What the course covers
About this course map
Four domains, mapped one-for-one to the CompTIA SecurityX CAS-005 exam objectives and taught in the same order, so nothing on the exam is left uncovered.
This course targets SecurityX CAS-005. That is the current exam for this certification: CompTIA rebranded the CASP+ line to SecurityX and released CAS-005 on 17 December 2024, and it replaced the CASP+ CAS-004 exam. CAS-004 is no longer the version CompTIA lists for this certification, so a candidate starting now should plan for CAS-005. Nothing is lost if you already hold the old credential — existing CASP+ certifications carry over under the SecurityX name and run for their normal three years from the exam date.
CAS-005 is a narrower and deeper exam than CAS-004 was. The weightings moved substantially: security engineering and governance grew, security operations shrank as a proportion, and CompTIA cut the objective count to concentrate the paper. Post-quantum cryptography, automation and infrastructure as code, zero trust and generative AI now sit inside the objectives. Each domain below carries its published weighting, and we give it classroom time in proportion.
Domain 01 — Governance, Risk, and Compliance
The frame every architecture and engineering decision is judged inside. 20% of the exam.
Domain 02 — Security Architecture
Designing an estate that holds its shape when the perimeter stops being a useful idea. 27% of the exam.
Domain 03 — Security Engineering
The largest domain: making the architecture real, and making it maintainable. 31% of the exam.
Domain 04 — Security Operations
Running the estate, and finding the things that get past everything you built. 22% of the exam.
Who should take this
Security architects, security engineers, senior security operations staff, and technical leads who design and approve controls rather than only operate them. It suits people who have depth in two or three areas and now have to defend decisions across all of them, and those moving from a manager-level credential back towards hands-on technical authority.
CompTIA recommends a minimum of ten years of general hands-on IT experience including at least five years of hands-on security, along with Network+, Security+, CySA+, Cloud+ and PenTest+ or equivalent knowledge. These are recommendations, not requirements — CompTIA does not gate the exam on them. They are a fair description of the depth the questions assume, though, and we will tell you honestly if we think you should build more ground first.
This is a practitioner-level exam, not a management one. You should still be technical.
The exam
SecurityX is set and awarded by CompTIA, and forms part of its Xpert series.
CompTIA does not publish how much of the paper is performance-based, so plan to meet those questions anywhere in it. The exam voucher is purchased separately from CompTIA; we arrange it on your behalf and send you the code, and you book your own exam date. The certification runs for three years from the date you pass.
How we deliver it
Five days, classroom or online live, or at your office for a private group. The format is design-led: short teaching blocks, then architecture and engineering problems the group has to solve and then defend, because that is the shape the performance-based questions take. Domain checkpoints each day, and a full-length mock under exam conditions on the final afternoon.
Mapped to the CompTIA SecurityX CAS-005 exam objectives. Taught from Hacky Security's own curriculum and lab estate by instructors who design and run security architecture for a living.
Exam & certification
- 1Train with us40 hours of instructor-led preparation, labs and practice questions.
- 2Sit the official examExam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date.
- 3Get certifiedThe certification is awarded by CompTIA when you pass their exam.
What you receive
- CompTIA certification — issued by CompTIA after you pass, and verifiable with them.
- Hacky Security certificate of completion — for the training itself, with a unique ID.
- Checkable by employers — anyone can confirm our certificate on the Verify page.
This course is Hacky Security’s own preparation training. The certification itself is awarded by CompTIA, not by us.
Similar courses
Hacky Security is a CompTIA Authorized Partner. This course is delivered from Hacky Security's own curriculum; the certification itself is awarded by CompTIA. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.
