The CompTIA Cybersecurity Analyst (CySA+) course is the only intermediate high-stakes cybersecurity analyst with intrusion detection and response. The behavioral analytics skills covered by the CompTIA CySA+ certification identify and combat malware and advanced persistent threats (APTs), resulting in better threat visibility across a broad attack surface by focusing on network behavior, including an organization's interior network.
CompTIA CySA+ meets the ISO 17024 standard and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is compliant with government regulations under the Federal Information Security Management Act (FISMA). Regulators and government rely on ANSI accreditation because it provides confidence and trust in the outputs of an accredited program.
Are you still not sure how to begin your CySA+ (plus) training? Start with our CySA+ certification prep course and get a better grasp of the CySA+ CS0-002 certification exam.
What's Included -
5 days instructor-led training
CySA+ study guide
Labs for hands-on learning
Certified Trainer delivering the class
Note:
This is a DOD approved Course.
The aligned CompTIA Cybersecurity Analyst (CySA+) certification is approved by Army Credentialing Assistance (CA)
Target Audience
- IT Security Analyst
- Security Operations Center (SOC) Analyst
- Vulnerability Analyst
- Cybersecurity Specialist
- Threat Intelligence Analyst
- Security Engineer
Exams
CS0-002: CompTIA Cybersecurity Analyst (CySA+) Certification Exam
Objectives
At the end of the course, students will be able to:
- Leverage intelligence and threat detection techniques
- Analyze and interpret data
- Identify and address vulnerabilities
- Suggest preventative measures
- Effectively respond to and recover from incidents.
Prerequisites
Required:
- Minimum of 4 years of hands-on information security or related experience.
Course Outline
1) Threat and Vulnerability Management
- Explain the importance of threat data and intelligence
- Given a scenario, utilize threat intelligence to support organizational security
- Given a scenario, perform vulnerability management activities
- Given a scenario, analyze the output from common vulnerability assessment tools
- Explain the threats and vulnerabilities associated with specialized technology
- Explain the threats and vulnerabilities associated with operating in the cloud
- Given a scenario, implement controls to mitigate attacks and software vulnerabilities
2) Software and Systems Security
- Given a scenario, apply security solutions for infrastructure management
- Explain software assurance best practices
- Explain hardware assurance best practices
3) Security Operations and Monitoring
- Given a scenario, analyze data as part of security monitoring activities
- Given a scenario, implement configuration changes to existing controls to improve security
- Explain the importance of proactive threat hunting
- Compare and contrast automation concepts and technologies
4) Incident Response
- Given a scenario, apply the appropriate incident response procedure
- Explain the importance of the incident response process
- Given an incident, analyze potential indicators of compromise
- Given a scenario, utilize basic digital forensics techniques
5) Compliance and Assessment
- Understand the importance of data privacy and protection
- Given a scenario, apply security concepts in support of organizational risk mitigation
- Explain the importance of frameworks, policies, procedures, and controls
This course is available for "remote" learning and will be available to anyone with access to an internet device with a microphone (this includes most models of computers, tablets). Classes will take place with a "Live" instructor at the date/times listed below.
Upon registration, the instructor will send along additional information about how to log-on and participate in the class.