Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by CompTIA
Exam Format
165 min
90 maximum
Pass/Fail (no scaled score)
Expert
Registration
$400 USD
Pearson VUE or online proctoring
English
Validity
3 years
Earn 60 Continuing Education Units (CEUs) within 3 years; Pass the current SecurityX exam; Pass a higher-level CompTIA certification exam
CA1-005 Exam Topics and Domains
CA1-005 is organized into 4 weighted domains. Expect to work with Azure AD, Okta, GRC platforms, Identity providers, and more.
1
Governance, Risk, and Compliance
20%
Security Program Documentation
Policies and ProceduresSecurity Control Frameworks
- Develop and maintain comprehensive security documentation
- Implement security control frameworks
- Align security documentation with organizational objectives
Security Program Management
Training ProgramsCommunication and ReportingRACI Matrix Implementation
- Manage comprehensive security training programs
- Develop effective security communication strategies
- Define clear roles and responsibilities using RACI matrices
Governance Frameworks
COBITITIL
- Apply COBIT governance principles to security programs
- Integrate security into ITIL service management
- Align governance frameworks with organizational goals
Risk Management
Impact AnalysisRisk AssessmentThird-Party Risk ManagementRisk Mitigation Strategies
- Conduct comprehensive risk assessments
- Analyze business impacts of security incidents
- Develop effective risk mitigation strategies
- Manage third-party and supply chain risks
Compliance Management
Compliance FrameworksGRC Tools and Automation
- Navigate complex compliance requirements
- Implement automated compliance monitoring
- Demonstrate compliance through effective documentation and reporting
2
Security Architecture
27%
Systems Design
Resilient Systems ArchitectureAttack Surface Management
- Design resilient and secure system architectures
- Manage and reduce organizational attack surfaces
- Implement security throughout the system lifecycle
Zero Trust Architecture
Zero Trust PrinciplesMicrosegmentationIdentity-Based Perimeters
- Implement Zero Trust architecture principles
- Design and deploy microsegmentation strategies
- Establish identity-based security perimeters
Cloud Architecture
Cloud Access Security Broker (CASB)Shared Responsibility ModelContainer SecurityServerless Workloads
- Implement CASB solutions for cloud security
- Apply shared responsibility model principles
- Secure containerized and serverless workloads
Network Architecture
Network SegmentationVPN and Remote AccessSASE and SD-WANDeperimeterization
- Design secure network segmentation strategies
- Implement SASE and SD-WAN architectures
- Secure deperimeterized network environments
3
Security Engineering
31%
Automation and Orchestration
Scripting for SecurityInfrastructure as Code (IaC)CI/CD Pipeline SecuritySOAR Platforms
- Automate security operations with scripting
- Implement secure Infrastructure as Code
- Integrate security into CI/CD pipelines
- Deploy SOAR platforms for incident response
Vulnerability Management
Vulnerability AssessmentPatch Management
- Implement comprehensive vulnerability management programs
- Develop effective patch management strategies
- Prioritize remediation based on risk
Advanced Cryptography
Cryptographic ImplementationsKey ManagementPKI InfrastructurePost-Quantum Cryptography
- Implement advanced cryptographic solutions
- Design and manage PKI infrastructures
- Prepare for post-quantum cryptography transitions
Identity and Access Management
IAM ArchitecturePrivileged Access Management (PAM)Federation and SSO
- Design comprehensive IAM architectures
- Implement privileged access management
- Deploy federation and single sign-on solutions
Threat Intelligence
STIX/TAXII ImplementationIndicators of Compromise (IoC)
- Implement STIX/TAXII threat intelligence sharing
- Manage and operationalize indicators of compromise
- Integrate threat intelligence into security operations
Endpoint Security
BYOD and Device ManagementEDR/XDR SolutionsSCAP Implementation
- Implement comprehensive endpoint security programs
- Deploy EDR/XDR solutions
- Use SCAP for automated compliance
Application Security
Email SecurityWeb Application SecurityAPI Security
- Implement email security controls
- Secure web applications against common attacks
- Design and secure API architectures
4
Security Operations
22%
Incident Response
Incident Response PlanningForensics and Evidence CollectionThreat Hunting
- Develop comprehensive incident response plans
- Conduct digital forensics investigations
- Perform proactive threat hunting
Security Monitoring
SIEM ImplementationBehavioral AnalyticsNetwork Traffic Analysis
- Implement and optimize SIEM platforms
- Deploy behavioral analytics for threat detection
- Analyze network traffic for security threats
Malware Analysis
Malware Analysis TechniquesRoot Cause Analysis
- Conduct malware analysis using various techniques
- Perform root cause analysis of security incidents
- Understand and document attack methodologies
Data Protection
Data Loss Prevention (DLP)Privacy Controls
- Implement data loss prevention programs
- Manage and protect sensitive data
- Ensure privacy compliance through technical controls
How do I earn this certification?
Passing CA1-005 earns the CompTIA SecurityX certification. It sits in the Cybersecurity track.
Current Level Exams
Next Level Options
- SecurityX + experience SecurityX is already expert-level; next step is leadership roles
- Vendor-specific certifications Specialize in specific technology platforms
Alternative Paths
- OSCP - Offensive Security Certified Professional Deep offensive security skills
- GIAC GXPN - GIAC Exploit Researcher and Advanced Penetration TesterAdvanced offensive security techniques
- CRISC - Certified in Risk and Information Systems ControlRisk-focused certification for governance roles
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for CA1-005 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- BETA_COMPLETED
- Last content update: 2024-12-17
- Announcement date: 2024-02-15
Updates
- Zero Trust Architecture NIST SP 800-207 Major focus in Domain 2 - Security Architecture (27% of exam) • Release date: 2020-08-06
- SASE (Secure Access Service Edge) Current Network architecture transformation - Domain 2 • Release date: 2019-08-30
- Cloud Security (Multi-cloud) Current Significant portion of Domain 2 (Security Architecture) • Release date: Ongoing
- Automation and Orchestration Current Major component of Domain 3 - Security Engineering (31%) • Release date: Ongoing
- STIX/TAXII 2.1 2.1 Threat intelligence sharing - Domain 3 • Release date: 2021-06-03
- Extended Detection and Response (XDR) Current Endpoint security evolution - Domain 3 • Release date: 2020+
Who should take this exam?
This exam is typically taken by Security Architects and Senior Security Engineers.
- Minimum 10 years of general hands-on IT experience
- 5+ years of hands-on security experience
- Knowledge equivalent to CompTIA Network+
- Knowledge equivalent to CompTIA Security+
- Knowledge equivalent to CompTIA CySA+
- Knowledge equivalent to CompTIA Cloud+
- Knowledge equivalent to CompTIA PenTest+