Legacy Haven University

Category: SecurityX (CAS-005)

The CompTIA SecurityX (CAS-005) certification represents the gold standard in vendor-neutral, advanced cybersecurity engineering and architecture. As enterprise threat surfaces expand across hybrid cloud ecosystems, operational technology (OT), and decentralized identities, security practitioners must master advanced risk mitigation, threat modeling, and Zero Trust engineering.

This resource category delivers structured, actionable insights mapped directly to the official CAS-005 exam objectives and real-world security operations. Explore architectural blueprints, governance frameworks, incident response runbooks, and proven study strategies designed for senior security engineers, enterprise architects, and mission-critical practitioners.

  • SY0-701 Lab: Linux Live-Response DFIR Triage

    A Linux web host is beaconing out. Do live-response triage: list processes to find the masquerading binary, find its C2 connection, uncover cron persistence, then kill the process to contain — collecting volatile evidence in the right order.

  • Architecting High Availability: Active-Active vs Active-Passive Clusters

    High availability (HA) keeps a service reachable when a node, a path, or a site fails.

  • CAS-005 Lab: Vault & Kubernetes Secrets Management

    Stop hardcoding database credentials in manifests. Store them in Vault’s KV engine, then create and verify a Kubernetes secret the app pod can mount.

  • Never Hardcode Secrets: Scaling Enterprise Secrets Management with HashiCorp Vault

    Hardcoded secrets turn source code, images, and pipelines into credential stores. CompTIA SecurityX (CAS-005) treats that as an identity problem and as an attack-surface problem. Domain 3.1 names secrets management as tokens, certificates, passwords, and keys, plus rotation and deletion.

  • 220-1202 Lab: Encrypting Drives with BitLocker & EFS

    The HR laptop stores sensitive files. Encrypt the whole OS drive with BitLocker (TPM + recovery key), then encrypt just the HR folder with EFS — and learn exactly when to reach for each.

  • Security Best Practices: BitLocker & EFS

    A stolen drive still holds every file on it unless the technician encrypted the data first. CompTIA A+ Core 2 (220-1202) groups three Windows controls for that job under objective 2.2: BitLocker, BitLocker-To-Go, and Encrypting File System (EFS).

  • 220-1201 Lab: MDM Configuration Basics

    The company is rolling out managed iPhones and Android tablets. Build the MDM security baseline: pick the policies that actually harden a fleet, then map MDM concepts and complete an enrollment profile.

  • Mobile Device Hardware & Screen Replacements

    A cracked lid is a ticket, not a 1.1 parts list. Core 1 asks you to monitor the hardware CompTIA names, pick the right replacement technique for those parts, and tell a broken panel apart from a dead digitizer, a dim backlight, or a swollen battery.

  • N10-009 Lab: HAProxy Load Balancing & Health Checks

    A single web server is a bottleneck and a SPOF. Inspect the HAProxy config, add a second backend server with round-robin balancing and health checks, validate, reload, and prove requests alternate across servers.

  • Wireless Networking: Wi-Fi 6, 7 & WPA3

    Wireless fails when the access point (AP) sits on a crowded channel, uses a weak passphrase, or advertises the same name as a rogue radio. CompTIA Network+ (N10-009) tests whether you can select the band, the channel plan, the encryption mode, and the AP type before clients join.