CASP+ (CompTIA Advanced Security Practitioner)

Chapter 1: Governance and compliance

• Module A: Security governance
• Module B: Regulatory compliance
• Module C: Standards and frameworks

Chapter 2: Security policies

• Module A: Policy design
• Module B: Controls and procedures
• Module C: Training and coordination

Chapter 3: Risk management

• Module A: Risk assessment
• Module B: Risk management strategies

Chapter 4: Enterprise resilience

• Module A: BCDR planning
• Module B: Resilient architecture

Chapter 5: Threat management

• Module A: Threats and vulnerabilities
• Module B: Threat intelligence sources
• Module C: Applied intelligence

Chapter 6: Cryptographic techniques

• Module A: Cryptographic principles
• Module B: Ciphers and hashes

Chapter 7: Applied cryptography

• Module A: Public key infrastructure
• Module B: Cryptographic protocols

Chapter 8: Authentication and authorization

• Module A: Access control components
• Module B: Authentication technologies

Chapter 9: Network security architecture

• Module A: Network vulnerabilities
• Module B: Network security infrastructure
  Module C: Secure network configuration

Chapter 10: Protecting hosts and data

• Module A: Host security
• Module B: Data security

Chapter 11: Threat detection and response

• Module A: Threat detection systems
• Module B: Network sensors
• Module C: Data analysis

Chapter 12: Specialized system security

• Module A: Mobile device security
• Module B: Operational technologies

Chapter 13: Virtual and cloud infrastructure

• Module A: Virtual and cloud systems
• Module B: Secure cloud infrastructure

Chapter 14: Secure applications

• Module A: Software assurance
• Module B: Application vulnerabilities

Chapter 15: Security assessment and testing

• Module A: Security testing programs
• Module B: Vulnerability assessments
• Module C: Vulnerability and patch management

Chapter 16: Incident response

• Module A: Incident response planning
• Module B: Incident response procedures
• Module C: Digital forensics

CASP+ Certification Exam Details:

• Exam: CAS-004
• Up to 90 Questions
• Types of Questions: Multiple choice and performance-based
• Passing Score: No Scaled Score, Pass or Fail Only
• Test Duration: 165 minutes 
• Test Delivery: Pearson VUE

The CASP+ exam certifies that the successful candidate has the technical skills and knowledge required to design, conceptualize, and engineer secure solutions across advanced enterprise environments. The individual will apply critical judgment and thinking across a wide spectrum of security disciplines to implement and propose solutions that map to enterprise drivers.

Below lists the domain areas measured by the exam and the approximate extent to which they are represented in the exam: