CompTIA® Advanced Security Practitioner (CASP) (Exam CAS-002)
CompTIA Training Overview
You have experience in the increasingly crucial field of information security, and now you're ready to take that experience to the next level. CompTIA® Advanced Security Practitioner (CASP) (Exam CAS-002) is the course you will need to take if your job responsibilities include securing complex enterprise environments. In this course, you will expand on your knowledge of information security to apply more advanced principles that will keep your organization safe from the many ways it can be threatened. Today's IT climate demands individuals with demonstrable skills, and the information and activities in this course can help you develop the skill set you need to confidently perform your duties as an advanced security professional.
This course can also benefit you if you intend to pass the CompTIA Advanced Security Practitioner (CAS-002) certification examination. What you learn and practice in this course can be a significant part of your preparation.
Windows Server 2012 R2 requires activation unless you have volume-licensing agreements. There is a grace period for activation. If the duration
of your class will exceed the activation grace period (for example, if you are teaching the class over the course of an academic semester), you
should activate the installations at some point before the grace period expires. Otherwise, the operating system may stop working before the
class ends.
The steps to download the Kali Linux system image are described in the course setup that follows. Note that the URL path to this download may
have changed after this course was written.
Due to licensing restrictions, Microsoft Baseline Security Analyzer (MBSA) and Bitvise SSH Server are not distributed with the course
data files. The steps to download these tools are described in the course setup that follows. Note that the URL path to these downloads
may have changed after this course was written. PuTTY is distributed with the course data files under the MIT License. VirtualBox is
distributed with the course data files under version 2 of the GNU General Public License (GPL). Autopsy is distributed with the course
data files under Apache License 2.0.
In order for VirtualBox virtualization to work, your processor's Intel virtualization (VT-x) or AMD virtualization (AMD-V) must be enabled. You can check if virtualization is enabled by entering your computer's BIOS. You can typically find this
feature in the advanced settings of the BIOS under Intel/AMD virtualization or VT-x/AMD-V.
The activities in this course were written to the versions of the software noted previously. If new versions of MBSA, Bitvise SSH
Server, Adobe Reader, or Kali Linux have been released when you present this course, make sure to test them with their corresponding
activities to note any keying discrepancies.
Topic A:
Identify the Importance of Risk Management
Topic B:
Assess Risk
Topic C:
Mitigate Risk
Topic D:
Integrate Documentation into Risk Management
Topic A:
Facilitate Collaboration Across Business Units
Topic B:
Secure Communications and Collaboration Solutions
Topic C:
Implement Security Activities Throughout the Technology Life Cycle
Topic A:
Determine Industry Trends and Effects on the Enterprise
Topic B:
Analyze Scenarios to Secure the Enterprise
Topic A:
Implement Authentication and Authorization Technologies
Topic B:
Implement Advanced Identity Management
Topic A:
Describe Cryptographic Concepts
Topic B:
Choose Cryptographic Techniques
Topic C:
Choose Cryptographic Implementations
Topic A:
Select Host Hardware and Software
Topic B:
Harden Hosts
Topic C:
Virtualize Servers and Desktops
Topic D:
Implement Cloud Augmented Security Services
Topic E:
Protect Boot Loaders
Topic A:
Identify Storage Types and Protocols
Topic B:
Implement Secure Storage Controls
Topic A:
Analyze Network Security Components and Devices
Topic B:
Analyze Network-Enabled Devices
Topic C:
Analyze Advanced Network Design
Topic D:
Configure Controls for Network Security
Topic A:
Identify General Application Vulnerabilities
Topic B:
Identify Web Application Vulnerabilities
Topic C:
Implement Application Security Controls
Topic A:
Implement Security Standards in the Enterprise
Topic B:
Select Technical Deployment Models
Topic C:
Secure the Design of the Enterprise Infrastructure
Topic D:
Secure Enterprise Application Integration Enablers
Topic A:
Select Vulnerability Assessment Methods
Topic B:
Select Vulnerability Assessment Tools
Topic A:
Design Systems to Facilitate Incident Response
Topic B:
Conduct Incident and Emergency Responses
To be fit for this advanced course, you should have at least a foundational knowledge of information security. You can obtain this level of knowledge by taking the CompTIA® Security+ (SY0-401) course offered by us. You may also demonstrate this level of knowledge by passing the Security+ (SY0-401) exam.
Although not required, we suggest that you either take the following courses or possess the equivalent knowledge in the areas of computer networking and computer maintenance:
CompTIA Training Audience
This course is designed for IT professionals who want to acquire the technical knowledge and skills needed to conceptualize, engineer, integrate, and implement secure solutions across complex enterprise environments. The target student should aspire to apply critical thinking and judgment across a broad spectrum of security disciplines to propose and implement sustainable security solutions that map to organizational strategies; translate business needs into security requirements; analyze risk impact; and respond to security incidents.
This course is also designed for students who are seeking the CompTIA Advanced Security Practitioner (CASP) certification and who want to prepare for Exam CAS-002. Students seeking CASP certification should have at least 10 years of experience in IT management, with at least 5 years of hands-on technical security experience.
CompTIA Training Course duration
5 days
Course-specific Technical Requirements
Hardware
For this course, you will need one Windows Server® 2012 R2 computer for each student and for the instructor. Make sure that each computer meets the
minimum hardware specifications, as well as the classroom hardware specifications:
Software
CompTIA Training Course Objectives
In this course, you will analyze and apply advanced security concepts, principles, and implementations that contribute to enterprise-level security. You will:
CompTIA Training Course outline
Lesson 1:
Managing Risk
