CompTIA Cybersecurity Analyst (CySA+) Course & Labs
(CySA-plus)
/ ISBN: 9781616910259
This course includes
Lessons
TestPrep
LiveLab
CompTIA Cybersecurity Analyst (CySA+) Course & Labs
The CompTIA Cybersecurity Analyst (CySA+) is an international, vendor-neutral credential that applies behavioral analytics to improve the overall state of IT security. CompTIA CySA+ certification exam validates the critical knowledge and skills that are required to prevent, detect, and combat cybersecurity threats. The exam validates the expertise of professionals to configure and use threat detection tools; perform data analysis, interpret the results to identify vulnerabilities, and much more.
Lessons
-
14+ Lessons
-
380+ Quizzes
-
66+ Flashcards
-
66+ Glossary of terms
Test Preps
-
85+ Pre Assessment Questions
-
85+ Post Assessment Questions
Lab
-
23+ Performance lab
-
23+ Video tutorials
- What Does This Book Cover?
- Setting Up a Kali and Metasploitable Learning Environment
- Setting Up Your Environment
- Objectives Map for CompTIA Cybersecurity Analyst (CySA+) Exam CS0-001
- Cybersecurity Objectives
- Evaluating Security Risks
- Building a Secure Network
- Secure Endpoint Management
- Penetration Testing
- Reverse Engineering
- Summary
- Exam Essentials
- Lab Exercises
- Footprinting
- Passive Footprinting
- Gathering Organizational Intelligence
- Detecting, Preventing, and Responding to Reconnaissance
- Summary
- Exam Essentials
- Lab Exercises
- Identifying Vulnerability Management Requirements
- Configuring and Executing Vulnerability Scans
- Developing a Remediation Workflow
- Overcoming Barriers to Vulnerability Scanning
- Summary
- Exam Essentials
- Lab Exercises
- Reviewing and Interpreting Scan Reports
- Validating Scan Results
- Common Vulnerabilities
- Summary
- Exam Essentials
- Lab Exercises
- Security Incidents
- Phases of Incident Response
- Building the Foundation for Incident Response
- Creating an Incident Response Team
- Coordination and Information Sharing
- Classifying Incidents
- Summary
- Exam Essentials
- Lab Exercises
- Analyzing Network Events
- Handling Network Probes and Attacks
- Investigating Host Issues
- Investigating Service and Application Issues
- Summary
- Exam Essentials
- Lab Exercises
- Building a Forensics Capability
- Understanding Forensic Software
- Conducting a Forensic Investigation
- Forensic Investigation: An Example
- Summary
- Exam Essentials
- Lab Exercises
- Containing the Damage
- Incident Eradication and Recovery
- Wrapping Up the Response
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Policy Documents
- Complying with Laws and Regulations
- Adopting a Standard Framework
- Implementing Policy-Based Controls
- Security Control Verification and Quality Control
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Defense in Depth
- Implementing Defense in Depth
- Analyzing Security Architecture
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Identity
- Threats to Identity and Access
- Identity as a Security Layer
- Understanding Federated Identity and Single Sign-On
- Summary
- Exam Essentials
- Lab Exercises
- Understanding the Software Development Life Cycle
- Designing and Coding for Security
- Software Security Testing
- Summary
- Exam Essentials
- Lab Exercises
- Host Security Tools
- Monitoring and Analysis Tools
- Scanning and Testing Tools
- Network Security Tools
- Web Application Security Tools
- Forensics Tools
- Summary
Hands on Activities (Labs)
- Performing Reconnaissance on a Network
- Identifying Search Options in Metasploit
- Performing the Initial Scan
- Initiating an SSH Session from your Windows 10 Client to your Windows Server
- Conducting Vulnerability Scans
- Consulting a Vulnerability Database
- Examining the DDOS_Attack.pcap File
- Retrieving a Real-Time List of Running Processes
- Examining the Audited Events
- Adding Revision to the Revision History
- Viewing and Downloading the Policy Templates
- Opening the Policy Template and Setting the Company Name
- Reviewing and Modifying the Policy Items
- Inspecting the Vulnerability in the echo Server's Source Code
- Using the Process Explorer to View Specific Details About Running Processes on the System
- Making Syslog Entries Readable
- Installing Splunk on the Server
- Downloading and Running the Scanning Tools
- Working with Wireshark's Interface
- Analyzing the Capture File to Find the Attack(s)
- Generating Network Traffic and Using Filters
- Confirming the Spoofing Attack in Wireshark
- Starting a Live Packet Capture
| How many questions are asked in the exam? | The exam contains 85 questions. |
|---|---|
| What is the duration of the exam? | 165 minutes |
| What is the passing score? | 750 (on a scale of 0-900) |
| Which certification covers this exam? | |
| What are the career opportunities after passing this exam? |
|
Eduardo Snape
Fabián Navarro Quirós
Elan Wright
×