CompTIA CASP+

SecurityX (CASP+) frequently asked questions (FAQ) [2025 update]

CompTIA SecurityX is an advanced-level cybersecurity certification suited for security architects and senior security engineers. The name of the certification was changed from CASP+, and the exam was updated in 2025 to CAS-005. The previous version of the exam, CAS-004, will no longer be an option to take after June 17, 2025.

[Ed. note: You can check out this webinar to learn more about the changes.]

Here, we dig into information on the certification itself, how to prepare, the logistics of the exam and how to maintain your certified status.

Earn your SecurityX (formerly CASP+), guaranteed!

Enroll in a CompTIA SecurityX boot camp and earn one of the industry’s most respected certifications — guaranteed.

Get Pricing

What is CompTIA SecurityX?

CompTIA SecurityX is the most recent iteration of CompTIA’s advanced security certification. It is an advanced cybersecurity certification designed to showcase the abilities and knowledge of security architects and senior security engineers with several years of experience.

What is the CompTIA Xpert series?

The CompTIA Xpert series is a collection of CompTIA’s highest certifications. They’ve been built for experienced IT professionals possessing advanced skills. SecurityX is one of the certifications in the Xpert series. Like SecurityX, each certification is built to validate advanced skillsets and expertise.

Is the CASP+ certification no longer available?

At the time of writing, the CASP+ certification is still available, but it will be phased out completely on June 17, 2025. At this point, you will no longer be able to earn the CASP+ certification. The exam still covers the same basic domains, with only the name of Security Engineering and Cryptography changing to “Security Engineering.” Other than that, the topics are the same. The certification has simply been rebranded to SecurityX.

Is the SecurityX certification changing soon?

There’s no indication the SecurityX certification will be changing anytime soon, especially because the exam structure has already undergone a recent revamp. The CAS-005 exam domains are mostly the same as that of its predecessor, CAS-004, but the percentage of questions for each domain is different.

Governance, Risk and Compliance has gone from 15% to 20% of the exam. Security Architecture used to comprise 29%, but it’s now 27%. Security Engineering and Cryptography has been updated to simply “Security Engineering,” and the percentage has increased from 26% to 31%. Security operations have undergone the biggest percentage change, going from 30% to 22% of the exam.

How hard is the SecurityX certification?

Because the SecurityX is an advanced certification, you can expect to find the exam harder than those of less advanced certifications. It’s designed for experienced cybersecurity professionals, so unless you have significant experience in security architecture, engineering, incident response and other security topics, you may find it relatively difficult.

Is the SecurityX certification worth it?

Yes, the Security X certification is a worthwhile endeavor for professionals looking to take their careers to the next level, particularly to pursue senior-level cybersecurity roles. Many enterprises recognize it as a top-tier cybersecurity certification, so it puts holders a step above others in the job market.

How do I get the SecurityX certification?

To earn your SecurityX certification, you have to:

Have significant experience in the cybersecurity field, including several years of hands-on work with cybersecurity systems.

Review the exam, its objectives and topics using a systematic training program.

Pass the SecurityX exam.

When does registration begin for the CompTIA SecurityX courses?

CompTIA works with authorized partners like Infosec to help train professionals for the SecurityX certification. There are several ways you can train for your SecurityX exam.

Live online or in-person training: Infosec has a 5-day CompTIA SecurityX Boot Camp that provides everything you need to prepare for the exam, including expert instruction, the exam voucher and an Exam Pass Guarantee.

Self-paced boot camp: Not everyone can attend a live training session for a week, so a self-paced SecurityX boot camp is also available to fit around your busy schedule while still providing instructor support.

On-demand training: If you don't need instructor support, there are also on-demand training libraries like Infosec Skills that offer videos, practice exams, hands-on labs and more for a variety of subjects, including CompTIA certifications.

Once you are satisfied that you have prepared adequately for your exam, then sign in to your CompTIA account to schedule your exam. You will be able to find an authorized Pearson VUE test center near you and choose a date that suits you, or you can choose a remote testing option with VUE-certified proctors.

How much does it cost to take the SecurityX exam?

Below is a current pricing table for all global regions:

USA: USD 509

Emerging Market: USDe 285

Great Britain: GBP 303

EURO: EURO 458

Japan: JPY 59,776

Australia: AUD 687

South Africa: ZAR 3,916

To buy the certification exam voucher, visit the CompTIA Store.

Where can I find the locations for the SecurityX exams?

CompTIA certification exam testing is provided by CompTIA’s global testing partner Pearson VUE. When you are confident that you’re ready to take your exam, locate a Pearson VUE-owned and operated test center in your area. Otherwise, you can take your exam online, monitored by a VUE-certified proctor via webcam.

How is the SecurityX exam scored?

Unlike some other tests, the SecurityX is scored on a Pass/Fail system. This means that candidates will not receive a percentage score indicating how they did on the exam. Passing scores are set using statistical analysis and change without notice. After the exam, however, candidates will receive a report that contains details regarding the outcome.

How many questions are in the SecurityX exam?

The SecurityX exam has no more than 90 multiple-choice and performance-based questions (PBQs). The latter is designed to test a candidate’s ability to solve problems in real-world settings and includes delivery through simulations or virtual environments. Simulations approximate an environment or tool; virtual environments include full versions of the technology covered by the question.

A full explanation of PBQs can be found on CompTIA’s website here.

How long is the SecurityX exam?

The total length of the exam is 165 minutes (2 hours and 45 minutes).

When will I receive my exam results?

Results are received immediately after completing the exam on-screen. Also, an email is sent to candidates with the pass or fail result after completing the test. If they’ve passed the exam, they’ll receive a congratulatory email from CompTIA. If they fail the test, they can re-attempt it within 24 hours (CompTIA does not require any waiting period). But, if they fail the exam a second time, they will need to wait for 14 calendar days before attempting the exam for the third time.

What experience is required to take the SecurityX exam?

Although there are no mandatory experience requirements, professionals who wish to take the SecurityX exam should have a minimum of 10 years of general hands-on IT experience, with at least five years of broad hands-on security experience.

Why should I pursue the SecurityX certification?

This certification is compliant with ISO 17024 standards and has been approved by the U.S. DoD to meet DoD Manual 8140 requirements. CompTIA explains that the SecurityX gives individuals the necessary qualifications for higher-level positions, meeting the requirements for jobs in Information Assurance Technical Level III, IS Manager Level II, and IA Systems Architect and Engineer Levels I and II.

The SecurityX certification also aligns with 11 DoD job roles and skills in the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NCWF), also known as the National Institute of Standards and Technology (NIST) SP 800-181, which the DoD uses to define cybersecurity jobs.

SecurityX, then, makes attaining a position within a government department or agency possible but can also show future private sector employers that you have the knowledge and skills to join their organization as a CompTIA Advanced Security Practitioner. Organizations that use SecurityX include Target, Ricoh, General Dynamics and Exxon Mobil.

What is covered under each of the domains of the SecurityX exam?

Here’s a breakdown of the CAS-005 Exam Domains on which candidates will be tested.

Governance, Risk and Compliance (20%)

Security Architecture (27%)

Security Engineering (31%)

Security Operations (22%)

You can find more on the specifics in the CAS-005 Exam Objectives. You will be able to see exactly what topics are covered on the test to achieve SecurityX certification.

What is the CompTIA CE program?

CompTIA has a Continuing Education (CE) program for certification renewal that allows candidates to keep their active status while staying updated with new technologies and emerging trends in their field. To be a valid and current SecurityX credential holder, professionals need to earn 75 CEUs, and at least 50 percent of each chosen activity content must relate to one or more of the exam objectives for the certification they’re renewing. SecurityX credential holders can keep their active status by earning a relevant non-CompTIA IT industry certification, passing the newest release of SecurityX (if certified through an earlier version), or completing a combination of activities. Choose the option that works best for you here.

Note: You will be required to pay the CE fees before submitting your completed activities. The due dates are based on your CE renewal cycle, not the calendar year, and amount to $50 per year, or $150 every three years.

What self-study resources are available for SecurityX candidates?

The CompTIA SecurityX CAS-004 Certification Study Guide is great for individual learners studying at their own pace and who would rather use books than e-learning courses. Although its focus is on the CAS-004 version of the exam, it’s still a useful tool for those looking to take the SecurityX test. The text has complete coverage of all four domains on which the exam is based.

Be sure to spend time perusing the study resources that work best for you so you can successfully pass the SecurityX exam.

Earn your SecurityX (formerly CASP+), guaranteed!

Enroll in a CompTIA SecurityX boot camp and earn one of the industry’s most respected certifications — guaranteed.

Get Pricing

Why should I get SecurityX certified?

The SecurityX certification is worth the investment. It can validate advanced-level security skills and abilities to design, assess, mitigate and operate a secure enterprise network or lead the technical teams responsible for these tasks. The credential can play an important role in your career progression toward cybersecurity roles such as chief information security officer (CISO), Security operations center (SOC) manager, or security architect/engineer/risk analyst.

To take a deeper dive into the new SecurityX certification, you can watch our webinar, SecurityX is here (CASP+ is no more).

To get ready to take the exam, you can check out our Cybersecurity certifications and skills roadmap, which gives you reliable background info on the exam. You can also sign up for Infosec’s SecurityX Boot Camp.

Curious how much you can earn once you’ve received your SecurityX certification? Our Cybersecurity salary guide eBook has answers. This breaks down salaries for SecurityX and other certifications.

Posted: April 3, 2025

Daniel Brecht

View Profile

Daniel Brecht has been writing for the Web since 2007. His interests include computers, mobile devices and cyber security standards. He has enjoyed writing on a variety of topics ranging from cloud computing to application development, web development and e-commerce. Brecht has several years of experience as an Information Technician in the military and as an education counselor. He holds a graduate Certificate in Information Assurance and a Master of Science in Information Technology.