Live CompTIA CySA+ / SecurityX/ PenTest+ Certification Training

Instructor-Led

• CompTIA Official Courseware
• CompTIA Official Labs (6 months of access)
• Official Exam Prep
• Certification exam(s) (with exam pass guarantee)

If you aren't successful with your first attempt at the exam, we have an exam pass guarantee.

You may re-sit the course in its entirety for an additional exam voucher for up to 6 months (must provide proof of a failed exam for an additional exam voucher).

Instant Quote

CED Solutions Rewards Points Program

"The class successfully prepared me for the exams. The instructor knew his stuff! He offered all his time to helping the students. This was a well-planned course taught by a great instructor! A perfect combo for success. The instructor was great and passing my certification exams felt great! CED Solutions gave me everything I needed to pass the exams. This is one of the most challenging things I have ever done, also one of the most rewarding."

-Christopher Brown, Honolulu, HI

CompTIA Cybersecurity Analyst (CySA+) is an international, vendor-neutral cybersecurity certification that applies behavioral analytics to improve the overall state of IT security. CySA+ validates critical knowledge and skills that are required to prevent, detect and combat cybersecurity threats.

The CompTIA SecurityX is an advanced-level cybersecurity certification for security architects and senior security engineers charged with leading and improving an enterprise's cybersecurity readiness.

CompTIA PenTest+ is the most comprehensive exam covering all penetration testing stages. Unlike other penetration testing exams that only cover a portion of stages with essay questions and hands-on, PenTest+ uses both performance-based and knowledge-based questions to ensure all stages are addressed.

• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA SecurityX
• CompTIA PenTest+

CompTIA Cybersecurity Analyst (CySA+)

CompTIA Cybersecurity Analyst (CySA+) is an intermediate, vendor-neutral certification for cybersecurity professionals responsible for incident detection, prevention, and response through continuous security monitoring. It validates the hands-on skills needed to proactively defend an organization, manage vulnerabilities, and support incident response activities.

This course prepares learners for the CompTIA CySA+ CS0-004 (V4) exam. The V4 update applies behavioral analytics to combat modern threats through continuous monitoring, incident response, and vulnerability management. It introduces dedicated coverage of artificial intelligence (AI) use cases and risks, modern security architectures used in today's Security Operations Centers (SOCs), and advanced vulnerability management practices such as SBOM and EPSS-based prioritization.

The CySA+ certification is also DoD 8570/8140 approved, making this course an excellent choice for military, civilian, and contractor personnel who require compliance with Department of Defense cybersecurity workforce standards.

Course Objectives

• Explain system and network architecture concepts that support secure operations, including logging, identity, encryption, and modern frameworks (ZTNA, SASE, cloud-native).
• Detect and analyze indicators of potentially malicious activity across networks, endpoints, cloud, and identity systems.
• Use industry-standard tools and methods-SIEM, EDR/XDR, packet analyzers, and threat intelligence platforms-to determine malicious activity.
• Apply threat intelligence and threat-hunting concepts to proactively identify and investigate threats.
• Run a vulnerability management program: scanning, analysis, prioritization (CVSS and EPSS), and risk-based remediation.
• Execute the incident response lifecycle from detection through containment, eradication, recovery, and post-incident activities.
• Summarize AI use cases, security risks, and governance considerations within security operations.
• Produce clear vulnerability and incident response reporting that drives stakeholder decisions.

Who Should Attend?

This course is ideal for IT cybersecurity professionals with three to four years of hands-on information security or related experience, including:

• Security analysts and SOC (Security Operations Center) analysts
• Vulnerability analysts and threat intelligence analysts
• Security engineers and security operations staff
• Incident responders and incident response analysts
• Application security analysts and compliance/risk analysts

Course Prerequisites

Approximately three to four years of hands-on information security or related experience. CompTIA Security+ (or equivalent knowledge and experience) is recommended prior to attending.

Course Outline

Module 1 - System and Network Architecture Concepts

• Logging concepts: ingestion, configuration, integrity and security, time synchronization, and retention
• Operating system concepts, hardening, file structures, and critical processes
• Infrastructure concepts: cloud-native, virtualization, containerization, and APIs
• Network architecture: Zero Trust Network Access (ZTNA), SASE, and hybrid cloud
• Identity and access management: PAM, authentication/authorization methods, and secrets management
• Encryption, data protection, and OT/ICS/SCADA fundamentals
• Security control types (physical, technical, administrative) and control functions

Module 2 - Analyzing Indicators of Potentially Malicious Activity

• Network-based indicators: rogue devices, enumeration, and unexpected ports/traffic
• Host-based indicators: resource spikes, unauthorized software, LOLBins, and file changes
• Application- and cloud-based anomalies
• Identity-based indicators: impossible travel and unauthorized access
• Social engineering and Business Email Compromise (BEC)

Module 3 - Tools and Methods to Determine Malicious Activity

• Packet capture and analysis (Wireshark, tcpdump) and IDS/IPS engines (Snort, Suricata, Zeek)
• SIEM, EDR/XDR, and threat intelligence platforms (TIPs)
• File and reputation analysis; common log and file formats (JSON, XML, YAML, EVTX)
• Scripting for analysis with Python, PowerShell, and shell

Module 4 - Threat Intelligence and Threat Hunting

• Threat actors, motivations, and TTPs; MITRE ATT&CK and the pyramid of pain
• Indicators of compromise: collection, analysis, and application (atomic vs. behavioral)
• Threat modeling (STRIDE), threat mapping, and cyber deception

Module 5 - Efficiency and Process Improvement

• Standardized playbooks and runbooks; SOAR and automation/orchestration
• Data enrichment, alert and rule tuning, and dashboards
• Tool integration via APIs, webhooks, and plug-ins

Module 6 - Artificial Intelligence in Security Operations (New in V4)

• AI use cases in the SOC: log analysis, event correlation, documentation, investigations, and automation
• AI security risks: hallucinations, data exposure, model poisoning, and malicious prompts (prompt injection)
• AI governance and oversight: usage policies and legal/regulatory considerations

Module 7 - Vulnerability Scanning Methods and Concepts

• Asset discovery and inventory; scan planning for scope, sensitivity, segmentation, and regulatory needs
• Internal vs. external, agent vs. agentless, credentialed vs. non-credentialed, active vs. passive scanning
• Baseline and compliance scanning (PCI DSS, CIS, ISO 27000)

Module 8 - Analyzing and Prioritizing Vulnerabilities

• Interpreting scanner output; validating, consolidating, and deduplicating findings
• Risk scoring with CVSS plus context; prioritization using the Exploit Prediction Scoring System (EPSS)
• Handling false positives and tracking exceptions
• Software supply chain security and Software Bill of Materials (SBOM)

Module 9 - Vulnerability Response, Handling, and Mitigation

• Controls to mitigate: patching, configuration changes, and compensating controls
• Change windows, rollback planning, retesting, and remediation validation
• Risk-based remediation planning and inhibitors to remediation

Module 10 - Attack Methodology Frameworks

• Cyber kill chain, MITRE ATT&CK, and the Diamond Model of Intrusion Analysis
• Testing guides and methodologies (OSSTMM, OWASP) for context

Module 11 - Performing Incident Response

• Lifecycle: detection, analysis, containment, eradication, and recovery
• Evidence acquisition and digital forensics fundamentals
• Root-cause analysis

Module 12 - Preparedness and Post-Incident Activities

• Incident response plans, tooling, and playbooks
• Tabletop exercises and training; business continuity and disaster recovery alignment
• Post-incident review and lessons learned

Module 13 - Vulnerability Management Reporting and Communication

• Compliance reporting, action plans, and inhibitors to remediation
• Metrics and KPIs; communicating risk to stakeholders

Module 14 - Incident Response Reporting and Communication

• Incident declaration, escalation, and stakeholder identification
• Incident reporting, root-cause summaries, and lessons-learned communication

[ back to top ]

CompTIA SecurityX

The CompTIA SecurityX (CAS-005) is an advanced-level cybersecurity certification for security architects and senior security engineers charged with leading and improving an enterprise's cybersecurity readiness.

What Skills Will You Gain?

Security Architecture Analyze security requirements in hybrid networks to work toward an enterprise-wide, zero trust security architecture with advanced secure cloud and virtualization solutions.

Security Operations Address advanced threat management, vulnerability management, risk mitigation, incident response tactics and digital forensics analysis.

Governance, Risk, and Compliance Prove an organization's overall cybersecurity resiliency metric and compliance to regulations, such as CMMC, PCI-DSS, SOX, HIPAA, GDPR, FISMA, NIST and CCPA.

Security Engineering and Cryptography Configurations for endpoint security controls, enterprise mobility, cloud/hybrid environments, and enterprise-wide PKI and cryptographic solutions.

Jobs that use CompTIA SecurityX

• Security Architect
• Senior Security Engineer
• SOC Manager
• Cyber Risk Analyst
• Chief Information Security Officer

Course Content

1.0 Governance, Risk, and Compliance

Given a set of organizational security requirements, implement the appropriate governance components.

• Security program documentation
• Security program management
• Governance frameworks
• Change/configuration management
• Governance risk and compliance (GRC) tools
• Data governance in staging environments

Given a set of organizational security requirements, perform risk management activities.

• Impact analysis
• Risk assessment and management
• Third-party risk management
• Availability risk considerations
• Confidentiality risk considerations
• Integrity risk considerations
• Privacy risk considerations
• Crisis management
• Breach response

Explain how compliance affects information security strategies.

• Awareness of industry-specific compliance
• Industry standards
• Security and reporting frameworks
• Audits vs. assessments vs. certifications
• Privacy regulations
• Awareness of cross-jurisdictional compliance requirements

Given a scenario, perform threat-modeling activities.

• Actor characteristics
• Attack patterns
• Frameworks
• Attack surface determination
• Methods
• Modeling applicability of threats to the organization/environment

Summarize the information security challenges associated with artificial intelligence (AI) adoption.

• Legal and privacy implications
• Threats to the model
• AI-enabled attacks
• Risks of AI usage
• AI-enabled assistants/digital workers

2.0 Security Architecture

Given a scenario, analyze requirements to design resilient systems.

• Component placement and configuration
• Availability and integrity design considerations

Given a scenario, implement security in the early stages of the systems life cycle and throughout subsequent stages.

• Security requirements definition
• Software assurance
• Continuous integration/continuous deployment (CI/CD)
• Supply chain risk management
• Hardware assurance
• End-of-life (EOL) considerations

Given a scenario, integrate appropriate controls in the design of a secure architecture.

• Attack surface management and reduction
• Detection and threat-hunting enablers
• Information and data security design
• DLP
• Hybrid infrastructures
• Third-party integrations
• Control effectiveness

Given a scenario, apply security concepts to the design of access, authentication, and authorization systems.

• Provisioning/deprovisioning
• Federation
• Single sign-on (SSO)
• Conditional access
• Identity provider
• Service provider
• Attestations
• Policy decision and enforcement points
• Access control models
• Logging and auditing
• Public key infrastructure (PKI) architecture
• Access control systems

Given a scenario, securely implement cloud capabilities in an enterprise environment.

• Cloud access security broker (CASB)
• Shadow IT detection
• Shared responsibility model
• CI/CD pipeline
• Terraform
• Ansible
• Package monitoring
• Container security
• Container orchestration
• Serverless
• API security
• Cloud vs. customer-managed
• Cloud data security considerations
• Cloud control strategies
• Customer-to-cloud connectivity
• Cloud service integration
• Cloud service adoption

Given a scenario, integrate Zero Trust concepts into system architecture design.

• Continuous authorization
• Context-based reauthentication
• Network architecture
• API integration and validation
• Asset identification, management, and attestation
• Security boundaries
• Deperimeterization
• Defining subject-object relationships

3.0 Security Engineering

Given a scenario, troubleshoot common issues with identity and access management (IAM) components in an enterprise environment.

• Subject access control
• Biometrics
• Secrets management
• Conditional access
• Attestation
• Cloud IAM access and trust policies
• Logging and monitoring
• Privilege identity management
• Authentication and authorization

Given a scenario, analyze requirements to enhance the security of endpoints and servers.

• Application control
• Endpoint detection response (EDR)
• Event logging and monitoring
• Endpoint privilege management
• Attack surface monitoring and reduction
• Host-based intrusion protection system/ host-based detection system (HIPS/ HIDS)
• Anti-malware
• SELinux
• Host-based firewall
• Browser isolation
• Configuration management
• Mobile device management (MDM) technologies
• Threat-actor tactics, techniques, and procedures (TTPs)

Given a scenario, troubleshoot complex network infrastructure security issues.

• Network misconfigurations
• IPS/IDS issues
• Observability
• Domain Name System (DNS) security
• Email security
• Transport Layer Security (TLS) errors
• Cipher mismatch
• PKI issues
• Issues with cryptographic implementations
• DoS/distributed denial of service (DDoS)
• Resource exhaustion
• Network access control list (ACL) issues

Given a scenario, implement hardware security technologies and techniques.

• Roots of trust
• Security coprocessors
• Virtual hardware
• Host-based encryption
• Self-encrypting drive (SED)
• Secure Boot
• Measured boot
• Self-healing hardware
• Tamper detection and countermeasures
• Threat-actor TTPs

Given a set of requirements, secure specialized and legacy systems against threats.

• Operational technology (OT)
• Internet of Things (IoT)
• System-on-chip (SoC)
• Embedded systems
• Wireless technologies/radio frequency (RF)
• Security and privacy considerations
• Industry-specific challenges
• Characteristics of specialized/legacy systems

Given a scenario, use automation to secure the enterprise.

• Scripting
• Cron/scheduled tasks
• Event-based triggers
• Infrastructure as code (IaC)
• Configuration files
• Cloud APIs/software development kits (SDKs)
• Generative AI
• Containerization
• Automated patching
• Auto-containment
• Security orchestration, automation, and response (SOAR)
• Vulnerability scanning and reporting
• Security Content Automation Protocol (SCAP)
• Workflow automation

Explain the importance of advanced cryptographic concepts.

• Post-quantum cryptography (PQC)
• Key stretching
• Key splitting
• Homomorphic encryption
• Forward secrecy
• Hardware acceleration
• Envelope encryption
• Performance vs. security
• Secure multiparty computation
• Authenticated encryption with associated data (AEAD)
• Mutual authentication

Given a scenario, apply the appropriate cryptographic use case and/or technique.

• Use cases
• Techniques

4.0 Security Operations

Given a scenario, analyze data to enable monitoring and response activities.

• Security information event management (SIEM)
• Aggregate data analysis
• Behavior baselines and analytics
• Incorporating diverse data sources
• Alerting
• Reporting and metrics

Given a scenario, analyze vulnerabilities and attacks, and recommend solutions to reduce the attack surface.

• Vulnerabilities and attacks
• Mitigations

Given a scenario, apply threat-hunting and threat intelligence concepts.

• Internal intelligence sources
• External intelligence sources
• Counterintelligence and operational security
• Threat intelligence platforms (TIPs)
• Indicator of compromise (IoC) sharing
• Rule-based languages
• Indicators of attack

Given a scenario, analyze data and artifacts in support of incident response activities.

• Malware analysis
• Reverse engineering
• Volatile/non-volatile storage analysis
• Network analysis
• Host analysis
• Metadata analysis
• Hardware analysis
• Data recovery and extraction
• Threat response
• Preparedness exercises
• Timeline reconstruction
• Root cause analysis
• Cloud workload protection platform (CWPP)
• Insider threat

[ back to top ]

CompTIA PenTest+

CompTIA PenTest+ (PT0-002) is for cybersecurity professionals tasked with penetration testing and vulnerability management.

Why is it different?

CompTIA PenTest+ is the most comprehensive exam covering all penetration testing stages. Unlike other penetration testing exams that only cover a portion of stages with essay questions and hands-on, PenTest+ uses both performance-based and knowledge-based questions to ensure all stages are addressed.

PenTest+ is the only exam on the market to include all aspects of vulnerability management. It not only covers hands-on vulnerability assessment, scanning, and analysis, but also includes planning, scoping, and managing weaknesses, not just exploiting them.

PenTest+ is the most current penetration testing exam covering the latest techniques against expanded attack surfaces. It is a unique exam that requires a candidate to demonstrate the most relevant pen testing skills for the cloud, hybrid environments, web applications, Internet of Things (IoT), and traditional on-premises.

What Skills Will You Learn?

Planning and Scoping

Includes updated techniques emphasizing governance, risk, and compliance concepts, scoping and organizational/customer requirements, and demonstrating an ethical hacking mindset.

Information Gathering and Vulnerability Scanning

Includes updated skills on performing vulnerability scanning and passive/active reconnaissance, vulnerability management, as well as analyzing the results of the reconnaissance exercise.

Attacks and Exploits

Includes updated approaches to expanded attack surfaces, researching social engineering techniques, performing network attacks, wireless attacks, application-based attacks and attacks on cloud technologies, and performing post-exploitation techniques.

Reporting and Communication

Expanded to focus on the importance of reporting and communication in an increased regulatory environment during the pen testing process through analyzing findings and recommending appropriate remediation within a report.

Tools and Code Analysis

Includes updated concepts of identifying scripts in various software deployments, analyzing a script or code sample, and explaining use cases of various tools used during the phases of a penetration test. It is important to note that no scripting and coding is required.

Jobs that use CompTIA PenTest+

• Penetration Tester
• Security Consultant
• Cloud Penetration Tester
• Web App Penetration Tester
• Cloud Security Specialist
• Network & Security Specialist

Class Outline

1.0 Planning and Scoping

Compare and contrast governance, risk, and compliance concepts.

• Regulatory compliance considerations
• Location restrictions
• Legal concepts
• Permission to attack

Explain the importance of scoping and organizational/customer requirements.

• Standards and methodologies
• Rules of engagement
• Environmental considerations
• Target list/in-scope assets
• Validate scope of engagement

Given a scenario, demonstrate an ethical hacking mindset by maintaining professionalism and integrity.

• Background checks of penetration testing team
• Adhere to specific scope of engagement
• Identify criminal activity
• Immediately report breaches/ criminal activity
• Limit the use of tools to a particular engagement
• Limit invasiveness based on scope
• Maintain confidentiality of data/information
• Risks to the professional

2.0 Information Gathering and Vulnerability Scanning

Given a scenario, perform passive reconnaissance.

• DNS lookups
• Identify technical contacts
• Administrator contacts
• Cloud vs. self-hosted
• Social media scraping
• Cryptographic flaws
• Company reputation/security posture
• Data
• Open-source intelligence (OSINT)

Given a scenario, perform active reconnaissance.

• Enumeration
• Website reconnaissance
• Packet crafting
• Defense detection
• Tokens
• Wardriving
• Network traffic
• Cloud asset discovery
• Third-party hosted services
• Detection avoidance

Given a scenario, analyze the results of a reconnaissance exercise.

• Fingerprinting
• Analyze output

Given a scenario, perform vulnerability scanning.

• Considerations of vulnerability scanning
• Scan identified targets for vulnerabilities
• Set scan settings to avoid detection
• Scanning methods
• Nmap
• Vulnerability testing tools that facilitate automation

3.0 Attacks and Exploits

Given a scenario, research attack vectors and perform network attacks.

• Stress testing for availability
• Exploit resources
• Attacks
• Tools

Given a scenario, research attack vectors and perform wireless attacks.

• Attack methods
• Attacks
• Tools

Given a scenario, research attack vectors and perform application-based attacks.

• OWASP Top 10
• Server-side request forgery
• Business logic flaws
• Injection attacks
• Application vulnerabilities
• API attacks
• Directory traversal
• Tools
• Resources

Given a scenario, research attack vectors and perform attacks on cloud technologies.

• Attacks
• Tools

Explain common attacks and vulnerabilities against specialized systems.

• Mobile
• Internet of Things (IoT) devices
• Data storage system vulnerabilities
• Management interface vulnerabilities
• Vulnerabilities related to supervisory control and data acquisition (SCADA)/ Industrial Internet of Things (IIoT)/ industrial control system (ICS)
• Vulnerabilities related to virtual environments
• Vulnerabilities related to containerized workloads

Given a scenario, perform a social engineering or physical attack.

• Pretext for an approach
• Social engineering attacks
• Physical attacks
• Impersonation
• Tools
• Methods of influence

Given a scenario, perform post-exploitation techniques.

• Post-exploitation tools
• Lateral movement
• Network segmentation testing
• Privilege escalation
• Upgrading a restrictive shell
• Creating a foothold/persistence
• Detection avoidance
• Enumeration

4.0 Reporting and Communication

Compare and contrast important components of written reports.

• Report audience
• Report contents
• Storage time for report
• Secure distribution
• Note taking
• Common themes/root causes

Given a scenario, analyze the findings and recommend the appropriate remediation within a report.

• Technical controls
• Administrative controls
• Operational controls
• Physical controls

Explain the importance of communication during the penetration testing process.

• Communication path
• Communication triggers
• Reasons for communication
• Goal reprioritization
• Presentation of findings

Explain post-report delivery activities.

• Post-engagement cleanup
• Client acceptance
• Lessons learned
• Follow-up actions/retest
• Attestation of findings
• Data destruction process

5.0 Tools and Code Analysis

Explain the basic concepts of scripting and software development.

• Logic constructs
• Data structures
• Libraries
• Classes
• Procedures
• Functions

Given a scenario, analyze a script or code sample for use in a penetration test.

• Shells
• Programming languages
• Analyze exploit code
• Opportunities for automation

Explain use cases of the following tools during the phases of a penetration test.

• Scanners
• Credential testing tools
• Debuggers
• OSINT
• Wireless
• Web application tools
• Social engineering tools
• Remote access tools
• Networking tools
• Misc.
• Steganography tools
• Cloud tools

[ back to top ]

CED Solutions is your best choice for CompTIA CySA+ SecurityX PenTest+, CompTIA CySA+ SecurityX PenTest+ training, CompTIA CySA+ SecurityX PenTest+ certification, CompTIA CySA+ SecurityX PenTest+ boot camp, CompTIA CySA+ SecurityX PenTest+ certification training, CompTIA CySA+ SecurityX PenTest+ certification course, CompTIA CySA+ SecurityX PenTest+ course, CompTIA CySA+ SecurityX PenTest+ class.