CompTIA Advanced Security Practitioner (CASP) CAS-003
$249.00
An advanced CompTIA CASP+ CAS-003 course for experienced security professionals. Covers risk, enterprise security architecture, security operations and integration over 19 hours across 136 videos.
- Login details sent straight after payment
- Self-paced. Study on any device
- StemBoss Certificate of Completion
- 14-day refund promise
Secure checkout. Pay by card, Apple Pay or Google Pay.
CompTIA Advanced Security Practitioner (CASP+) CAS-003 is an advanced course for experienced security professionals preparing for CompTIA’s CAS-003 exam. It covers risk management, enterprise security architecture, security operations, technical integration, and research and collaboration. The course runs for 19 hours across 136 videos, with 57 practice questions.
What you will learn
- Assess and manage risk, including during mergers and acquisitions
- Use security metrics and trend analysis to judge solutions
- Secure network devices, VLANs, security zones and network access control
- Defend against denial of service attacks and protect ICS and SCADA systems
- Find and fix software flaws such as SQL injection, buffer overflows and memory leaks
- Run vulnerability assessments, OSINT gathering, network sniffing and password tests
- Use SCAP scanners, log analysis and incident response tools
- Integrate cloud, virtualisation, storage and directory services securely
- Apply advanced authentication and cryptography, including mobile device encryption
- Research industry trends and use threat intelligence
Course outline
- Risk Management: cloud services, mergers, governance, security metrics and trend analysis
- Enterprise Security Architecture: network and host security, VLANs, NAC, patching and software vulnerabilities
- Enterprise Security Operations: code review, OSINT, vulnerability scanning, SCAP, log analysis and incident response
- Technical Integration of Enterprise Security: storage, directory services, cloud, virtualisation, authentication and cryptography
- Research, Development and Collaboration: industry trends, threat intelligence, security testing and teamwork
Who this course is for
- Senior security engineers and security architects
- Security consultants
- SOC leads and security managers
- Penetration testers who want an enterprise view of security
- Security analysts who already hold CySA+ and want to move up
Before you start
This is an advanced course. CompTIA suggests around ten years of IT administration experience, including at least five years of hands-on security work. A background in Security+, CySA+ and PenTest+ topics will help.
Many lessons are hands-on activities, so set up a safe lab with virtual machines to follow along. Use the 57 practice questions to check your progress across the five domains.
About the CAS-003 exam
CAS-003 is the CompTIA Advanced Security Practitioner (CASP+) exam this course follows. It checks that an experienced practitioner can design, build and run secure solutions across complex enterprise networks, rather than just manage them. It sits at the top of CompTIA’s security pathway, above Security+, CySA+ and PenTest+, and suits people who stay hands-on rather than move into pure management. CompTIA issues the certification and it is vendor-neutral.
CompTIA has since replaced CAS-003 with newer versions, and the certification is now called CompTIA SecurityX. See our CAS-005 SecurityX course for the current objectives, and check comptia.org before you book.
The core skills in risk, architecture, operations and integration carry across versions, so this course is still useful background.
Jobs this course supports
- Security architect
- Security engineer
- Security consultant
- Cloud security engineer
- Network security engineer
- Penetration tester
- Security manager
| Skill level | Advanced |
|---|---|
| Duration | 19 Hours |
| Videos | 136 Course Videos |
| Questions | 57 Test Questions |
| Certification | CompTIA Advanced Security Practitioner (CASP+) |
| Exam code | CAS-003 |
| Certification body | CompTIA |
| Prerequisites | Around ten years in IT, with five years of hands-on security work. |
| Best for | Security architects, security engineers, security consultants, SOC leads |
| Topics covered | Risk management, Enterprise security architecture, Vulnerability assessment, Incident response, Cloud and virtualisation security, Cryptography, Threat intelligence |
| Format | Online video lessons, self-paced |
| Language | English |
| Closed captions | Yes |
| Certificate | StemBoss Certificate of Completion |
What is inside this course
5 modules and 89 lessons. Here is the full outline.
Module 1 - Risk Management12 lessons
- Intro CASP
- CASP Introduction
- Mod 1.1 Exploring Cloud Services Act
- Mod 1.1 Acquisition Merger Demerger
- Mod 1.1 Acquisition Merger Demerger Part2
- Mod 1.2 Compare and Contrast
- Mod 1.3 Given Scenario Execute Risk
- Mod 1.3 Given Scenario Execute Risk Part2
- Mod 1.3 Continuing Terminology IT Governance
- Mod 1.4 Analyze Security Solution Metrics and Attributes
- Mod 1.4 Analyze Risk
- Mod 1.4 Trend Analysis Act
Module 2 - Enterprise Security Architecture28 lessons
- Mod 2 Enterprise Security Architecture
- Mod 2.1 Network Device Security Act
- Mod 2.1 Application and Protocol
- Mod 2.1 Advanced Network Security Act
- Mod 2.1 Complex Network Security Solution
- Mod 2.1 Implementing VLANs Switchport Sec Act
- Mod 2.1 Implementing VLANs Switchport Sec Act Part2
- Mod 2.1 Distributed Denial of Service
- Mod 2.1 Exploring DoS Attacks Act
- Mod 2.1 Security Zones
- Mod 2.1 Network Access Control
- Mod 2.1 Searching for Vulnerablie ICS-SCADA Act
- Mod 2.2 Analyze a Scenario Integrate Security
- Mod 2.2 Configuring Windows Firewall Act
- Mod 2.2 Log Monitoring and Auditing
- Mod 2.2 Group Policy Act
- Mod 2.2 Patch Management
- Mod 2.2 Management Interface
- Mod 2.2 Measured Launch
- Mod 2.3 Analyze a Scenario to Integrate Security Controls
- Mod 2.3 Security Implications Privacy
- Mod 2.3 Baseband
- Mod 2.4 Given Software Vulnerabilty Scenarios
- Mod 2.4 SQL Injection Act
- Mod 2.4 Improper Error and Exception Handling
- Mod 2.4 Buffer Overflows Act
- Mod 2.4 Memory Leaks
- Mod 2.4 Researching Vulnerabilities Exploits Act
Module 3 - Enterprise Security Operations24 lessons
- Mod 3 Enterprise Security Operations
- Mod 3 Runtime Debugging
- Mod 3.1 Fingerprinting an OS Services Act
- Mod 3.1 Code Review
- Mod 3.1 Conducting OSINT Act
- Mod 3.1 Types
- Mod 3.1 Conducting a Vulnerability Assessment Act
- Mod 3.2 Analyze a Scenario Output
- Mod 3.2 Network Sniffing Act
- Mod 3.2 Security Content Automation
- Mod 3.2 Using a SCAP Scanner Act
- Mod 3.2 Network Enumerator
- Mod 3.2 Password Cracking Act
- Mod 3.2 Host Vulnerability Scanner
- Mod 3.2 Using Command Line Tools Act
- Mod 3.2 OpenSSL
- Mod 3.2 Scanning for Heartbleed Act
- Mod 3.2 Local Exploitation Tools
- Mod 3.2 Verifying File Integrity with SFC Act
- Mod 3.2 Log Analysis Tools
- Mod 3.3 Given Scenario Implement Incident
- Mod 3.3 Facilitate Incident Detection Response
- Mod 3.3 Using Incident Response Support Tools Act
- Mod 3.3 Severity of Incident Detection Breach
Module 4 - Technical Integration of Enterprise Security19 lessons
- Mod 4 Technical Integration of Enterprise
- Mod 4 Technical Integration of Enterprise Part2
- Mod 4.1 DataSecurity Considerations
- Mod 4.1 Examing Network Diagrams Act
- Mod 4.1 Security and Privacy Considerations of Storage integration
- Mod 4.1 Exploring Directory Services and DNS Act
- Mod 4.2 Given Scenario Integrate Cloud and Virtualization
- Mod 4.2 Taking Another Look at Cloud Services Act
- Mod 4.2 Security Advantages and Disadvanatges of Virtualization
- Mod 4.2 Using Virtualization Act
- Mod 4.2 Cloud Augmented Security
- Mod 4.3 Given Scenario Integrate and Troubleshoot Advanced Authentication
- Mod 4.4 Given Scenario Cryptographic
- Mod 4.4 Cryptographic Part2
- Mod 4.4 Mobile Device Encryption
- Mod 4.4 Cryptography Act
- Mod 4.5 Select the Appropriate Control
- Mod 4.5 Phising Act
- Mod 4.5 Telephony VoIP Integration
Module 5 - Research, Development and Collaboration6 lessons
- Mod 5 Research Methods to Determine Industry Trends
- Mod 5.1 Practicing Threat Intelligence Act
- Mod 5.2 Scenario Implememt Security Activities Across
- Mod 5.2 Static Testing
- Mod 5.3 Explain the Importance of Interaction
- CASP Conclusion
Your learning path
Where CompTIA Advanced Security Practitioner (CASP) CAS-003 fits. Build your skills one step at a time.
Frequently asked questions
Who should take the CompTIA CASP+ CAS-003 course?
It suits experienced security professionals, such as security engineers, architects and consultants, who work across large enterprise networks.
Is CAS-003 still the current CASP+ exam?
No. CompTIA has released newer versions and renamed the certification CompTIA SecurityX. Our CAS-005 course covers the current objectives.
What are the five CAS-003 domains?
Risk management, enterprise security architecture, enterprise security operations, technical integration of enterprise security, and research, development and collaboration.
Does the course include practical activities?
Yes. Many lessons are activities, such as configuring a firewall, scanning for Heartbleed, cracking passwords and using a SCAP scanner.
What should I study before CASP+?
Security+, CySA+ and PenTest+ give the best base for this advanced material.
Do I get a certificate?
Yes. You get a StemBoss Certificate of Completion when you finish the course.
Can I get a refund?
Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.
