
Advanced Security Practice — SecurityX (CAS-005) practice labs
StationX Advanced
SecurityX (CAS-005) practice labs — built for CASP+, renamed SecurityX by CompTIA. Advanced, labs-led security practice in architecture, enterprise risk and advanced operations; hands-on practice, not a SecurityX course.
113 labs · ≈ 119 h of hands-on labs
Free to start: the free lessons and guides for this roadmap →
Exam domains
- Governance, risk, and compliance — 20%
- Security architecture — 27%
- Security engineering — 31%
- Security operations — 22%
Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Security architecture at scale
Design controls across a complex enterprise estate.
22 labs
Practise
- Infra LabsCASP+ / SecurityX - Cybersecurity Advanced Security Practitioner — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Evaluate Security Policy, Guides and TemplatesLevel: GuidedDuration: 30 min
- Implement Remote AssistanceLevel: GuidedDuration: 30 min
- Implement Domain TrustsLevel: GuidedDuration: 30 min
- Evaluate SSH Remote Management SecurityLevel: GuidedDuration: 30 min
- Implement Network Security Solutions for Data FlowLevel: GuidedDuration: 30 min
- Use Security Assessment ToolsLevel: GuidedDuration: 45 min
- Perform Forensic Analysis on a Suspect's SystemLevel: GuidedDuration: 30 min
- Can You Secure Windows Server with Security Templates, Domain Trusts, and Nmap Scanning?Level: AdvancedDuration: 45 min
- Can You Unify Windows and Linux by Using the Power of Remote Desktop, VNC, and SSH?Level: AdvancedDuration: 45 min
- Can You Analyze Network Evidence by Using Wireshark and Autopsy?Level: GuidedDuration: 45 min
- Can You Configure Trusts, Remote Connections and Network Data Analysis?Level: ExpertDuration: 1 h
- Infra LabsSecurity Architect Introduction — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Use SSH to Configure Connections Between SystemsLevel: GuidedDuration: 30 min
- Detect Windows Network VulnerabilitiesLevel: GuidedDuration: 30 min
- Use Metasploit and Netcat to Gain Remote Access to a Windows SystemLevel: GuidedDuration: 30 min
- Debug CodeLevel: GuidedDuration: 30 min
- Use Metasploit to Test Network SecurityLevel: GuidedDuration: 30 min
- Manage a Server by Using a Security TemplateLevel: GuidedDuration: 30 min
- Perform Application Source Code Verification to Install New SoftwareLevel: GuidedDuration: 30 min
- Can You Establish Secure Communications by Using SSH and Security Templates?Level: AdvancedDuration: 45 min
- Can You Perform Inside Exploitation, Remote Commands, and Gain Remote Access?Level: AdvancedDuration: 45 min
- Can You Manage Code Security?Level: AdvancedDuration: 45 min
- Can You Use Security Templates, Remote Access Exploits, and PE Analysis to Manage a Windows Server Configuration?Level: GuidedDuration: 1 h
Step 2 — Security engineering
Engineer the controls: TLS and certificates, privileged access, hardened hosts and secure code.
34 labs
Practise
- Infra LabsSecurity Operations Practitioner — 15 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Enforce Segmentation and Approved Access PathsLevel: GuidedDuration: 1 h
- Harden a JumpBox for Secure AdministrationLevel: GuidedDuration: 1 h
- Secure Privileged Access and Auditing in Active DirectoryLevel: GuidedDuration: 1 h
- Establish a Windows Hardening and Security Logging BaselineLevel: GuidedDuration: 1 h
- Reduce DVWA Exposure by Using Compensating ControlsLevel: GuidedDuration: 1 h
- Implement TLS and Certificate Controls for a ServiceLevel: GuidedDuration: 1 h
- Integrated Hardening Sprint A: Segment, Harden, and Secure ServicesLevel: AdvancedDuration: 1 h 30 min
- Governance and Compliance Evidence CollectionLevel: GuidedDuration: 1 h
- Prioritize Risks and Implement One RemediationLevel: GuidedDuration: 1 h
- Threat Modeling to Controls: Identify Risks and Implement MitigationsLevel: GuidedDuration: 1 h
- Establish centralized logging by onboarding hosts and validating monitoring readinessLevel: GuidedDuration: 1 h
- Hunt Threats Using Intelligence and Rule-Based DetectionLevel: GuidedDuration: 1 h
- Triage, Contain, and Automate Incident ResponseLevel: GuidedDuration: 1 h
- Govern, Detect, Hunt, and Respond Through an Integrated Security Operations SprintLevel: AdvancedDuration: 1 h
- Design, Defend, and Respond Across an End-to-End Security ArchitectureLevel: ExpertDuration: 1 h
- Infra LabsSecurity+ PKI Essentials — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Deploy a Private Certificate AuthorityLevel: GuidedDuration: 1 h 15 min
- Configure Custom Certificate Templates and Deployment OptionsLevel: GuidedDuration: 30 min
- Manually Request a PKI CertificateLevel: GuidedDuration: 1 h 15 min
- Can You Deploy a Certificate Authority and Issue Certificates?Level: AdvancedDuration: 1 h 30 min
- Enable DNSSECLevel: GuidedDuration: 30 min
- Use EFS To Encrypt Files on NTFS VolumesLevel: GuidedDuration: 30 min
- Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?Level: AdvancedDuration: 45 min
- Enable SSL/TLS on a WebsiteLevel: GuidedDuration: 30 min
- Enable Client SSL/TLSLevel: GuidedDuration: 30 min
- Can You Secure a Website with an SSL/TLS Certificate?Level: AdvancedDuration: 45 min
- Can You Use PKI to Secure a Network Environment?Level: ExpertDuration: 2 h
- LabsSecure Coding (Python) — 8 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Secure Coding (Python) - Lab 1: Race ConditionsDuration: 1 h
- Secure Coding (Python) - Lab 2: Data ValidationDuration: 1 h
- Secure Coding (Python) - Lab 3: AuthenticationDuration: 2 h
- Secure Coding (Python) - Lab 4: Access ControlDuration: 1 h
- Secure Coding (Python) - Lab 5: CryptographyDuration: 2 h
- Secure Coding (Python) - Lab 6: Error HandlingDuration: 1 h
- Secure Coding (Python) - Lab 7: Static AnalysisDuration: 1 h
- Secure Coding (Python) - Lab 8: Pickles and ImportsDuration: 1 h
Step 3 — Enterprise risk and governance
Make defensible risk decisions and evidence them.
7 labs
Practise
- LabsCritical Security Controls — 7 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Auditing Service Accounts and Setting Up Automated Log CollectionDuration: 2 h
- CIRP Creation and DisasterDuration: 2 h
- Comparing ControlsDuration: 1 h
- Creation of Standard Operating Procedures for RecoveryDuration: 1 h
- Identifying Key AssetsDuration: 1 h
- Monitoring and Verifying Management SystemsDuration: 1 h
- Sensitive Information IdentificationDuration: 1 h
Step 4 — Advanced operations
Lead detection, response and assurance activity.
52 labs
Practise
- LabsCyber Security Professional — 34 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Analyze and Update a Company BCP/BIA/DRP/CIRPDuration: 2 h
- Analyze DoomJuice Infection to Identify Attack Vector and PayloadDuration: 1 h
- Analyze SQL Injection AttackDuration: 1 h
- Analyze Structured Exception Handler Buffer Overflow ExploitDuration: 1 h
- Applying Filters to TCPDump and WiresharkDuration: 1 h
- Baseline Systems in Accordance with Policy DocumentationDuration: 1 h
- Conduct Baseline Comparison for Indicators of CompromiseDuration: 1 h
- Creating a Baseline Using AutopsyDuration: 1 h
- Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerDuration: 1 h
- Creating a Secondary Baseline and Conducting ComparisonDuration: 1 h
- Creation of Standard Operating Procedures for RecoveryDuration: 1 h
- Data Backup to Prep for RecoveryDuration: 1 h
- Firewall Setup and ConfigurationDuration: 1 h
- Identify Access to a LINUX Firewall Through SYSLOG ServiceDuration: 1 h
- Identify Whether High-Risk Systems Were AffectedDuration: 1 h
- Identifying System Vulnerabilities with OpenVASDuration: 2 h
- Implementing Least-Privilege on WindowsDuration: 1 h
- Intro To Linux - Users and GroupsDuration: 1 h
- Log Correlation & Analysis to Identify Potential IOCDuration: 1 h
- Manual Vulnerability AssessmentDuration: 1 h
- Manually Analyze Malicious PDF DocumentsDuration: 1 h
- Manually Analyze Malicious PDF Documents 2Duration: 1 h
- Microsoft Baseline Security AnalyzerDuration: 1 h
- Monitoring and Verifying Management SystemsDuration: 1 h
- Monitoring Network Traffic for Potential IOA/IOCDuration: 1 h
- Network Segmentation (FW/DMZ/WAN/LAN)Duration: 1 h
- Parse Files Out of Network TrafficDuration: 1 h
- Patch Installation and Validation TestingDuration: 2 h
- Performing Incident Response in a Windows EnvironmentDuration: 1 h
- Scanning and EnumerationDuration: 2 h
- Scanning and Mapping NetworksDuration: 2 h
- Securing Linux for System AdministratorsDuration: 1 h
- Use pfTop to Analyze Network TrafficDuration: 1 h
- Vulnerability Identification and RemediationDuration: 1 h
- LabsThreat Intelligence & Defense — 18 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Analyze Various Data Sources to Confirm Suspected InfectionDuration: 1 h
- Assessing Vulnerabilities Post AddressalDuration: 1 h
- BitCoin Mining Web Application on Corporate NetworkDuration: 1 h
- Check for Indicators of Other Attack Activity (Debug PE File)Duration: 2 h
- Cyber Security Evaluation Tool (CSET)Duration: 5 h
- Entering Information into a CMDBDuration: 1 h
- Event Logs with AutopsyDuration: 1 h
- Internet HistoryDuration: 1 h
- MITRE - DefendDuration: 1 h
- Nexpose: Red Team ExploitationDuration: 1 h
- Overview of KibanaDuration: 1 h
- Performing an Initial Attack AnalysisDuration: 1 h
- Preparing Target MediaDuration: 1 h
- Recover from Illegal Bitcoin Mining IncidentDuration: 1 h
- Recover from Web-Based Flashpack IncidentDuration: 1 h
- Report Writing for Presentation to ManagementDuration: 1 h
- Respond to and Validate Alerts from Antivirus SoftwareDuration: 1 h
- WMI Event PersistenceDuration: 2 h
Where this leads
Choose your next roadmap
Next level
AI-Driven Security Engineering
After this roadmap: direct AI to build real security solutions. “No coding background required. You direct the AI; the AI does the building.”
See the AI-Driven Security Engineering Master’s →
