CompTIA Cybersecurity Analyst CySA+ Exam Preparation
PDF Add to WishList
Government and enterprise organizations are facing a skyrocketing volume of sophisticated cyber threats. As these threats evolve, the need for IT security professionals who can detect and combat these threats while constructing a comprehensive security strategy grows. Cyber Security certifications validate your skills as a cybersecurity analyst, providing you with an analytical approach to cybersecurity, and knowledge of network security tools and techniques to combat threats.
Designed specifically for experienced information security professionals preparing to take the CySA+ exam, this course can help you prepare for the CompTIA CySA+ certification exam with hands-on, scenario-based training, so you'll be ready to meet Advanced Persistent Threats (APTs) head on.
You Will Learn How To
- Prepare for and pass the Cybersecurity Analyst (CySA+) exam
- Identify tools and techniques used to perform environmental reconnaissance of a target network or security system
- Use network host and web application vulnerability assessment tools and interpret the results to provide effective mitigation
- Participate in a senior role within an incident response team and use forensic tools to identify the source of an attack
- Understand the use of frameworks, policies, and procedures, and report on security architecture with recommendations for effective compensating controls
Important Course Information
Requirements
- IT Security Professionals must have 3-4 years of hands-on information security or related experience at the level of Network+ or Security+
Recommended Experience
- It is recommended that you have the following skills and knowledge before starting this course:
- Knowledge of basic network terminology and functions (such as OSI Model, Topology, Ethernet, Wi-Fi, switches, routers)
- Understanding of TCP/IP addressing, core protocols, and troubleshooting tools
- Network attack strategies and defenses
- Knowledge of the technologies and uses of cryptographic standards and products
- Network- and host-based security technologies and practices
- Standards and products used to enforce security on web and communications technologies
- It is recommended that you have the following skills and knowledge before starting this course:
Exam Information
- Course tuition includes an exam voucher. The exam is offered through Pearson Vue.
Certification Information
- To earn this certification, you must take and pass CompTIA exam CS0-001
- You must earn 60 CompTIA CEUs over a three-year period to maintain CySA+ certification
- Maintain your CompTIA certification with CEU-approved training. Learn More ›
- This is a CompTIA certification prep course. Click here to view more CompTIA certification prep training ›
Course Outline
- Module 1: Threat Management 1
Cybersecurity analysts
- Cybersecurity roles and responsibilities
- Frameworks and security controls
- Risk evaluation
- Penetration testing processes
Reconnaissance techniques
- The kill chain
- Open source intelligence
- Social engineering
- Topology discovery
- Service discovery
- OS fingerprinting
- Module 2: Threat Management 2
Security appliances
- Configuring firewalls
- Intrusion detection and prevention
- Configuring IDS
- Malware threats
- Configuring anti-virus software
- Sysinternals
- Enhanced mitigation experience toolkit
Logging and analysis
- Packet capture
- Packet capture tools
- Monitoring tools
- Log review and SIEM
- SIEM data outputs
- SIEM data analysis
- Point-in-time data analysis
- Module 3: Vulnerability Management
Managing vulnerabilities
- Vulnerability management requirements
- Asset inventory
- Data classification
- Vulnerability management processes
- Vulnerability scanners
- Microsoft baseline security analyzer
- Vulnerability feeds and SCAP
- Configuring vulnerability scans
- Vulnerability scanning criteria
- Exploit frameworks
Remediating vulnerabilities
- Analyzing vulnerability scans
- Remediation and change control
- Remediating host vulnerabilities
- Remediating network vulnerabilities
- Remediating virtual infrastructure vulnerabilities
Secure software development
- Software development life cycle
- Software vulnerabilities
- Software security testing
- Interception proxies
- Web application firewalls
- Source authenticity
- Reverse engineering
- Module 4: Cyber Incident Response
Incident response
- Incident response processes
- Threat classification
- Incident severity and prioritization
- Types of data
Forensics tools
- Digital forensics investigations
- Documentation and forms
- Digital forensics crime scenes
- Digital forensics kits
- Image acquisition
- Password cracking
- Analysis utilities
Incident analysis and recovery
- Analysis and recovery frameworks
- Analyzing network symptoms
- Analyzing host symptoms
- Analyzing data exfiltration
- Analyzing application symptoms
- Using sysinternals
- Containment techniques
- Eradication techniques
- Validation techniques
- Corrective actions
- Module 5: Security Architecture
Secure network design
- Network segmentation
- Blackholes, sinkholes, and honeypots
- System hardening
- Group policies and MAC
- Endpoint security
Managing identities and access
- Network access control
- Identity management
- Identity security issues
- Identity repositories
- Context-based authentication
- Single sign on and federation
- Exploiting identities
- Exploiting web browsers and applications
Security frameworks and policies
- Frameworks and compliance
- Reviewing security architecture
- Procedures and compensating controls
- Verifications and quality control
- Security policies and procedures
- Personnel policies and training
Convenient Ways to Attend This Instructor-Led Course
Hassle-Free Enrollment: No advance payment required to reserve your seat.
Tuition due 30 days after you attend your course.
In the Classroom
Live, Online
Private Team Training
In the Classroom — OR — Live, Online
Tuition — Standard: $3290 Government: $2833
Jul 23 - 27
(5 Days)
9:00 AM - 4:30 PM EDT
Rockville, MD / Online (AnyWare)
Reserve Your Seat
Sep 17 - 21
(5 Days)
9:00 AM - 4:30 PM EDT
New York / Online (AnyWare)
Reserve Your Seat
Nov 26 - 30
(5 Days)
9:00 AM - 4:30 PM EST
Herndon, VA / Online (AnyWare)
Reserve Your Seat
Jan 14 - 18
(5 Days)
9:00 AM - 4:30 PM EST
Rockville, MD / Online (AnyWare)
Reserve Your Seat
Mar 18 - 22
(5 Days)
9:00 AM - 4:30 PM EDT
New York / Online (AnyWare)
Reserve Your Seat
May 13 - 17
(5 Days)
9:00 AM - 4:30 PM EDT
Herndon, VA / Online (AnyWare)
Reserve Your Seat
Guaranteed to Run
When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time, location — will run. Guaranteed.Private Team Training
Enrolling at least 3 people in this course? Consider bringing this (or any course that can be custom designed) to your preferred location as a private team training.
For details, call 1-888-843-8733 or Click Here »
Tuition
Standard
Government
In Classroom or
Online
Standard
$3290
Government
$2833
Private Team Training
Course Tuition Includes:
Training Hours
Training Hours: 9:00 am – 5:00 pm ETEnhance Your Credentials with Professional Certification
Learning Tree's comprehensive training and exam preparation guarantees that you will gain the knowledge and confidence to achieve professional certification and advance your career.
This course is approved by CompTIA for continuing education units (CEUs). For additional information and to confirm which courses are eligible towards your CompTIA certification, click here.