CompTIA SecurityX

Exam format

CompTIA logo

CompTIA SecurityX Exam Format

CAS-005

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. CompTIA SecurityX (CAS-005) is CompTIA highest-level cybersecurity certification, formerly known as CASP+. It validates practical technical leadership and hands-on ability to architect, engineer, integrate, and implement secure enterprise environments. The exam emphasizes Zero Trust principles, hybrid and cloud security, threat and vulnerability management, security operations, and program management oversight. Candidates must analyze complex scenarios, make risk-based recommendations, and apply advanced identity, cryptography, and network security controls. The current exam measures skill across five domains. SecurityX is designed for security professionals who want to demonstrate mastery equivalent to a senior security architect or engineer, rather than entry-level knowledge. The exam contains performance-based questions and multiple-choice items, requiring both deep knowledge and practical judgment.

90 questions
165 min
75% to pass
5 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions90
Time limit165 minutes (110s per question)
Passing score75% — Pass/fail only - no numeric score published
Domains5
LevelProfessional
Question bank here90 questions
Published formatMaximum of 90 questions, 165 minutes
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Security Operations28%
  • Incident response lifecycle, detection, containment, and recovery
  • SIEM, threat hunting, and enterprise monitoring
  • Digital forensics and evidence handling
  • +2 more
25
Security Architecture18%
  • Secure network architecture design, segmentation, and micro-segmentation
  • Hybrid and cloud security architecture (IaaS, PaaS, SaaS, CASB)
  • Enterprise identity and access management architecture
  • +2 more
16
General Security Concepts12%
  • Security controls and fundamental concepts (CIA, least privilege, defense in depth)
  • Zero Trust architecture and zero trust reference architectures
  • Authentication, authorization, and identity management in enterprise environments
  • +2 more
11
Threats, Vulnerabilities, and Mitigations22%
  • Threat actors, attack surfaces, and advanced persistent threats
  • Vulnerability identification, scanning, and analysis
  • Malware, social engineering, and web/application attacks
  • +2 more
20
Security Program Management and Oversight20%
  • Risk assessment, risk register, and risk treatment
  • Security policies, standards, procedures, and guidelines
  • Cybersecurity frameworks (NIST CSF, ISO 27001, COBIT)
  • +2 more
18

The heaviest domain is Security Operations at 28%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Voucher is single-use for one attempt at Pearson VUE; a failed attempt needs a new voucher unless Retake Assurance was bought up front. Regional pricing and reseller discounts vary. CompTIA reports pass/fail only, no scaled score. Official exam page

More about the CompTIA SecurityX exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the CompTIA SecurityX exam.