Cisco CyberOps Associate

In just 5 days, this Understanding Cisco Cybersecurity Operations Fundamentals course teaches you security concepts, common network and application operations and attacks, and the types of data needed to investigate security incidents.

You'll master the skills to monitor alerts and breaches, and how to understand and follow established procedures for response to alerts converted to incidents.

Through expert instruction and hands-on practice, you will learn the essential skills, concepts, and technologies to be a contributing member of a Cybersecurity Operations Center (SOC) including understanding the IT infrastructure, operations, and vulnerabilities.

Upon completing this certification you will have:

• the skills to prepare for more advanced job roles in cyber security operations
• a basic understanding of Security Operations Centre (SOC) teams including an understanding of the type of metrics used to detect and respond to security incidents
• an understanding of how to protect your organisation‚Äôs information from common attack vectors and endpoint attacks
• knowledge in security monitoring, including identifying sources and types of data and events.
• knowledge of how organisations are detecting and responding to cyber crime, cyber espionage, insider threats, advanced persistent threats and regulatory requirements
• an understanding of security challenges involved with network applications

This course is designed for individuals seeking a role as an associate-level cybersecurity analyst and IT professionals desiring knowledge in Cybersecurity operations or those in pursuit of the Cisco Certified CyberOps Associate certification including:

• Students pursuing a technical degree
• Current IT professionals
• Recent college graduates with a technical degree

You’ll get access to official courseware and be trained by Cisco Certified Trainers who, through our unique Lecture | Lab | Review technique, will take you through key security principles and provide hands-on, practical examples. This technique will help you better retain knowledge and will ensure you are capable of applying your skills to real-life scenarios.

You can also test your skills whenever you want with 24/7 access to labs.

At the end of the course, you'll sit the CBROPS 200-201 Understanding Cisco Cybersecurity Operations Fundamentals exam which earns the Cisco Certified CyberOps Associate certification.

Course Outline

• Defining the Security Operations Center
• Understanding Network Infrastructure and Network Security Monitoring Tools
• Exploring Data Type Categories
• Understanding Basic Cryptography Concepts
• Understanding Common TCP/IP Attacks
• Understanding Endpoint Security Technologies
• Understanding Incident Analysis in a Threat-Centric SOC
• Identifying Resources for Hunting Cyber Threats
• Understanding Event Correlation and Normalization
• Identifying Common Attack Vectors
• Identifying Malicious Activity
• Identifying Patterns of Suspicious Behavior
• Conducting Security Incident Investigations
• Using a Playbook Model to Organize Security Monitoring
• Understanding SOC Metrics
• Understanding SOC Workflow and Automation
• Describing Incident Response
• Understanding the Use of VERIS
• Understanding Windows Operating System Basics
• Understanding Linux Operating System Basics

Lab Outline

• Use NSM Tools to Analyze Data Categories
• Explore Cryptographic Technologies
• Explore TCP/IP Attacks
• Explore Endpoint Security
• Investigate Hacker Methodology
• Hunt Malicious Traffic
• Correlate Event Logs, Packet Captures (PCAPs), and Alerts of an Attack
• Investigate Browser-Based Attacks
• Analyze Suspicious Domain Name System (DNS) Activity
• Explore Security Data for Analysis
• Investigate Suspicious Activity Using Security Onion
• Investigate Advanced Persistent Threats
• Explore SOC Playbooks
• Explore the Windows Operating System
• Explore the Linux Operating System

Before taking this course, you should have the following knowledge and skills:

• Familiarity with Ethernet and TCP/IP networking
• Working knowledge of the Windows and Linux operating systems
• Familiarity with basics of networking security concepts

As part of your accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

CBROPS 200-201 - Understanding Cisco Cybersecurity Operations Fundamentals, earning you the Cisco Certified CyberOps Associate certification

• Exam code: 200-201
• Duration: 120 minutes
• Domains:
• Security Concepts 20%
• Securty Monitoring 25%
• Host-Based Analysis 20%
• Network Intrusion Analysis 20%
• Security Policies and Procedures 15%

These domains are general guidelines for the content likely to be included in the exam. As Cisco continues to develop this certification, other related topics may also appear.