CompTIA Cybersecurity Analyst (CySA+) Course & Labs
(CySA-plus)
/ ISBN: 9781616910259
This course includes
Lessons
TestPrep
LiveLab
CompTIA Cybersecurity Analyst (CySA+) Course & Labs
Kick start your prep for the CompTIA CySA+ CS0-001 certification exam with the CompTIA Cybersecurity Analyst (CySA+) course and lab. The lab simulates real-world, hardware, software, and command-line interface environments and can be mapped to any text-book, course or training. The study guide provides complete coverage of the CS0-001 exam objectives and includes topics such as policy and compliance; forensic analysis, vulnerability scans, identity and access management security; and many more. The CompTIA Cybersecurity Analyst CS0-001 certification exam is designed for IT security analysts, vulnerability analysts, or threat intelligence analysts.
The CompTIA Cybersecurity Analyst (CySA+) is an international, vendor-neutral credential that applies behavioral analytics to improve the overall state of IT security. CompTIA CySA+ certification exam validates the critical knowledge and skills that are required to prevent, detect, and combat cybersecurity threats. The exam validates the expertise of professionals to configure and use threat detection tools; perform data analysis, interpret the results to identify vulnerabilities, and much more.
Lessons
-
14+ Lessons
-
380+ Quizzes
-
66+ Flashcards
-
66+ Glossary of terms
Test Preps
-
85+ Pre Assessment Questions
-
85+ Post Assessment Questions
Lab
-
23+ Performance lab
-
23+ Video tutorials
- What Does This Book Cover?
- Setting Up a Kali and Metasploitable Learning Environment
- Setting Up Your Environment
- Objectives Map for CompTIA Cybersecurity Analyst (CySA+) Exam CS0-001
- Cybersecurity Objectives
- Evaluating Security Risks
- Building a Secure Network
- Secure Endpoint Management
- Penetration Testing
- Reverse Engineering
- Summary
- Exam Essentials
- Lab Exercises
- Footprinting
- Passive Footprinting
- Gathering Organizational Intelligence
- Detecting, Preventing, and Responding to Reconnaissance
- Summary
- Exam Essentials
- Lab Exercises
- Identifying Vulnerability Management Requirements
- Configuring and Executing Vulnerability Scans
- Developing a Remediation Workflow
- Overcoming Barriers to Vulnerability Scanning
- Summary
- Exam Essentials
- Lab Exercises
- Reviewing and Interpreting Scan Reports
- Validating Scan Results
- Common Vulnerabilities
- Summary
- Exam Essentials
- Lab Exercises
- Security Incidents
- Phases of Incident Response
- Building the Foundation for Incident Response
- Creating an Incident Response Team
- Coordination and Information Sharing
- Classifying Incidents
- Summary
- Exam Essentials
- Lab Exercises
- Analyzing Network Events
- Handling Network Probes and Attacks
- Investigating Host Issues
- Investigating Service and Application Issues
- Summary
- Exam Essentials
- Lab Exercises
- Building a Forensics Capability
- Understanding Forensic Software
- Conducting a Forensic Investigation
- Forensic Investigation: An Example
- Summary
- Exam Essentials
- Lab Exercises
- Containing the Damage
- Incident Eradication and Recovery
- Wrapping Up the Response
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Policy Documents
- Complying with Laws and Regulations
- Adopting a Standard Framework
- Implementing Policy-Based Controls
- Security Control Verification and Quality Control
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Defense in Depth
- Implementing Defense in Depth
- Analyzing Security Architecture
- Summary
- Exam Essentials
- Lab Exercises
- Understanding Identity
- Threats to Identity and Access
- Identity as a Security Layer
- Understanding Federated Identity and Single Sign-On
- Summary
- Exam Essentials
- Lab Exercises
- Understanding the Software Development Life Cycle
- Designing and Coding for Security
- Software Security Testing
- Summary
- Exam Essentials
- Lab Exercises
- Host Security Tools
- Monitoring and Analysis Tools
- Scanning and Testing Tools
- Network Security Tools
- Web Application Security Tools
- Forensics Tools
- Summary
Hands on Activities (Labs)
- Performing Reconnaissance on a Network
- Identifying Search Options in Metasploit
- Performing the Initial Scan
- Initiating an SSH Session from your Windows 10 Client to your Windows Server
- Conducting Vulnerability Scans
- Consulting a Vulnerability Database
- Examining the DDOS_Attack.pcap File
- Retrieving a Real-Time List of Running Processes
- Examining the Audited Events
- Adding Revision to the Revision History
- Viewing and Downloading the Policy Templates
- Opening the Policy Template and Setting the Company Name
- Reviewing and Modifying the Policy Items
- Inspecting the Vulnerability in the echo Server's Source Code
- Using the Process Explorer to View Specific Details About Running Processes on the System
- Making Syslog Entries Readable
- Installing Splunk on the Server
- Downloading and Running the Scanning Tools
- Working with Wireshark's Interface
- Analyzing the Capture File to Find the Attack(s)
- Generating Network Traffic and Using Filters
- Confirming the Spoofing Attack in Wireshark
- Starting a Live Packet Capture
| What are the prerequisites for this exam? | Network+, Security+ or equivalent knowledge. Minimum of 3-4 years of hands-on information security or related experience. While there is no required prerequisite, CySA+ is intended to follow CompTIA Security+ or equivalent experience and has a technical, hands-on focus. |
|---|---|
| What is the exam registration fee? | USD 349 |
| Where do I take the exam? | Pearson VUE |
| What is the format of the exam? | Multiple-choice and performance-based |
| How many questions are asked in the exam? | The exam contains 85 questions. |
| What is the duration of the exam? | 165 minutes |
| What is the passing score? | 750 (on a scale of 0-900) |
| What is the exam's retake policy? | Here are the retake policies:
|
| What is the validity of the certification? | CompTIA CySA+ certification expires after three years from the date of issue, after which the certification holder will need to renew their certification via CompTIA's Continuing Education Program. |
| Where can I find more information about this exam? | To know more about the CySA-plus, click here. |
| Which certification covers this exam? | |
| What are the career opportunities after passing this exam? |
|
Chukwuka Samuel Isaac
Mike McNutt
Gregory Loflin
×