Cybersecurity Analyst (CySA+)- 4 day – ILT

THREAT MANAGEMENT

• Explain the importance of threat data and intelligence
• Given a scenario, utilize threat intelligence to support organizational security
• Given a scenario, perform vulnerability management activities
• Given a scenario, analyze the output from common vulnerability assessment tools
• Explain the threats and vulnerabilities associated with specialized technology
• Explain the threats and vulnerabilities associated with operating in the cloud
• Given a scenario, implement controls to mitigate attacks and software vulnerabilities

SOFTWARE AND SYSTEMS SECURITY

• Given a scenario, apply security solutions for infrastructure management.
• Explain software assurance best practices
• Explain hardware assurance best practices

SECURITY OPERATIONS AND MONITORING

• Given a scenario, analyze data as part of security monitoring activities
• Given a scenario, implement configuration changes to existing controls to improve security
• Explain the importance of proactive threat hunting
• Compare and contrast automation concepts and technologies

INCIDENT RESPONSE

• Explain the importance of the incident response process
• Given a scenario, apply the appropriate incident response procedure
• Given an incident, analyze potential indicators of compromise
• Given a scenario, utilize basic digital forensics techniques

COMPLIANCE AND ASSESSMENT

• Understand the importance of data privacy and protection
• Given a scenario, apply security concepts in support of organizational risk mitigation.
• Explain the importance of frameworks, policies, procedures, and controls

CS0-002: CYBERSECURITY ANALYST CYSA+ EXAM

• CySA+ Certification Overview
• CySA+ Exam Structure
• Exam Registration Process
• Time Management
• Topics and Concepts
• CySA+ Certification Question Structure
• Vendor Interpretation Techniques

CompTIA Cybersecurity Analyst (CySA+) is for cyber security professionals that perform data analysis and interpret the results to identify vulnerabilities, threats and risks to an organization.

This vendor-neutral certification is considered intermediate to mid-career and will prove to organizations that you have the knowledge and skills needed to spearhead cybersecurity operations, either as a standalone information security professional or as part of a security team.

Job roles such as Security analyst, Security operations center (SOC) analyst, Vulnerability analyst, Cybersecurity specialist, Threat intelligence analyst, Security engineer, Cybersecurity analyst and so on.

Candidates for this certification should have Network+, Security+ or equivalent knowledge. Minimum of 3-4 years of hands-on information security or related experience. While there is no required prerequisite, CySA+ is intended to follow CompTIA Security+ or equivalent experience and has a technical, hands-on focus.