CompTIA SecurityX (CAS-005)

CompTIA SecurityX (CAS-005).

De CompTIA SecurityX (CAS-005) training – voorheen bekend als CompTIA CASP+ – is een expert-level certificering voor security-architecten en senior engineers. De training focust op het verbeteren van enterprise cybersecurity door middel van:

• Technische vaardigheden in on-premises, cloud-native en hybride omgevingen.
• Governance, risk & compliance (GRC) en het meten van cyberweerbaarheid.
• Enterprise-brede implementatie van beveiligingsoplossingen.

Vereisten: Minimaal 10 jaar IT-ervaring, waarvan 5 jaar security, aangevuld met certificeringen als Network+, Security+, CySA+, Cloud+ of PenTest+.

Leerresultaten:

• Opzetten van een Zero Trust-architectuur.
• Beheersen van threat & vulnerability management.
• Uitvoeren van incident response en forensische analyses.
• Voldoen aan internationale normen (CMMC, PCI-DSS, GDPR, HIPAA, etc.).

Voor wie: IT-professionals die complexe enterprise-omgevingen beveiligen.

Cursusinhoud

CompTIA SecurityX (CAS-005): Governance Components

Course: 1 Hour, 17 Minutes

• Course Overview
• Security Program Management
• Security Awareness and Training
• Security Communication and Reporting
• RACI Matrix Roles and Responsibilities
• COBIT and ITIL Governance Frameworks
• Change and Configuration Management
• Governance, Risk, and Compliance (GRC) Tools
• Staging Environment Data Governance
• Implementing Policy Management
• Course Summary

CompTIA SecurityX (CAS-005): Server & Endpoint Security

Course: 1 Hour, 41 Minutes

• Course Overview
• Server Application Control
• Endpoint Detection and Response (EDR)
• Event Logging and Monitoring
• Endpoint Privilege Management
• Attack Surface Monitoring and Reduction
• Host-Based Intrusion Protection and Detection Systems (HIPS/HIDS)
• Anti-Malware Solutions
• Security-Enhanced Linux (SELinux)
• Host-Based Firewalls
• Browser Isolation
• Server Configuration Management
• Mobile Device Management (MDM)
• Threat Actor Tactics, Techniques, and Procedures (TTPs)
• Course Summary

CompTIA SecurityX (CAS-005): Security Design & Integration

Course: 1 Hour, 44 Minutes

• Course Overview
• System Security Requirements
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Interactive Application Security Testing (IAST)
• Runtime Application Self-Protection (RASP)
• Securing Application Runtimes with PyRASP
• Vulnerability Analysis
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBoM)
• Software Formal Methods
• Software Development Best Practices
• Software Testing Practices
• Testing Python Software with pytest
• Supply Chain Risk Management (SCRM)
• Hardware Assurance
• System End-of-Life Considerations
• Hiding Messages Using Steganography
• Course Summary

CompTIA SecurityX (CAS-005): Incidence Response

Course: 52 Minutes

• Course Overview
• Incident Response Analysis
• Malware Analysis
• Reverse Engineering
• Root Cause Analysis (RCA)
• Data Recovery and Extraction
• Timeline Reconstruction
• Cloud Workload Protection Platform (CWPP)
• Course Summary

CompTIA SecurityX (CAS-005): Artificial Intelligence (AI) Security Challenges

Course: 1 Hour, 4 Minutes

• Course Overview
• AI Security Concerns
• AI Model Threats
• AI-Enable Attacks
• AI Usage Risks
• AI Assistance and Digital Worker Concerns
• Securing LLM Applications
• Preventing LLM Model Serialization Attacks
• Executing Prompt Injection Attacks and Mitigation
• Course Summary

CompTIA SecurityX (CAS-005): Compliance Security Strategies

Course: 50 Minutes

• Course Overview
• Compliance Security Strategies
• Industry Security Standards
• Security and Reporting Frameworks
• Audits, Assessments, and Certifications
• Privacy Regulations
• Cross-Jurisdictional Compliance
• Using Microsoft Defender EASM to Discover Attack Surfaces
• Course Summary

CompTIA SecurityX (CAS-005): Security Risk Management

Course: 1 Hour, 19 Minutes

• Course Overview
• Security Threat Impact Analysis
• Risk Assessment and Management
• Third-Party Risk Management
• Availability Risk Considerations
• Confidentiality Risk Considerations
• Integrity Risk Considerations
• Privacy Risk Considerations
• Crisis Management and Security Breach Response
• Creating an AWS REST API Gateway
• Setting Up AWS CloudFront
• Using Risk Assessment Frameworks
• Course Summary

CompTIA SecurityX (CAS-005): Resilient System Design

Course: 1 Hour, 47 Minutes

• Course Overview
• Firewall Security
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Vulnerability Scanners
• Virtual Private Networks (VPNs)
• Network Access Control (NAC)
• Web Application Firewalls (WAFs)
• API Gateways
• Content Delivery Networks (CDNs)
• Load Balancing
• Creating an Elastic Load Balancer
• Vertical vs. Horizontal Scaling
• Setting Up Amazon EC2 Auto Scaling
• Configuring a VPN Tunnel
• Course Summary

CompTIA SecurityX (CAS-005): Threat Modeling Scenarios

Course: 1 Hour, 57 Minutes

• Course Overview
• Threat Actors
• Attack Patterns
• Using the MITRE ATT&CK Framework
• Common Attack Pattern Enumeration and Classification (CAPEC)
• Exploring the CAPEC Website
• The Cyber Kill Chain
• The Diamond Model of Intrusion Analysis
• The STRIDE Model
• Open Worldwide Application Security Project (OWASP)
• Exploring the OWASP Top 10
• Attack Surfaces
• Using runZero to Discover Attack Surfaces
• Security Attack Methods
• Threat Modeling
• Course Summary

CompTIA SecurityX (CAS-005): Security Controls

Course: 56 Minutes

• Course Overview
• Attack Surface Management
• Threat Detection Security Controls
• Data Security Design
• Data Loss Prevention (DLP
• Hybrid Infrastructures
• Third-Party Integrations
• Control Effectiveness
• Implementing Amazon RDS Data Protection
• Detecting and Managing Threats Using Amazon Inspector
• Course Summary

CompTIA SecurityX (CAS-005): Access, Authentication, & Authorization

Course: 1 Hour, 14 Minutes

• Course Overview
• Provisioning/Deprovisioning
• Federated Environments
• Single Sign-On (SSO)
• Conditional Access
• Identity Providers (IdPs)
• Service Providers (SPs)
• Policy Decision and Enforcement Points
• Access Control Models
• Logging and Auditing
• Public Key Infrastructure (PKI)
• Creating a Conditional Access Policy
• Issuing PKI Certificates
• Course Summary

CompTIA SecurityX (CAS-005): Identity & Access Management

Course: 1 Hour, 11 Minutes

• Course Overview
• Subject-Based Access Control
• Biometrics Authentication
• Secrets Management for Sensitive Information
• Cloud IAM Access and Trust Policies
• Identity and Access Management Logging and Monitoring
• Privileged Identity Management
• Enterprise Authentication
• Enterprise Authorization
• AWS IAM User Management
• AWS IAM User Groups
• AWS IAM Roles
• Course Summary

CompTIA SecurityX (CAS-005): Hardware Security

Course: 1 Hour, 7 Minutes

• Course Overview
• Comparing Platform and Hardware Security
• Security Coprocessors
• Virtual Hardware
• Host-Based Encryption
• Hardware Security, Integrity, and Resilience
• Hardware Threat-Actor TTPs
• Acquiring a Forensic Disk Image Using FTK Imager
• Enabling vTPM and Encrypting a Disk with BitLocker
• Course Summary

CompTIA SecurityX (CAS-005): Zero Trust Design

Course: 1 Hour, 7 Minutes

• Course Overview
• Continuous Authorization
• Context-Based Reauthentication
• Network Architecture and Security
• API Integration and Validation
• Asset Identification, Management, and Attestation
• Security Boundaries
• AWS IAM Permission Boundaries
• Deperimeterization
• Data Access Controls
• Testing Web App Security
• Course Summary

CompTIA SecurityX (CAS-005): Vulnerabilities, Attacks, & Mitigation

Course: 31 Minutes

• Course Overview
• Common Security Attacks
• Common Security Vulnerabilities
• Software Security Mitigation
• Threat Mitigation
• Exploring XSS Injection Attacks
• Course Summary

CompTIA SecurityX (CAS-005): Cryptography Concepts

Course: 58 Minutes

• Course Overview
• Advanced Cryptography
• Encrypting AWS KMS Envelopes
• Post-Quantum Cryptography
• Cryptography Performance vs. Security
• Secure Multiparty Computation
• Authenticated Encryption with Associated Data
• Mutual Authentication
• Performing REST API Mutual Authentication
• Course Summary

CompTIA SecurityX (CAS-005): Cloud & Containerization Security

Course: 1 Hour, 37 Minutes

• Course Overview
• Cloud Access Security Broker (CASB)
• Shadow IT Detection
• Shared Responsibility Model
• CI/CD Pipeline
• Terraform and Ansible
• Package Monitoring
• Container Orchestration with Kubernetes
• Serverless Workloads Security
• API Security
• Encryption Keys and Software Licenses
• Cloud Data Security
• Monitoring Resources Using AWS CloudWatch
• Using Terraform for Cloud Security
• Course Summary

CompTIA SecurityX (CAS-005): Threat Intelligence & Hunting

Course: 1 Hour, 10 Minutes

• Course Overview
• Internal Intelligence Sources
• External Intelligence Sources
• Counterintelligence and Operational Security
• Threat Intelligence Platforms (TIPs)6
• Structured Threat Information eXpression (STIX)
• Trusted Automated eXchange of Indicator Information (TAXII)
• Rule-Based Languages
• Creating YARA Security Rules
• Indicators of Attack
• Installing the Snort IDS
• Testing the Snort IDS
• Course Summary

CompTIA SecurityX: Enterprise Security Automation

Course: 1 Hour, 47 Minutes

• Course Overview
• Workflow Automation
• Automation Scripting Languages
• Using PowerShell Scripts
• Automation Scheduling
• Scheduling Cron Jobs
• Automation Triggers
• Infrastructure as Code (IaC) Automation
• Automation Configuration Languages
• Webhook Automation
• Generative AI Automation
• Containerization Automation
• Automated Patching
• Auto-Containment
• Security Orchestration, Automation, & Response (SOAR)
• Automated Scanning & Reporting
• Security Content Automation Protocol (SCAP)
• Course Summary

MeasureUp Exam simulation

• 220+ questions

Online Mentor

De online mentor kan al je specifieke technische vragen beantwoorden via chat of e-mail met betrekking tot je studie.
Online Mentor is 90 dagen of 365 dagen actief - na activering!

Tips, Tricks & Links

Maak gebruik van onze uitgebreide verzameling tips, trucs en links die speciaal zijn ontworpen ter ondersteuning van je voorbereiding op certificeringsexamens. Deze bronnen bieden waardevolle inzichten en bewezen strategieën om je studie effectiever te maken. Verbeter je leerervaring en benader je examens met vertrouwen!

Specificaties

Taal: Engels
Kwalificaties van de Instructeur: Gecertificeerd
Cursusformaat en Lengte: Lesvideo's met ondertiteling, interactieve elementen en opdrachten en testen
MeasureUp Examensimulatie: Ingebrepen
Online Virtuele labs: Ontvang 12 maanden toegang tot virtuele labs die overeenkomen met de traditionele cursusconfiguratie. Actief voor 365 dagen na activering, beschikbaarheid varieert per Training.
Tips & Tricks: Inbegrepen
Examen Quiz: Inbegrepen
Volledige training voor het officiële Examen: Ja
Lesduur: 23 uur
Voortgangsbewaking: Ja
Toegang tot Materiaal: 365 dagen
Technische Vereisten: Computer of mobiel apparaat, Stabiele internetverbindingen Webbrowserzoals Chrome, Firefox, Safari of Edge.
Support of Ondersteuning: Helpdesk en online kennisbank 24/7
Certificering: Certificaat van deelname in PDF formaat
Prijs en Kosten: Cursusprijs zonder extra kosten
Annuleringsbeleid en Geld-Terug-Garantie: Wij beoordelen dit per situatie
Award Winning E-learning: Ja

Tip! Zorg voor een rustige leeromgeving, tijd en motivatie, audioapparatuur zoals een koptelefoon of luidsprekers voor audio, accountinformatie zoals inloggegevens voor toegang tot het e-learning platform.