Zero Trust Architecture for CompTIA SecurityX (CAS-005): Continuous Authorization, Microsegmentation, and Deperimeterization
CompTIA SecurityX (CAS-005) treats Zero Trust as far more than a buzzword. Objective 2.6, "Integrate Zero Trust concepts into architecture," sits inside the Security Architecture domain — worth 27% of the exam, the single heaviest domain on the test — and it expects candidates to reason about continuous authorization, context-based reauthentication, segmentation and microsegmentation, always-on VPN, asset attestation, security boundaries, deperimeterization, and subject-object relationships at an enterprise-architect level. This is a meaningful step up from the Zero Trust vocabulary tested on Security+ and Network+. This guide walks through each of those CAS-005 sub-concepts, building on the policy engine and policy administrator model from our NIST SP 800-207 breakdown and our Zero Trust Architecture primer . Why CAS-005 Pushes Zero Trust Further Than SY0-701 Security+ candidates need to recognize the Policy Decision Point / Policy Enforcement Point model and define ter...