What you will learn

The goal of the training is to provide participants with the knowledge and qualifications needed to teach the Cisco Networking Academy curriculum, within the framework of the international Cisco Networking Academy educational network. The Cybersecurity Operations Associate certification is designed for those who wish to work in security analyst or other security-related positions. The training topics include threat detection, response techniques, and network traffic analysis.

Course description

This course prepares participants to monitor security systems as a cybersecurity analyst in a Security Operations Center (SOC), detect cybersecurity attacks and threats, and, when possible, respond to them.

Recommended for

The target audience of the training primarily consists of individuals with basic IT knowledge who are seeking career-oriented, entry-level security analyst skills.

Training Topics

• Understanding Defense
• Defense in Depth
• Security Policies, Regulations, and Standards
• Access Control
• Basic Concepts of Access Control, the Use and Functioning of AAA
• Threat Detection
• Information Sources
• Threat Detection Services
• Cryptography
• Integrity and Authenticity
• Confidentiality
• Public Key Encryption
• Authorities and the PKI Trust System
• Applications and Impacts of Cryptography
• Endpoint Protection
• Malware Protection
• Host-based Intrusion Prevention
• Application Security (Using Sandboxes for Malware Analysis)
• Endpoint Vulnerability Assessment
• Network and Server Profiling
• Common Vulnerability Scoring System (CVSS)
• Secure Device Management
• Information Security Management Systems
• Technologies and Protocols
• Monitoring Common Network Protocols
• Impact of Security Technologies on Common Network Protocols
• Network Security Data
• Types of Security Data
• End-Device Logs
• Server Logs
• Alert Evaluation
• Alert Structure
• Alert Classification
• Working with Network Security Data
• Preparing Data for Use in Network Security Monitoring (NSM) Systems
• Using Security Onion Tools to Investigate Network Security Events
• Learning to Manage Network Monitoring Tools that Improve Workflows
• Digital Forensics, Incident Analysis, and Response
• Evidence Handling and Attack Attribution
• The Cyber Kill Chain Steps
• Classifying Attacks Using the Intrusion Analysis Diamond Model
• Incident Response (Applying NIST 800-61r2 Incident Response Procedures)

Entry requirements

Basic IT knowledge.

Expected Duration/Intensity of the Training

One semester, in 5 sessions of 8 hours each.