Cisco CyberOps Associate CBROPS (200-201)

Het bijgewerkte certificeringsprogramma Cisco Certified CyberOps Associate valideert de dagelijkse tactische kennis en vaardigheden die Security Operations Center (SOC)-teams nodig hebben om cyberbeveiligingsbedreigingen te detecteren en erop te reageren.After completing this course you should be able to: • Explain how a SOC operates and describe the different types of services that are performed from a Tier 1 SOC analyst’s perspective. • Explain Network Security Monitoring (NSM) tools that are available to the network security analyst. • Explain the data that is available to the network security analyst. • Describe the basic concepts and uses of cryptography. • Describe security flaws in the TCP/IP protocol and how they can be used to attack networks and hosts. • Understand common endpoint security technologies. • Understand the kill chain and the diamond models for incident investigations, and the use of exploit kits by threat actors. • Identify resources for hunting cyber threats. • Explain the need for event data normalization and event correlation. • Identify the common attack vectors. • Identify malicious activities. • Identify patterns of suspicious behaviors. • Conduct security incident investigations. • Explain the use of a typical playbook in the SOC. • Explain the use of SOC metrics to measure the effectiveness of the SOC. • Explain the use of a workflow management system and automation to improve the effectiveness of the SOC. • Describe a typical incident response plan and the functions of a typical CSIRT. • Explain the use of VERIS to document security incidents in a standard format. • Describe the Windows operating system features and functionality. • Describe the Linux operating system features and functionality This course is designed for an associate-level cybersecurity analyst who is working in security operation centers. Recommended as preparation for the following exams: 200-201 - CBROPS Understanding Cisco Cybersecurity Operations Fundamentals Dit examen is optioneel en is niet inbegrepen in de cursusprijsEigen cursusmateriaal, Engelstalig.mbo+Attendees should meet the following prerequisites: Familiarity with Ethernet and TCP/IP networking Working knowledge of the Windows and Linux operating systems Familiarity with basics of networking security concepts