CompTIA SecurityX (CAS-005) Training - OEM Certkit

The CompTIA SecurityX (CAS-005) training – formerly known as CompTIA Advanced Security Practitioner (CASP+) – is an expert-level cybersecurity certification for security architects and senior security engineers responsible for leading and improving enterprise cybersecurity readiness.

This training covers technical skills in on-premises, cloud-native, and hybrid environments, governance, risk & compliance, assessing enterprise cybersecurity readiness, and leading technical teams in implementing enterprise-wide security solutions.

Prerequisites:
At least 10 years of general IT hands-on experience, with a minimum of 5 years in security. Certifications such as Network+, Security+, CySA+, Cloud+, and PenTest+ or equivalent knowledge are recommended.

Course Outcomes:

• Analyze security requirements in hybrid networks and work toward a zero trust architecture with advanced secure cloud and virtualization solutions.
• Address advanced threat management, vulnerability management, risk mitigation, incident response tactics, and digital forensics analysis.
• Demonstrate organizational cybersecurity resiliency and compliance with regulations such as CMMC, PCI-DSS, SOX, HIPAA, GDPR, FISMA, NIST, and CCPA.
• Understand configurations for endpoint security, enterprise mobility, cloud/hybrid environments, and enterprise-wide PKI and cryptographic solutions.

Who Should Attend:
This course is designed for IT professionals in cybersecurity whose main responsibility is to secure complex enterprise environments.

Demo CompTIA SecurityX (CAS-005) Training

CertKit content:

• E-learning courses:

CompTIA SecurityX (CAS-005): Governance Components

Course: 1 Hour, 17 Minutes

• Course Overview
• Security Program Management
• Security Awareness and Training
• Security Communication and Reporting
• RACI Matrix Roles and Responsibilities
• COBIT and ITIL Governance Frameworks
• Change and Configuration Management
• Governance, Risk, and Compliance (GRC) Tools
• Staging Environment Data Governance
• Implementing Policy Management
• Course Summary

CompTIA SecurityX (CAS-005): Server & Endpoint Security

Course: 1 Hour, 41 Minutes

• Course Overview
• Server Application Control
• Endpoint Detection and Response (EDR)
• Event Logging and Monitoring
• Endpoint Privilege Management
• Attack Surface Monitoring and Reduction
• Host-Based Intrusion Protection and Detection Systems (HIPS/HIDS)
• Anti-Malware Solutions
• Security-Enhanced Linux (SELinux)
• Host-Based Firewalls
• Browser Isolation
• Server Configuration Management
• Mobile Device Management (MDM)
• Threat Actor Tactics, Techniques, and Procedures (TTPs)
• Course Summary

CompTIA SecurityX (CAS-005): Security Design & Integration

Course: 1 Hour, 44 Minutes

• Course Overview
• System Security Requirements
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Interactive Application Security Testing (IAST)
• Runtime Application Self-Protection (RASP)
• Securing Application Runtimes with PyRASP
• Vulnerability Analysis
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBoM)
• Software Formal Methods
• Software Development Best Practices
• Software Testing Practices
• Testing Python Software with pytest
• Supply Chain Risk Management (SCRM)
• Hardware Assurance
• System End-of-Life Considerations
• Hiding Messages Using Steganography
• Course Summary

CompTIA SecurityX (CAS-005): Incidence Response

Course: 52 Minutes

• Course Overview
• Incident Response Analysis
• Malware Analysis
• Reverse Engineering
• Root Cause Analysis (RCA)
• Data Recovery and Extraction
• Timeline Reconstruction
• Cloud Workload Protection Platform (CWPP)
• Course Summary

CompTIA SecurityX (CAS-005): Artificial Intelligence (AI) Security Challenges

Course: 1 Hour, 4 Minutes

• Course Overview
• AI Security Concerns
• AI Model Threats
• AI-Enable Attacks
• AI Usage Risks
• AI Assistance and Digital Worker Concerns
• Securing LLM Applications
• Preventing LLM Model Serialization Attacks
• Executing Prompt Injection Attacks and Mitigation
• Course Summary

CompTIA SecurityX (CAS-005): Compliance Security Strategies

Course: 50 Minutes

• Course Overview
• Compliance Security Strategies
• Industry Security Standards
• Security and Reporting Frameworks
• Audits, Assessments, and Certifications
• Privacy Regulations
• Cross-Jurisdictional Compliance
• Using Microsoft Defender EASM to Discover Attack Surfaces
• Course Summary

CompTIA SecurityX (CAS-005): Security Risk Management

Course: 1 Hour, 19 Minutes

• Course Overview
• Security Threat Impact Analysis
• Risk Assessment and Management
• Third-Party Risk Management
• Availability Risk Considerations
• Confidentiality Risk Considerations
• Integrity Risk Considerations
• Privacy Risk Considerations
• Crisis Management and Security Breach Response
• Creating an AWS REST API Gateway
• Setting Up AWS CloudFront
• Using Risk Assessment Frameworks
• Course Summary

CompTIA SecurityX (CAS-005): Resilient System Design

Course: 1 Hour, 47 Minutes

• Course Overview
• Firewall Security
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Vulnerability Scanners
• Virtual Private Networks (VPNs)
• Network Access Control (NAC)
• Web Application Firewalls (WAFs)
• API Gateways
• Content Delivery Networks (CDNs)
• Load Balancing
• Creating an Elastic Load Balancer
• Vertical vs. Horizontal Scaling
• Setting Up Amazon EC2 Auto Scaling
• Configuring a VPN Tunnel
• Course Summary

CompTIA SecurityX (CAS-005): Threat Modeling Scenarios

Course: 1 Hour, 57 Minutes

• Course Overview
• Threat Actors
• Attack Patterns
• Using the MITRE ATT&CK Framework
• Common Attack Pattern Enumeration and Classification (CAPEC)
• Exploring the CAPEC Website
• The Cyber Kill Chain
• The Diamond Model of Intrusion Analysis
• The STRIDE Model
• Open Worldwide Application Security Project (OWASP)
• Exploring the OWASP Top 10
• Attack Surfaces
• Using runZero to Discover Attack Surfaces
• Security Attack Methods
• Threat Modeling
• Course Summary

CompTIA SecurityX (CAS-005): Security Controls

Course: 56 Minutes

• Course Overview
• Attack Surface Management
• Threat Detection Security Controls
• Data Security Design
• Data Loss Prevention (DLP
• Hybrid Infrastructures
• Third-Party Integrations
• Control Effectiveness
• Implementing Amazon RDS Data Protection
• Detecting and Managing Threats Using Amazon Inspector
• Course Summary

CompTIA SecurityX (CAS-005): Access, Authentication, & Authorization

Course: 1 Hour, 14 Minutes

• Course Overview
• Provisioning/Deprovisioning
• Federated Environments
• Single Sign-On (SSO)
• Conditional Access
• Identity Providers (IdPs)
• Service Providers (SPs)
• Policy Decision and Enforcement Points
• Access Control Models
• Logging and Auditing
• Public Key Infrastructure (PKI)
• Creating a Conditional Access Policy
• Issuing PKI Certificates
• Course Summary

CompTIA SecurityX (CAS-005): Identity & Access Management

Course: 1 Hour, 11 Minutes

• Course Overview
• Subject-Based Access Control
• Biometrics Authentication
• Secrets Management for Sensitive Information
• Cloud IAM Access and Trust Policies
• Identity and Access Management Logging and Monitoring
• Privileged Identity Management
• Enterprise Authentication
• Enterprise Authorization
• AWS IAM User Management
• AWS IAM User Groups
• AWS IAM Roles
• Course Summary

CompTIA SecurityX (CAS-005): Hardware Security

Course: 1 Hour, 7 Minutes

• Course Overview
• Comparing Platform and Hardware Security
• Security Coprocessors
• Virtual Hardware
• Host-Based Encryption
• Hardware Security, Integrity, and Resilience
• Hardware Threat-Actor TTPs
• Acquiring a Forensic Disk Image Using FTK Imager
• Enabling vTPM and Encrypting a Disk with BitLocker
• Course Summary

CompTIA SecurityX (CAS-005): Zero Trust Design

Course: 1 Hour, 7 Minutes

• Course Overview
• Continuous Authorization
• Context-Based Reauthentication
• Network Architecture and Security
• API Integration and Validation
• Asset Identification, Management, and Attestation
• Security Boundaries
• AWS IAM Permission Boundaries
• Deperimeterization
• Data Access Controls
• Testing Web App Security
• Course Summary

CompTIA SecurityX (CAS-005): Vulnerabilities, Attacks, & Mitigation

Course: 31 Minutes

• Course Overview
• Common Security Attacks
• Common Security Vulnerabilities
• Software Security Mitigation
• Threat Mitigation
• Exploring XSS Injection Attacks
• Course Summary

CompTIA SecurityX (CAS-005): Cryptography Concepts

Course: 58 Minutes

• Course Overview
• Advanced Cryptography
• Encrypting AWS KMS Envelopes
• Post-Quantum Cryptography
• Cryptography Performance vs. Security
• Secure Multiparty Computation
• Authenticated Encryption with Associated Data
• Mutual Authentication
• Performing REST API Mutual Authentication
• Course Summary

CompTIA SecurityX (CAS-005): Cloud & Containerization Security

Course: 1 Hour, 37 Minutes

• Course Overview
• Cloud Access Security Broker (CASB)
• Shadow IT Detection
• Shared Responsibility Model
• CI/CD Pipeline
• Terraform and Ansible
• Package Monitoring
• Container Orchestration with Kubernetes
• Serverless Workloads Security
• API Security
• Encryption Keys and Software Licenses
• Cloud Data Security
• Monitoring Resources Using AWS CloudWatch
• Using Terraform for Cloud Security
• Course Summary

CompTIA SecurityX (CAS-005): Threat Intelligence & Hunting

Course: 1 Hour, 10 Minutes

• Course Overview
• Internal Intelligence Sources
• External Intelligence Sources
• Counterintelligence and Operational Security
• Threat Intelligence Platforms (TIPs)6
• Structured Threat Information eXpression (STIX)
• Trusted Automated eXchange of Indicator Information (TAXII)
• Rule-Based Languages
• Creating YARA Security Rules
• Indicators of Attack
• Installing the Snort IDS
• Testing the Snort IDS
• Course Summary

CompTIA SecurityX: Enterprise Security Automation

Course: 1 Hour, 47 Minutes

• Course Overview
• Workflow Automation
• Automation Scripting Languages
• Using PowerShell Scripts
• Automation Scheduling
• Scheduling Cron Jobs
• Automation Triggers
• Infrastructure as Code (IaC) Automation
• Automation Configuration Languages
• Webhook Automation
• Generative AI Automation
• Containerization Automation
• Automated Patching
• Auto-Containment
• Security Orchestration, Automation, & Response (SOAR)
• Automated Scanning & Reporting
• Security Content Automation Protocol (SCAP)
• Course Summary

MeasureUp Exam simulation

• 220+ questions

Online Mentor

The online mentor can answer all your specific technical questions via chat or email related to your studies.
Online Mentor is active for 90 days or 365 days - after activation!

Tips, Tricks & Links

Take advantage of our comprehensive collection of tips, tricks and links designed specifically to support your preparation for certification exams. These resources offer valuable insights and proven strategies to make your studies more effective. Enhance your learning experience and approach your exams with confidence!