Legacy Haven University

Category: SecurityX (CAS-005)

The CompTIA SecurityX (CAS-005) certification represents the gold standard in vendor-neutral, advanced cybersecurity engineering and architecture. As enterprise threat surfaces expand across hybrid cloud ecosystems, operational technology (OT), and decentralized identities, security practitioners must master advanced risk mitigation, threat modeling, and Zero Trust engineering.

This resource category delivers structured, actionable insights mapped directly to the official CAS-005 exam objectives and real-world security operations. Explore architectural blueprints, governance frameworks, incident response runbooks, and proven study strategies designed for senior security engineers, enterprise architects, and mission-critical practitioners.

  • SY0-701 Lab: IAM Hardening — Enforce MFA with a Policy Condition

    An IAM policy grants broad access with no MFA requirement. Inspect the finding, then rewrite the policy so access is denied unless the session is MFA-authenticated — stopping stolen static credentials from being enough.

  • Data Privacy Engineering: Tokenization vs Masking for Compliance

    Tokenization and data masking stop a viewer from reading a full sensitive value.

  • CAS-005 Lab: Dynamic Data Masking & RLS in PostgreSQL

    Separate administrative access from data access. Turn on Row-Level Security so each tenant only sees its own rows, then add a masking view so a support role sees redacted PII (SSNs) while the owner sees the real values.

  • Securing the Crown Jewels: Row-Level Security (RLS) and Column-Level Encryption

    Full-disk encryption stops a stolen drive. It does not stop a privileged session that already sits on the database. Row-level security (RLS) and column-level encryption split who may open the system from which records and fields that session may read.

  • 220-1202 Lab: Managing Tickets in an ITSM Platform

    A user opens a ticket: ‘I can’t print payroll and it’s due today.’ Work it end-to-end through the ITSM lifecycle in order, set the right priority, and map the ITIL concepts a helpdesk tech uses every day.

  • Operational Procedures: Ticketing & Change Management

    A ticket records who is blocked, which device is involved, and what you did. A change record decides whether that fix may touch a live system. CompTIA A+ Core 2 (220-1202) tests both under Domain 4.0 Operational Procedures: 4.1 covers documentation and support-system information management; 4.2 covers change-management procedures.

  • 220-1201 Lab: Configuring Network Printers & Spoolers

    The office network printer has a jammed queue — jobs pile up and nothing prints. Restart the Print Spooler the right way: stop the service, clear the stuck spool files, start it again, and verify the printer is ready.

  • Printer Troubleshooting: Laser vs Inkjet

    A printer ticket is a technology ticket first. CompTIA A+ Core 1 (220-1201) splits that work across three objectives: deploy the device (3.7), maintain the right consumable for that technology (3.8), then match the printed page and the queue to a named fault (5.6). Laser and inkjet share paper, drivers, and a queue. They do…

  • N10-009 Lab: Crafting Standard & Extended ACLs

    Filter traffic on R1 two ways: a numbered standard ACL that permits only the management subnet, and an extended ACL that permits HTTPS to a specific server while everything else is denied. Then apply and verify.

  • Network Security: Firewalls, ACLs, and IDS/IPS

    A Network+ candidate stops unwanted traffic at named appliances and named rules. CompTIA tests whether you can place a firewall, apply an access control list (ACL), and tell an intrusion detection system (IDS) from an intrusion prevention system (IPS) without mixing those jobs.