with exam strategy and full practice exams, so exam day feels familiar.
- 📄 Module A.0 Introduction
A.1 Prepare for CompTIA SecurityX Certification
Exam details, testing strategies and pro tips: why take a certification exam, what to expect from the SecurityX (CAS-005) exam, how to take it and how to approach it on the day.
- 📄 A.1.1 Why Should I Take a Certification Exam?
- 📄 A.1.2 Exam Details for SecurityX (CAS-005)
- 📄 A.1.3 How to Take the Certification Exam
- 📄 A.1.4 Tips for Taking the Exam
A.2 SecurityX CAS-005 Practice Exams
Test your readiness with targeted practice exams for all four domains, finishing with a full 90-minute SecurityX CAS-005 exam practice simulation.
- 📝 A.2.1 Exam Practice 1: Governance, Risk, and Compliance
- 📝 A.2.2 Exam Practice 2: Security Architecture
- 📝 A.2.3 Exam Practice 3: Security Engineering
- 📝 A.2.4 Exam Practice 4: Security Operations
- 📝 A.2.5 SecurityX CAS-005 Exam Practice
- 📄 Glossary: a quick reference for all the advanced terminology.
Ready to Take the Final Step?
SecurityX is the credential that says you do not just defend systems, you design the strategy behind them. With written lessons, videos, interactive activities, Live Labs and full-length practice exams in one platform, you have everything you need to prepare with confidence.
0 comentarios