CompTIA SecurityX (CASP+) · CAS-005
SecurityX (CASP+) Flashcards
Master advanced security architecture and enterprise concepts. Flip through 10 real cards from our 320+ card SecurityX deck.
10 SecurityX terms to know
- ABAC
- Authorization model granting access based on attributes (user, resource, action, environment) evaluated by policy. More flexible than RBAC. Common in cloud IAM (AWS IAM, Azure).
- CASB
- Policy-enforcement layer between users and cloud services adding visibility, DLP, threat protection, and compliance controls. Deployed inline (proxy) or via API integration.
- CSPM
- Tools that continuously assess cloud configurations against best practices and compliance frameworks. Detect misconfigurations (public S3 buckets, overly permissive IAM) before exploitation.
- SASE
- Convergence of network (SD-WAN) and security (SWG, CASB, ZTNA, FWaaS) into a cloud-delivered service. Replaces traditional perimeter for distributed workforces.
- ECC
- Public-key cryptography offering equivalent security to RSA at smaller key sizes (256-bit ECC ≈ 3072-bit RSA). Faster, less battery use, ideal for mobile/IoT. Used in TLS, SSH, signing.
- HSM
- Tamper-resistant hardware safeguarding cryptographic keys and performing crypto operations. Used for CA root keys, code signing, and payment processing. FIPS 140-2/3 validated levels indicate assurance.
- SBoM
- Inventory of components (libraries, dependencies) in software. Promoted by US Executive Order 14028 for software sold to the federal government. Formats: CycloneDX, SPDX. Critical for vulnerability response (e.g., Log4Shell).
- UBA
- Detection technique baselining normal user activity and alerting on deviations (logins from new geos, mass downloads). Often subsumed by UEBA in modern platforms.
- SOA
- Architectural style organizing software as discoverable services. Predecessor to microservices. Security focus: service-to-service auth, message-level security (WS-Security), governance.
- IDE
- Software for writing, testing, and debugging code (VS Code, IntelliJ). Security plugins integrate SAST, secret scanning, and dependency analysis directly into the developer workflow.
What's in the SecurityX deck
SecurityX (formerly CASP+) is CompTIA's advanced-level certification targeting security architects and senior practitioners. CAS-005 tests deep knowledge of enterprise security architecture, advanced cryptography, and governance frameworks. Our flashcards target the complex terminology and concepts that make this exam challenging.
Key Concepts & Architecture
Zero trust, SASE, micro-segmentation, security architecture patterns
Advanced Cryptography
PKI, HSMs, quantum-resistant algorithms, key management, and crypto protocols
Security Operations
Threat hunting, advanced IR, forensics, deception technologies
Governance, Risk & Compliance
Risk frameworks, business continuity, regulatory compliance, and enterprise GRC
Advanced Architecture Concepts
SecurityX tests enterprise-level thinking. Cards cover zero trust architecture, SASE, cloud security models, and integration patterns at scale.
Deep Cryptography
Crypto is heavily tested on CAS-005. Cards cover algorithm selection, key management, PKI design, and emerging quantum-resistant approaches.
Enterprise GRC
Senior-level governance concepts: risk quantification methods (FAIR), business impact analysis, regulatory frameworks (NIST CSF, ISO/IEC 27000, PCI DSS), and board-level communication.
Scenario Complexity
SecurityX scenarios involve trade-offs and design decisions. Cards build the vocabulary to reason through complex security architecture problems.
Frequently asked questions
- What experience do I need before SecurityX?
- CompTIA recommends at least 10 years of hands-on IT experience, including 5 years of hands-on security, plus Network+, Security+, CySA+, Cloud+, and PenTest+ or equivalent knowledge. SecurityX is expert-level, so flashcards supplement, not replace, real-world experience.
- Is SecurityX the same as CASP+?
- Yes, CompTIA rebranded CASP+ to SecurityX with the CAS-005 exam. CASP+ and SecurityX are the same certification. Both names are widely recognized, and our flashcards cover the CAS-005 objectives.
- Does SecurityX have a passing score?
- SecurityX is pass/fail only. CompTIA does not publish a scaled passing score for this exam, unlike Security+ (750/900). Focus on mastering the content, not hitting a number.
- How is SecurityX different from CISSP?
- SecurityX is performance-based and practical: it tests what you can DO. CISSP tests broader management-level knowledge. Many candidates pursue both. SecurityX is often seen as more technical.
Practice SecurityX PBQs
Performance-based questions (PBQs) are the hands-on simulations on the real exam. Practice them in our PBQ labs.
More SecurityX resources
Memorize SecurityX faster
Study the full 320+ card deck with spaced repetition, plus practice questions and mock exams.
Get started