ISACA - CSX®-P Cybersecurity Practitioner Certification

Exam Track

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

CSX-P Cybersecurity Practitioner Certification

• Type of Exam: Online lab-based performance exam delivered via remote proctor through PSI Testing Solutions.
• Number of Items 20
• Length of Exam 4 hours (240 minutes) to complete and score the exam.
• Scoring is immediate.
• Passing Score 75%
• Languages English only

Domain 1 - Business and Security Environment (ID) – 25%

Domain 2 - Operational Security Readiness (PR) – 25%

Domain 3 - Threat Detection and Evaluation (DE) – 25%

Domain 4 - Incident Response and Recovery (RS & RC) – 25%

This 4-hour exam contains no multiple-choice questions or simulations.

Candidates must complete tasks of varying durations with minimal instruction while navigating between multiple virtual machines and are expected to:

Demonstrate an ability to:

• Use vulnerability assessment processes and scanning tool sets to identify and document vulnerabilities based on defined asset criticality and technical impacts.
• Obtain and aggregate information from multiple sources — for example: logs, event data, network assessments – for use in threat intelligence, metrics incident detection, and response.
• Implement specified cybersecurity controls — for network, application, endpoint, server, and more – and validate that controls are operating as required by defined policy or procedure.
• Implement and document changes to cybersecurity controls – for example: endpoint security and network security — in compliance with change management procedures.
• Identify anomalous activity and potential internal, external, and third-party threats to network resources using network traffic monitors or intrusion detection and prevention systems, as well as ensure timely detection of indicators of compromise.
• Perform initial attack analysis to determine the attack vectors, targets and scope and potential impact. Execute defined response plans to contain damage on affected assets.

Possess working knowledge of:

• CentOS
• Kali Linux
• MS Windows 2016 Server
• MS Windows clients – all beginning with XP
• Pfsense
• Security Onion
• Ubuntu

Be comfortable working with a variety of applications, operating systems, tools and utilities prior to sitting for the exam:

• Kibana
• Lynis
• Microsoft security features
• Nmap/Zenmap
• Network troubleshooting commands
• OpenVAS
• Squil
• Terminal applications
• Ubuntu
• Wireshark