Start Your Free Practice Test
Enter your details, then choose a 25-question Quick Test or the full 50-question, 90-minute practice test.
Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Check your readiness for the CompTIA SecurityX CAS-005 exam with 50 exam-style questions across all four domains, each with an instant explanation. Free to take, with a 90-minute timer that matches the pace of the real exam, and retake it as often as you want.
New to SecurityX? Learn more about the certification →
Enter your details, then choose a 25-question Quick Test or the full 50-question, 90-minute practice test.
This free CompTIA SecurityX practice test checks your readiness for the CAS-005 exam with 50 exam-style questions across all four domains, each with an explanation for every answer choice, on a 90-minute timer that matches the roughly two-minutes-per-question pace of the real exam. Built by Training Camp, an authorized CompTIA partner, and drawn from the same objectives we teach in our SecurityX Boot Camp. New to the exam? Learn more about the SecurityX certification.
CompTIA SecurityX is the new name for CASP+, the CompTIA Advanced Security Practitioner certification. The CAS-005 exam launched on December 17, 2024 and is the current version. It is organized into four weighted domains, and this test pulls questions from each: Governance, Risk, and Compliance (20%), Security Architecture (27%), Security Engineering (31%), and Security Operations (22%). The real exam has a maximum of 90 questions, a 165-minute time limit, and a pass or fail result with no scaled score. It mixes multiple-choice items with performance-based questions that drop you into a simulated environment and ask you to design, configure or analyze something.
CompTIA recommends a minimum of ten years of general hands-on IT experience, including at least five years of broad hands-on security experience. The exam is written for the senior practitioner: most questions describe an enterprise situation and ask which architecture, engineering or operational decision is BEST, and several of the wrong choices are things a less experienced engineer would reasonably try. The domains follow CompTIA's published CAS-005 exam objectives, and we keep our practice questions aligned with the current published objectives.
Take it once without notes to get an honest baseline. Read the explanation for every answer, including the ones you got right, because the incorrect-choice explanations are where the distinctions SecurityX likes to test (API-based versus proxy CASB, Secure Boot versus measured boot, hypothesis-based hunting versus indicator matching) get spelled out. Then focus your study on your weakest domain and retake the test in a week. The 90-minute timer over 50 questions keeps you honest about pacing: the real CAS-005 exam gives you 165 minutes for up to 90 questions, so get used to deciding in under two minutes and saving your time for the performance-based items.
Domains Covered · CAS-005
Program governance, risk management, compliance, threat modeling, and AI adoption risk.
Resilient design, secure SDLC, IAM design, cloud capabilities, and Zero Trust.
IAM, endpoint and network hardening, hardware trust, OT, automation, and cryptography.
SIEM analysis, vulnerability and attack analysis, threat hunting, and incident response.
Four questions from the bank, one per domain, with the reasoning behind every answer. The full test has 50.
A security architect finds that three business units each interpret the enterprise encryption policy differently, and one still runs TLS 1.0 on internal APIs. Which governance document should the architect publish to end the disagreement?
Correct. A standard turns policy intent into mandatory, measurable requirements: which TLS versions are permitted, which cipher suites, and by when. Standards are the layer where inconsistent interpretation gets settled, and they can be audited against.
A SOC at a payments processor needs full packet capture from a 10 Gbps core link for its detection sensors. The link runs near line rate in both directions, and the network team will not accept any design that can silently drop part of the traffic. Which placement BEST meets the requirement?
Correct. A passive TAP copies the signal at the physical layer without involving the switch CPU, so it delivers full-fidelity capture and fails open if it loses power. CAS-005 lists taps and collectors among the components whose placement you must decide, and this is the case where a TAP is the only clean answer.
After a power event at a branch office, users in that office cannot open a headquarters file server that uses Kerberos, while every other office works normally. The file server's security log shows KRB_AP_ERR_SKEW on each failed attempt from the branch. What should the engineer check FIRST?
Correct. Kerberos uses time stamps to defeat replay, and KRB_AP_ERR_SKEW means the time in the client's authenticator is outside the tolerance the server allows, which Microsoft's default domain policy sets to five minutes. Only one office fails, so the drift is on that side: a branch domain controller or the clients themselves came back from the power event with a wrong clock and have not resynchronized with the domain time hierarchy.
During an incident review, a bank's SOC learns that its internet-edge firewall stopped sending logs to the SIEM 11 days earlier after a firmware update, and no one noticed. Which of the following BEST prevents a recurrence?
Correct. CAS-005 lists non-reporting devices as a SIEM problem in its own right. Health monitoring that baselines each source's expected event rate and alerts when a critical source goes quiet turns a silent failure into a ticket within minutes rather than days.
Every one of the 50 questions works this way: an explanation for the right answer and for the one you picked, so a wrong answer teaches you something. Questions last reviewed against the current CompTIA SecurityX (CAS-005) objectives.
Quick answers about the test, the CompTIA SecurityX (CAS-005) exam, and how to prepare.
Yes. Training Camp's SecurityX practice test is free to take. You get 50 exam-style questions across all four CompTIA SecurityX CAS-005 domains, with a written explanation for every answer choice.
It is 50 multiple-choice scenario questions drawn from all four CAS-005 domains, with an instant explanation after each answer and a 90-minute timer that matches the roughly two-minutes-per-question pace of the real exam. You can retake it as often as you want. Treat it as a readiness check rather than a substitute for full preparation.
The CompTIA SecurityX CAS-005 exam has a maximum of 90 questions and a 165-minute time limit, mixing multiple-choice and performance-based questions.
CAS-005 is scored pass or fail only. CompTIA does not publish a scaled passing score for SecurityX, so your result tells you whether you passed, not by how much.
CAS-005 covers four domains: Governance, Risk, and Compliance (20%), Security Architecture (27%), Security Engineering (31%), and Security Operations (22%). Security Engineering is the largest and the most hands-on.
SecurityX is CompTIA's expert-level security certification. CompTIA recommends a minimum of ten years of general hands-on IT experience, including at least five years of hands-on security. The questions expect the judgment of a senior architect or engineer, and the performance-based items are usually the hardest part.
Work through the CAS-005 exam objectives one sub-objective at a time, get hands-on with the technologies you have only read about, and use practice questions like these to find your weak domains. For a structured path with an instructor and your exam voucher included, our SecurityX Boot Camp covers all four domains.