Course Overview
The CompTIA Cybersecurity Analyst (CySA+) course is an intermediate-level certification designed to provide learners with the knowledge and skills necessary to prevent, detect, and combat cybersecurity threats in a variety of settings.
The course covers a range of topics, including vulnerability management, threat and malware analysis, security architecture and toolsets, security operations and monitoring, incident response, and compliance and governance.
Some of the specific skills and knowledge that learners can expect to gain from the course include:
– Analyzing and interpreting data related to cybersecurity threats and vulnerabilities.
– Identifying and responding to network and system security incidents.
– Implementing threat detection and response solutions.
– Conducting security assessments and risk analyses.
– Implementing secure network and system architectures.
– Configuring and using security tools and technologies.
– Complying with legal and regulatory requirements related to cybersecurity.
The CySA+ course is ideal for cybersecurity professionals who want to enhance their skills and knowledge in the field or pursue career advancement opportunities. The certification is recognized by a variety of organizations and industries, including government agencies, financial services, healthcare, and retail.
Learning Options
Target audiences
- IT Professionals
- IT Administrators
- Network Administrators
- Network Analysts
- IT Security Specialists
- Network Architects
- Aspiring Cybersecurity Professionals
- System Administrators
Schedule Dates
Curriculum
-
Module 1 – Threat Management 1
-
Module 2 – Threat Management 2
- Security Appliances
- Configuring Firewalls
- Intrusion Detection and Prevention
- Configuring IDS
- Malware Threats
- Configuring Anti-virus Software
- Sysinternals
- Enhanced Mitigation Experience Toolkit
- Logging and Analysis
- Packet Capture
- Packet Capture Tools
- Monitoring Tools
- Log Review and SIEM
- SIEM Data Outputs
- SIEM Data Analysis
- Point-in-Time Data Analysis
-
Module 3 – Vulnerability Management
- Managing Vulnerabilities
- Vulnerability Management Requirements
- Asset Inventory
- Data Classification
- Vulnerability Management Processes
- Vulnerability Scanners
- Microsoft Baseline Security Analyzer
- Vulnerability Feeds and SCAP
- Configuring Vulnerability Scans
- Vulnerability Scanning Criteria
- Exploit Frameworks
- Remediating Vulnerabilities
- Remediation and Change Control
- Remediating Host Vulnerabilities
- Remediating Network Vulnerabilities
- Remediating Virtual Infrastructure Vulnerabilities
- Secure Software Development
- Software Development Lifecycle
- Software Vulnerabilities
- Software Security Testing
- Interception Proxies
- Web Application Firewalls
- Source Authenticity
- Reverse Engineering
-
Module 4 – Cyber Incident Response
- Incident Response
- Incident Response Processes
- Threat Classification
- Incident Severity and Prioritization
- Types of Data
- Forensics Tools
- Digital Forensics Investigations
- Documentation and Forms
- Digital Forensics Crime Scene
- Digital Forensics Kits
- Image Acquisition
- Password Cracking
- Analysis Utilities
- Incident Analysis and Recovery
- Using Sysinternals
- Containment Techniques
- Eradication Techniques
- Validation Techniques
- Corrective Actions
-
Module 5 – Security Architecture
- Secure Network Design
- Network Segmentation
- Blackholes, Sinkholes, and Honeypots
- System Hardening
- Group Policies and MAC
- Endpoint Security
- Managing Identities and Access
- Network Access Control
- Identity Management
- Identity Security Issues
- Identity Repositories
- Context-based Authentication
- Single Sign On and Federations
- Exploiting Identities
- Exploiting Web Browsers and Applications
- Security Frameworks and Policies
- Frameworks and Compliance
- Reviewing Security Architecture
- Procedures and Compensating Controls
- Verifications and Quality Control
- Security Policies and Procedures
- Personnel Policies and Training
- A CompTIA Security+ certification or equivalent knowledge and skills.
- At least 3-4 years of hands-on information security or related experience.
Learners should have a basic understanding of computer hardware and software, as well as networking fundamentals. Familiarity with common operating systems such as Windows and Linux is also helpful.
