Name: CompTIA SecurityX Exam Preparation Course (Self-Paced)
Price: 3199.0 USD
Availability: InStock

This course includes

24 hours of project-based training from experts
SecurityX exam voucher
Answers from real instructors
Retake for free within 1 year
Verified digital certificate of completion
Learn at an accredited institution
Credits: 2.4 CEUs

CompTIA and SecurityX are trademarks of CompTIA. This course is not affiliated with or endorsed by CompTIA, and passing the exam is not guaranteed.

This course is self-paced. For live online or in-person instruction, take SecurityX Exam Preparation Course.

This advanced course prepares experienced security practitioners to sit the CompTIA SecurityX (CAS-005) exam, CompTIA's most advanced cybersecurity certification and the successor to CASP+. Every module maps to one of CompTIA's published exam objectives.

Learners work through governance, risk, and compliance; security architecture; security engineering; and security operations. Scenario work in every module asks learners to make architecture decisions, triage incidents, or defend risk choices.

Target Audience

This course is written for senior security analysts, security engineers, security architects, and IT or security managers working toward the most advanced individual certification in CompTIA's cybersecurity path. CompTIA's own guidance recommends candidates already hold Network+, Security+, CySA+, Cloud+, and PenTest+ (or equivalent knowledge), along with a minimum of 10 years of general IT experience and at least 5 years of hands-on security experience. It is not for learners new to cybersecurity or without hands-on production experience; those learners are better served starting with Networking Fundamentals for Security, Security+ Exam Preparation, Network+ Exam Preparation, Cloud+ Exam Preparation, CySA+ Exam Preparation, or PenTest+ Exam Preparation, before returning to this course.

This course has a prerequisite

CompTIA recommends Network+, Security+, CySA+, Cloud+, and PenTest+ level knowledge, plus 10 years of IT experience, including 5 in hands-on security.

Tuition

Full Tuition

$3,199
Due before the class starts

This course includes

24 hours of project-based training from experts
SecurityX exam voucher
Answers from real instructors
Retake for free within 1 year
Verified digital certificate of completion
Learn at an accredited institution
Credits: 2.4 CEUs

Learning Experience Highlights

Training from government‑experienced instructors

Receive instruction from subject‑matter experts who bring proven government experience.

Specialized for government & DoD

Courses that are regularly updated based on feedback and industry developments, ensuring versions are mapped to federal competencies.

The instructor was wonderful and so knowledgeable. The course materials were extremely relevant to what my job is. I feel like I can be better because of this class.
— 2025 student

Three professionals sit in black chairs with laptops and notebooks, engaged in conversation against a red wall.

Real-world solutions

Directly addressing the day-to-day challenges of federal employees.

125+ departments & agencies served

Your trusted training partner, equipping public service professionals with the skills and knowledge to excel in their roles and drive meaningful impact.

100% Online. Start Anytime

24/7 access to our premium course videos and projects.
Industry experts are assigned as your course instructor. Message your instructor with any questions.
Participate in GSUSA online discussion forums — share ideas and receive additional support.
Hands-on quizzes and mini projects to test and reinforce concepts.

Earn a Certificate of Completion

Upon completion of this course, you’ll receive an official certificate testifying to your mastery of the curriculum. We’ll send you a link where you can download your certificate, share it online with your friends, post it to your professional network on LinkedIn, and view all your earned certificates. Congratulations on your achievement!

Shareable on

Sample credential for completion of CompTIA SecurityX Exam Preparation Course (Self-Paced)

A group of adult learners sits in a classroom, smiling and engaged in a government training session.

A government training instructor in a suit gestures while teaching in front of a whiteboard covered with notes and diagrams.

A person in professional attire holds a Graduate School USA folder, symbolizing participation in government training programs.

CompTIA SecurityX Exam Preparation Course (Self-Paced) Curriculum

What You'll Learn at a Glance

Perform quantitative and qualitative risk management, including third-party and supply chain risk
Apply threat modeling frameworks such as STRIDE, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis to a real architecture
Evaluate the information security risks of AI adoption, including model-level threats and AI-enabled attacks
Design resilient systems architecture and secure identity, access, and PKI systems
Securely implement cloud capabilities, including CASB, container, and serverless controls
Integrate zero trust concepts into system architecture design
Troubleshoot identity and access management, endpoint, and network infrastructure security issues
Implement hardware security technologies, including roots of trust and boot integrity
Secure specialized and legacy systems, including operational technology, ICS, and IoT environments
Use automation and infrastructure as code to secure the enterprise
Apply advanced cryptographic concepts, including post-quantum cryptography, and select the correct cryptographic use case and technique
Analyze data to enable security monitoring and response, including SIEM tuning and alert prioritization
Identify named vulnerability and attack classes and select the correct mitigation
Apply threat-hunting and threat intelligence concepts, including rule-based detection languages
Analyze incident response data and artifacts, including malware analysis and timeline reconstruction

Course Syllabus

Download Syllabus PDF

Module 1: Course and Exam Orientation

Lessons:
- Exam format and domain weighting
- How this course maps to the CAS-005 objectives
- Building a personal study and practice plan
Applied activity: Learners map their own job responsibilities against the four domains and identify their two weakest areas.

Module 2 (Objective 1.1): Implementing Governance Components

Lessons:
- Security program documentation and management
- Governance frameworks and change management
- GRC tools and data governance
Applied activity: Learners build a RACI matrix for a new security policy rollout and identify a GRC tool to track its compliance status.

Module 3 (Objective 1.2): Performing Risk Management Activities

Lessons:
- Impact analysis and risk assessment
- Third-party risk and availability/confidentiality risk
- Integrity, privacy risk, and crisis management
Applied activity: Learners score a scenario involving a subprocessor data breach and select the correct availability, confidentiality, and privacy risk responses.

Module 4 (Objective 1.3): Compliance and Information Security Strategy

Lessons:
- Industry-specific compliance and standards
- Security and reporting frameworks and audits
- Privacy regulation and cross-jurisdictional compliance
Applied activity: Learners review a scenario describing a multinational data transfer and identify which privacy regulations and cross-jurisdictional obligations apply.

Module 5 (Objective 1.4): Threat Modeling

Lessons:
- Threat actor characteristics and attack patterns
- Threat modeling frameworks
- Attack surface determination and modeling methods
Applied activity: Learners apply STRIDE to a sample application architecture diagram and identify the attack surface introduced by a described organizational change, such as a merger.

Module 6 (Objective 1.5): AI Adoption and Information Security Challenges

Lessons:
- Legal, privacy, and model-level threats
- AI-enabled attacks and usage risk
- Governing AI-enabled assistants and digital workers
Applied activity: Learners review a proposed AI assistant deployment and design the access permissions, guardrails, and usage disclosure it needs before approval.

Module 7 (Objective 2.1): Designing Resilient Systems

Lessons:
- Security component placement
- Availability and integrity design considerations
- Applying resilient design to a scenario
Applied activity: Learners place a set of security components onto a blank architecture diagram for a described resilient system requirement.

Module 8 (Objective 2.2): Security Throughout the Systems Life Cycle

Lessons:
- Security requirements and software assurance
- CI/CD and supply chain risk
- Hardware assurance and end-of-life considerations
Applied activity: Learners select the correct software assurance technique for each stage of a described CI/CD pipeline and flag a missing SBOM step.

Module 9 (Objective 2.3): Integrating Controls into Secure Architecture

Lessons:
- Attack surface management and detection enablers
- Information and data security design
- Hybrid infrastructure, third-party integration, and control effectiveness
Applied activity: Learners recommend sensor placement and a DLP control for a described hybrid infrastructure with a third-party integration.

Module 10 (Objective 2.4): Access, Authentication, and Authorization System Design

Lessons:
- Provisioning, federation, and policy points
- Access control models and logging
- PKI architecture and access control systems
Applied activity: Learners select the correct access control model for three described scenarios and design a certificate template for a new PKI use case.

Module 11 (Objective 2.5): Securely Implementing Cloud Capabilities

Lessons:
- CASB, shared responsibility, and CI/CD in the cloud
- Container, serverless, and API security
- Cloud data security and control strategies
Applied activity: Learners review a cloud workload diagram and assign a CASB, container, and API control to close a described shadow IT and data exposure gap.

Module 12 (Objective 2.6): Integrating Zero Trust into System Architecture Design

Lessons:
- Continuous authorization and network architecture
- API integration and asset identification
- Security boundaries and deperimeterization
Applied activity: Learners redesign a perimeter-based network into a zero trust architecture, defining security boundaries and selecting a deperimeterization technology.

Module 13 (Objective 3.1): Troubleshooting Identity and Access Management

Lessons:
- Subject access control and secrets management
- Conditional access and privileged identity management
- Authentication and authorization protocols
Applied activity: Learners diagnose a described SSO failure and identify whether the root cause lies in the SAML assertion, the conditional access policy, or key rotation.

Module 14 (Objective 3.2): Enhancing Endpoint and Server Security

Lessons:
- Endpoint control and monitoring
- Host-based protection technologies
- Threat-actor tactics, techniques, and procedures against endpoints
Applied activity: Learners review a sequence of endpoint events and identify which threat-actor TTP each step represents.

Module 15 (Objective 3.3): Troubleshooting Network Infrastructure Security

Lessons:
- Network misconfigurations and IPS/IDS issues
- DNS and email security
- TLS, PKI, and denial-of-service issues
Applied activity: Learners review a network capture and email header showing a spoofed message, and identify which of DKIM, SPF, or DMARC failed to catch it.

Module 16 (Objective 3.4): Implementing Hardware Security Technologies

Lessons:
- Roots of trust and coprocessors
- Boot integrity and tamper resistance
- Hardware-level threat-actor tactics
Applied activity: Learners select the correct hardware root of trust and boot integrity control for a device that must resist firmware tampering.

Module 17 (Objective 3.5): Securing Specialized and Legacy Systems

Lessons:
- Operational technology and embedded systems
- Security and privacy considerations for specialized systems
- Industry-specific challenges and legacy system characteristics
Applied activity: Learners design a segmentation approach for a described SCADA environment that cannot be patched, citing the safety constraint that rules out a standard patching approach.

Module 18 (Objective 3.6): Using Automation to Secure the Enterprise

Lessons:
- Scripting and infrastructure as code
- Automated response and containment
- Vulnerability scanning and workflow automation
Applied activity: Learners draft a SOAR playbook step that automatically contains a host flagged by a CVSS-scored vulnerability scan.

Module 19 (Objective 3.7): Advanced Cryptographic Concepts

Lessons:
- Post-quantum cryptography
- Key management and computation techniques
- Performance, secrecy, and authentication trade-offs
Applied activity: Learners evaluate a proposed cryptographic architecture for a long-lived data set and recommend whether post-quantum algorithms or envelope encryption better fit the retention requirement.

Module 20 (Objective 3.8): Applying Cryptographic Use Cases and Techniques

Lessons:
- Cryptographic use cases across data states
- Provenance, authentication, and key management use cases
- Cryptographic techniques
Applied activity: Learners select the cryptographic use case and technique that best fit a described mobile payment scenario, justifying the choice against data-in-use and non-repudiation requirements.

Module 21 (Objective 4.1): Analyzing Data for Monitoring and Response

Lessons:
- SIEM and aggregate data analysis
- Behavior baselines and diverse data sources
- Alerting and reporting
Applied activity: Learners triage a batch of SIEM alerts and rank them using the prioritization factors, then propose one SIEM tuning change to reduce noise.

Module 22 (Objective 4.2): Analyzing Vulnerabilities and Attacks to Reduce Attack Surface

Lessons:
- Injection, memory, and request-forgery vulnerabilities
- Configuration, software, and cryptographic weaknesses
- Mitigations
Applied activity: Learners review a short code and traffic sample set, identify the vulnerability class present in each, and select a matching mitigation for each.

Module 23 (Objective 4.3): Threat-Hunting and Threat Intelligence

Lessons:
- Internal and external intelligence sources
- Counterintelligence and threat intelligence platforms
- Rule-based detection languages and indicators of attack
Applied activity: Learners draft a hypothesis-based hunt using a described threat intelligence feed and translate one indicator of compromise into a Sigma rule.

Module 24 (Objective 4.4): Incident Response Data and Artifact Analysis

Lessons:
- Malware and reverse-engineering analysis
- Storage, network, host, and metadata analysis
- Response, recovery, and root cause
Applied activity: Learners reconstruct a simulated incident timeline from a set of host, network, and metadata artifacts, then identify the root cause.

Module 25: Exam Strategy, Practice Scenarios, and Review

Lessons:
- Performance-based question strategy
- Full-length practice scenarios across all four domains
- Reviewing weak domains and final readiness
Applied activity: Learners complete a timed practice scenario set spanning all four domains and self-score against the domain weighting.

Group Training

Since 1921, Graduate School USA has partnered with over 125 federal agencies and trained more than one million federal employees. Led by instructors with deep, real-world knowledge of federal regulations, policies, and practices, our private group programs are practical, mission-driven, and tailored to your agency’s objectives. We offer expertise across key federal domains—including human resources, financial management, acquisition and contracting, leadership, and more—to deliver training where and how your team needs it.

Complete this form and we’ll get back to you within 1 business hour.

The Fact Is – We’ve Been Government’s Training Partner Since 1921

400+ Courses & Certificates 125+ Federal Agencies Served 200+ Subject-Matter Experts

Installments
	10% non-refundable deposit
$3,199.00	Total You Pay