CompTIA Advanced Security Practitioner CASP+ Certification Course – Virtual Classroom

Syllabus and Exams

The CompTIA Advanced Security Practitioner (CASP+) course offers a comprehensive overview of the most critical aspects of advanced cybersecurity. It equips learners with the know-how to implement solutions and oversee enterprise security operations effectively.

The course delves deep into cloud and virtualization technologies, preparing you to safeguard and operate resilient enterprises that are increasingly migrating to the cloud.

A strong focus is also placed on enterprise mobility and endpoint security controls, equipping you with the knowledge to ensure enterprise-wide security as businesses become more mobile and distributed.

Through the course, you will gain insights into security engineering and managing security in complex environments, enabling you to design and maintain robust, secure systems.

Our CASP+ course also prioritises risk mitigation strategies, ensuring that you are well-versed in identifying potential threats and implementing proactive measures to prevent security breaches.

The course covers governance, risk, and compliance, providing you with a broad understanding of the regulations, standards, and best practices that govern the cybersecurity landscape.

Module 1: Enterprise Security

Identifying security concerns in scenarios

• Exploring cryptographic techniques

• Advanced PKI concepts

Distinguishing between cryptographic concepts

• Entropy

• Confusion and diffusion

• Chain of trust

Securing enterprise storage

• Examining storage types and protocols

• Secure storage management

Analysing network security architectures

• Designing secure networks

• Employing virtual networking solutions

Troubleshooting security controls for hosts

• Host security: trusted OS (Operating System), endpoint, host hardening

• Vulnerabilities in co-mingling of hosts

Differentiating application vulnerabilities

• Web application security

• Application security concerns

• Mitigating client-side vs. server-side processing

Module 2: Risk Management and Incident Response

Interpreting business and industry influences and risks

• Analysing risk scenarios

• Identifying the impact of de-perimeterisation

Executing risk mitigation planning, strategies, and control

• Assessing the CIA aggregate scores

• Making risk determination

Privacy policies and procedures

• Developing policies to support business objectives

• Safeguarding Personally Identifiable Information (PII)

Conduct incident response and recovery procedures

• Constructing a data inventory with e-discovery

• Minimising the severity of data breaches

Module 3: Research, Analysis, and Assessment

Determining industry trends impact to the enterprise

• Performing ongoing research to support best practices

• Researching security requirements for contracts

Appropriate security document usage

• Request for Information (RFI)

• Request for Quote (RFQ)

• Request for Proposal (RFP)

Evaluating scenarios to determine how to secure the enterprise

• Conducting cost-benefit and security solution analysis

• Reviewing the effectiveness of existing security controls

Conducting an assessment and analysing the results

• Determining appropriate tools for data gathering

• Identifying methods to perform assessments

Module 4: Integrating Computing, Communications, and Business Disciplines

Collaborating across diverse business units to achieve security goals

• Communicating with stakeholders

• Interpreting security requirements and providing guidance

• Identifying secure communications goals

Selecting controls for secure communications

• Utilising unified collaboration tools

• Mobile devices

• Applying over-the-air technologies

Implementing security across the technology life cycle

• Selecting security controls

• Developing Security Requirements Traceability Matrices

Module 5: Technical Integration of Enterprise Components

Integrate devices into a secure enterprise architecture

• Securing data following existing security standards

• Applying technical deployment models

• Integrating storage and applications into the enterprise

Integrating advanced authentication and authorisation technologies

• Implementing certificate-based and SSO authentication

• Applying federation solutions

Exams

The CompTIA CASP+ CAS-004 Exam:

1. Exam Code: The exam code for the CompTIA Advanced Security Practitioner (CASP+) Certification is CAS-004.

2. Exam Domains: The CASP+ CAS-004 exam covers five domains: Enterprise Security; Risk Management, Policy/Procedure and Legal; Research and Analysis; Integration of Computing, Communications and Business Disciplines; and Technical Integration of Enterprise Components.

3. Number of Questions: The CAS-004 exam comprises a maximum of 90 questions.

4. Exam Format: It includes multiple-choice and performance-based questions.

5. Passing Score: The passing score for the CAS-004 exam is 700 (on a scale from 100 to 900).

6. Exam Duration: Test takers have 165 minutes to complete the exam.

7. Exam Purpose: The CAS-004 exam validates the technical knowledge and skills required to conceptualise, design, and implement secure solutions across complex enterprise environments.

Please note that CompTIA certification exams, policies and procedures are subject to change, so please check the official CompTIA website for the most current information before your exam.