SecurityX case studies
SecurityX · Put your knowledge to work in context.
SecurityX (exam code CAS-005, version V5) is CompTIA's expert-level cybersecurity certification, launched on December 17, 2024 as the rebrand and update of CASP+. It is aimed at security architects and senior security engineers who design, build, and integrate secure solutions across complex environments and who support a resilient enterprise while addressing governance, risk, and compliance needs. The SecurityX case studies are 5 cases and about 4,418 words.
1The Legacy TLS Exception the VP Wants Signed by Friday
Northwind Retail's PCI assessment closes in 45 days. The e-commerce team runs a legacy order-status API on TLS 1.0 with RSA-1024 certificates; 11 downstream partners still connect to it.
875 words, about 4 min2Segmenting a Flat Clinical Network With an Incomplete Map
Helio Health runs 1,400 workloads across two data centers and AWS. Its internal network is largely flat: 60 VLANs routed any-to-any through a pair of core firewalls seeing 8 Gbps peak.
857 words, about 4 min3240 Live Secrets, a Four-Month Deadline, and a Shared Deploy User
Orbit Logistics has 312 Git repositories; a scan found 1,900 live credentials in commit history and 240 in current code. The platform team selected HashiCorp Vault and has 4 months before its SOC 2 audit.
908 words, about 5 min4Cutting Alert Volume 80% While the Red Team Walks Through
Tessera Bank's SOC has 14 analysts, 24x5 coverage, and 38,000 EPS into Splunk. A single rule, 'Suspicious PowerShell,' generates 71% of all alerts, and 96% of those close as benign administrative activity.
872 words, about 4 min5Active Attacker, 210 Customers, and a GC Who Wants Ten Days
On a Friday at 21:00, Kestrel Software's IR retainer confirms an attacker had access to a build server for 6 days and exfiltrated 40 GB to an unknown IP. Kestrel is a B2B SaaS vendor; its enterprise contracts carry a 72-hour breach notification clause.
906 words, about 5 min