thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

CompTIA · Cybersecurity · Expert

CompTIA SecurityX (formerly CASP+) exam guide

Exam CAS-005

CompTIA SecurityX (CAS-005), formerly CASP+, is CompTIA's expert-level security certification in the Xpert series. It validates that senior practitioners can architect, engineer and operate secure enterprise environments and integrate governance, risk and compliance. It remains one of the few hands-on expert credentials approved for senior DoD 8140 roles.

QuestionsUp to 90
Time limit165 minutes
Passing scorePass/fail only (no scaled score)
Exam fee$544 USD
Valid for3 years
DeliveryPearson VUE test center or online proctored (OnVUE)

Format: Multiple choice and performance-based. Fee note: 2026 US retail price; about $709 with retake.

Who it's for

Senior security engineers and architects with about 10 years of IT experience, 5 of them in hands-on security, who want to stay technical rather than move into management.

What the exam covers

Governance, Risk, and Compliance20%
Security Architecture27%
Security Engineering31%
Security Operations22%

Eligibility & prerequisites

Required: None

Recommended: A minimum of 10 years of general hands-on IT experience, including 5 years of hands-on security; Network+, Security+, CySA+, Cloud+ and PenTest+ or equivalent knowledge.

Keeping it active

Valid 3 years. Renew through CompTIA Continuing Education: earn 75 CEUs in the 3-year cycle and pay the $150 CE fee, or pass a newer version or a higher-level CompTIA exam that renews it automatically, or complete the matching CertMaster CE course.

Skills & careers

Skills it validates

  • Designing secure enterprise, hybrid and cloud architectures
  • Engineering identity, endpoint, network and cryptographic controls
  • Integrating zero trust and secure software practices
  • Threat hunting, detection engineering and incident response
  • Applying GRC frameworks, risk analysis and compliance requirements
  • Automating security with scripting and orchestration

Job roles

Security ArchitectSenior Security EngineerCybersecurity EngineerSecurity Operations LeadTechnical Lead AnalystApplication Security Engineer

DoD 8140

Recognized in the DoD 8140 qualification matrix for advanced cybersecurity roles (formerly 8570 IAT III, IAM II, IASAE I/II). Open the DoD Workforce Navigator

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Review CAS-005 objectives against your experience; identify weak domains.
  2. Week 2-3: Security engineering (31%): endpoint and server hardening, PKI and cryptography, IAM federation, secure automation.
  3. Week 4-5: Security architecture (27%): zero trust, cloud and hybrid design, segmentation, resilience, secure SDLC.
  4. Week 6: Security operations and GRC: threat hunting, detection, IR, risk frameworks, regulations and third-party risk.
  5. Week 7-8: Performance-based practice and full-length timed exams; review every PBQ type.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Engineering is the largest domain at 31%; expect detailed configuration and crypto scenarios.
  • There is no scaled score; you only get pass or fail, so aim for consistency across all four domains.
  • Performance-based items often include logs, configs or diagrams; read all exhibits before answering.
  • Choose answers that balance security with business requirements, as an architect would.
  • Expect topics on AI, cloud-native security and automation added in the CAS-005 refresh.

Key terms for this exam

All 378 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

Is SecurityX the same as CASP+?

Yes. CompTIA renamed CASP+ to SecurityX with the CAS-005 version. Existing CASP+ holders were converted to SecurityX.

How much does SecurityX cost?

$544 USD at CompTIA's 2026 US retail price, or about $709 with a retake.

SecurityX vs CISSP?

CISSP is broader and management-focused with an experience requirement. SecurityX is hands-on, technical and has no formal prerequisites.

What is the passing score for SecurityX?

There is no scaled score. The exam is reported only as pass or fail.

How do I renew SecurityX?

Earn 75 CEUs over 3 years and pay the $150 CE fee. Renewing SecurityX also renews lower-level CompTIA certifications.

Official page: www.comptia.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.