VTEC Training
Course Code: 5713
CompTIA CySA+ - Cybersecurity Analyst
VTEC Training
Portland,
ME
Class Dates:
1/1/0001
Length:
5 Days
Cost:
$2495.00
Class Time:
Technology:
Security
Delivery:
Instructor-Led Training, Virtual Instructor-Led Training
Overview
- Course Overview
- CompTIA Cybersecurity Analyst (CySA+) is an IT workforce certification that applies behavioral analytics to networks and devices to prevent, detect and combat cybersecurity threats. CompTIA Cybersecurity Analyst (CySA+) is the only intermediate high-stakes cybersecurity analyst certification with performance-based questions covering security analytics, intrusion detection and response.
CompTIA® Cybersecurity Analyst (CySA+®) (Exam CS0-002) certification examination.
Jobs that use CompTIA CySA+
IT Security Analyst, Vulnerability Analyst, Threat Intelligence Analyst, Cybersecurity Analyst, Security Operations Center (SOC) Analyst, Cybersecurity Specialist, Security Engineer - Audience
- This course can help students who are looking to fulfill DoD directive 8570.01 for information assurance (IA) training. This program is designed for personnel performing IA functions, establishing IA policies, and implementing security measures and procedures for the Department of Defense and affiliated information systems and networks.
What you’ll learn
The Official CompTIA Cybersecurity Analyst (CySA+) Study Guide (CS0-002) has been developed by CompTIA for the CompTIA certification candidate. Rigorously evaluated by third party subject matter experts to validate adequate coverage of the Cybersecurity Analyst (CySA+) exam objectives, the Official CompTIA Cybersecurity Analyst (CySA+) Study Guide teaches the essential skills and information required for the CompTIA certification exam (CS0-002).
Prerequisites
- At least two years (recommended) of experience in computer network security technology or a related field.
The ability to recognize information security vulnerabilities and threats in the context of risk management.
Foundation-level operational skills with some of the common operating systems for computing environments and operational framework of common assurance safeguards in computing environments. Safeguards include, but are not limited to, basic authentication and authorization, resource permissions, and anti-malware mechanisms.
Understanding of some of the common concepts for network environments, such as routing and switching.
Foundational knowledge of major TCP/IP networking protocols, including, but not limited to, TCP, IP, UDP, DNS, HTTP, ARP, ICMP, and DHCP. and of the concepts and operational framework of common assurance safeguards in network environments. Safeguards include, but are not limited to, firewalls, intrusion prevention systems, and VPNs. Recommended Courses:
- CompTIA A+ Core 1 (220-1001)
- CompTIA A+ Core 2 (220-1002)
- CompTIA Network+ Certification (N10-007)
- CompTIA Security+ (SYO-601)
Course Details
- After completion you will be able to:
- Explain the Importance of Security Controls and Security Intelligence
- Utilize Threat Data and Intelligence
- Analyze Security Monitoring Data
- Collect and Query Security Monitoring Data
- Utilize Digital Forensics and Indicator Analysis Techniques
- Apply Incident Response Procedures
- Apply Risk Mitigation and Security Frameworks
- Perform Vulnerability Management
- Apply Security Solutions for Infrastructure Management
- Understand Data Privacy and Protection
- Apply Security Solutions for Software Assurance
- Apply Security Solutions for Cloud and Automation
- Lesson 1:Understanding Vulnerability Response, handling and Management
- Understanding Cybersecurity Leadership Concepts
- Exploring Control Types and Methods
- Explaining Patch Management Concepts
- Lesson 2: Exploring Threat Intelligence and Threat Hunting Concepts
- Exploring Threat Actor Concepts
- Identifying Active Threats
- Exploring Threat-Hunting Concepts
- Lesson 3: Explaining Important System and Network Architecture Concepts
- Reviewing System and Network Architecture Concept
- Exploring Identity and Access management (IAM)
- Maintaining Operational Visibility
- Lesson 4: Understanding Process Improvement in Security Operations
- Exploring Leadership in Security Operations
- Understanding Technology for Security Operations
- Lesson 5: Implementing vulnerability Scanning Methods
- Explaining compliance Requirements
- Understanding Vulnerability Scanning Methods
- Exploring Special Considerations in Vulnerability Scanning
- Lesson 6: Performing Vulnerability Analysis
- Understanding Vulnerability Scoring Concepts
- Exploring Vulnerability Context Considerations
- Lesson 7: Communication Vulnerability Concepts
- Explaining Effective Communication Concepts
- Understanding Vulnerability Reporting Outcomes and Action Plans
- Lesson 8: Explaining Incident Response Activities
- Exploring Incident Response Planning
- Performing Incident Response Activities
- Lesson 9: Demonstrating Incident Response Communication
- Understanding Incident Response Communication
- Analyzing Incident Response Activities
- Lesson 10: Applying Tools to Identify Malicious Activity
- Identifying Malicious Activity
- Explaining Attack Methodology Framework
- Explaining Techniques for Identifying Malicious Activity
- Lesson 11: Analyzing Potentially Malicious Activity
- Exploring Network Attack Indicators
- Exploring Host Attack Indicators
- Exploring Vulnerability Assessment Tools
- Lesson 12: Understanding Application Vulnerability Assessment
- Analyzing Web Vulnerabilities
- Analyzing Cloud Vulnerabilities
- Lesson 13: Exploring Scripting Tools and Analysis Concepts
- Understanding Scripting Languages
- Identifying Malicious Activity Through Analysis
- Lesson 14: Understanding Application Security and Attach Mitigation Best Practices
- Exploring Secure Software Development Practices
- Recommending Controls to Mitigate Successful Application Attacks
- Implementing Controls to Prevent Attacks