CompTIA Cybersecurity Analyst (CySA+)
(CS0-001-complete)
/ ISBN: 9781616919696
This course includes
Lessons
TestPrep
LiveLab
CompTIA Cybersecurity Analyst (CySA+)
We have a course on the latest CySA+ exam, please check out the latest CompTIA Cybersecurity Analyst (CySA+) course!
Gain the skills required to pass the CompTIA CySA certification exam with the CompTIA Cybersecurity Analyst (CySA+) course and lab. The lab simulates real-world, hardware, software, and command-line interface environments and can be mapped to any text-book, course or training. The CySA+ study guide focuses on all the objectives of the CS0-001 exam and is designed for IT security analysts, vulnerability analysts, or threat intelligence analysts to configure and use threat detection tools, and perform data analysis.
The CompTIA Cybersecurity Analyst (CySA+) certification is an international, vendor-neutral credential that covers applying behavioral analytics to improve the overall state of IT security. The CompTIA CySA+ certification validates the critical knowledge and skills that are required to prevent, detect, and combat cybersecurity threats. It also teaches you how to interpret the reports to protect an organization by identifying vulnerabilities, threats, and risks.
Lessons
-
17+ Lessons
-
65+ Quizzes
-
456+ Flashcards
-
456+ Glossary of terms
TestPrep
-
36+ Pre Assessment Questions
-
2+ Full Length Tests
-
75+ Post Assessment Questions
-
150+ Practice Test Questions
Lab
-
40+ Performance lab
- TOPIC A: Identify the Importance of Risk Management
- TOPIC B: Assess Risk
- TOPIC C: Mitigate Risk
- TOPIC D: Integrate Documentation into Risk Management
- Summary
- TOPIC A: Classify Threats and Threat Profiles
- TOPIC B: Perform Ongoing Threat Research
- Summary
- TOPIC A: Implement Threat Modeling
- TOPIC B: Assess the Impact of Reconnaissance Incidents
- TOPIC C: Assess the Impact of Social Engineering
- Summary
- TOPIC A: Assess the Impact of System Hacking Attacks
- TOPIC B: Assess the Impact of Web-Based Attacks
- TOPIC C: Assess the Impact of Malware
- TOPIC D: Assess the Impact of Hijacking and Impersonation Attacks
- TOPIC E: Assess the Impact of DoS Incidents
- TOPIC F: Assess the Impact of Threats to Mobile Security
- TOPIC G: Assess the Impact of Threats to Cloud Security
- Summary
- TOPIC A: Assess Command and Control Techniques
- TOPIC B: Assess Persistence Techniques
- TOPIC C: Assess Lateral Movement and Pivoting Techniques
- TOPIC D: Assess Data Exfiltration Techniques
- TOPIC E: Assess Anti-Forensics Techniques
- Summary
- TOPIC A: Implement a Vulnerability Management Plan
- TOPIC B: Assess Common Vulnerabilities
- TOPIC C: Conduct Vulnerability Scans
- Summary
- TOPIC A: Conduct Penetration Tests on Network Assets
- TOPIC B: Follow Up on Penetration Testing
- Summary
- TOPIC A: Deploy a Security Intelligence Collection and Analysis Platform
- TOPIC B: Collect Data from Network-Based Intelligence Sources
- TOPIC C: Collect Data from Host-Based Intelligence Sources
- Summary
- TOPIC A: Use Common Tools to Analyze Logs
- TOPIC B: Use SIEM Tools for Analysis
- TOPIC C: Parse Log Files with Regular Expressions
- Summary
- TOPIC A: Analyze Incidents with Windows-Based Tools
- TOPIC B: Analyze Incidents with Linux-Based Tools
- TOPIC C: Analyze Malware
- TOPIC D: Analyze Indicators of Compromise
- Summary
- TOPIC A: Deploy an Incident Handling and Response Architecture
- TOPIC B: Mitigate Incidents
- TOPIC C: Prepare for Forensic Investigation as a CSIRT
- Summary
- TOPIC A: Apply a Forensic Investigation Plan
- TOPIC B: Securely Collect and Analyze Electronic Evidence
- TOPIC C: Follow Up on the Results of an Investigation
- Summary
- TOPIC A: Remediate Identity and Access Management Issues
- TOPIC B: Implement Security During the SDLC
- Summary
- TOPIC A: List of Security Resources
- TOPIC A: Summary of U.S. Department of Defense Operational Security Practices
Hands on Activities (Performance Labs)
- Adding Revision to the Revision History
- Viewing and Downloading the Policy Templates
- Opening the Policy Template and Setting the Company Name
- Reviewing and Modifying the Policy Items
- Identifying the most significant emerging technologies of 2016
- Consulting a Vulnerability Database
- Finding information security blogs
- Performing Reconnaissance on a Network
- Installing Wireshark and WinPcap
- Working with Wireshark's Interface
- Analyzing the Capture File to Find the Attack(s)
- Generating Network Traffic and Using Filters
- Examining the traffic between client and server
- Assessing the impact of malware
- Confirming the Spoofing Attack in Wireshark
- Identifying security apps available for Android
- Examining the DDOS_Attack.pcap File
- Running the Scanning Tools
- Conducting Vulnerability Scans
- Identifying Search Options in Metasploit
- Performing the Initial Scan
- Collecting network-based security intelligence
- Exporting your Windows logs
- Making Syslog Entries Readable
- Installing Splunk on the Server
- Manipulating Kali Linux VM's network interfaces
- Retrieving a Real-Time List of Running Processes
- Starting a Live Packet Capture
- Examining the ipconfig options and creating the activity log
- Initiating an SSH Session from your Windows 10 Client to your Windows Server
- Using the Process Explorer to View Specific Details About Running Processes on the System
- Acquiring the Trojan horse simulator
- Accessing remotely the DT_Watch folder to generate audit logs
- Uploading the Trojan horse simulator to VirusTotal
- Uploading the Trojan horse simulator to Malwr
- Identifying a suspicious account on the System User Groups
- Enabling auditing of the DT_Watch folder
- Examining the Audited Events
- Enabling logging for audited objects
- Inspecting the Vulnerability in the echo Server's Source Code
| What are the prerequisites for this exam? | There is no required prerequisite for CompTIA CS0-001 certification exam, but the candidate should hold CompTIA Network+, Security+ or equivalent knowledge. He or she should have a minimum of 3-4 years of hands-on information security or related experience. |
|---|---|
| What is the exam registration fee? | USD 359 |
| Where do I take the exam? | Pearson VUE |
| What is the format of the exam? | Multiple-choice and performance-based |
| How many questions are asked in the exam? | The exam contains 85 questions. |
| What is the duration of the exam? | 165 minutes |
| What is the passing score? | 750 (on a scale of 100-900) |
| What is the exam's retake policy? | In the event that you fail your first attempt at passing the CySA+ examination, CompTIA's retake policies are:
|
| What is the validity of the certification? | CompTIA CySA+ certification expires after three years from the date of issue, after which the certification holder will need to renew their certification via CompTIA's Continuing Education Program. |
| Where can I find more information about this exam? | To know more about the , click here. |
| What are the career opportunities after passing this exam? |
|
×
