CompTIA Cybersecurity Analyst (CSA+) is an international, vendor-neutral IT professional certification that applies behavioral analytics to improve the overall state of IT security.

Private session

This training is available in a private or personalized format. It can be provided in one of our training centres or at your offices. Call one of our consultants of submit a request online.

Call now at 1 877 624.2344

Duration: 5 days
Regular price: On request

Course outline

Reference : Exam Number CS0-001

Duration : 5 days

Our scheduled trainings are offered in French. The educational material is in English.

© Comptia
CompTIA Cybersecurity Analyst (CSA+) is an international, vendor-neutral IT professional certification that applies behavioral analytics to improve the overall state of IT security. It validates the knowledge and skills required to configure and use threat detection tools, perform data analysis and interpret the results to identify vulnerabilities, threats and risks to an organization, with the end goal of securing and protecting applications and systems within an organization. Business intelligence, retail and financial services industries have successfully integrated the use of analytics for decades. Now, as attackers have learned to evade traditional signature-based solutions such as firewalls, an analytics-based approach within the IT security industry has become extremely important and essential for most organizations. The U.S. Bureau of Labor Statistics (BLS) predicts that information security analysts will be the fastest growing job category, with 37 percent overall growth between 2012 and 2022. The behavioral analytics skills covered by the CompTIA CSA+ certification identify and combat malware and advanced persistent threats (APTs), resulting in better threat visibility across a broad attack surface by focusing on network behavior, including an organization’s interior network. “Everybody in technology should have this. It should be mandatory if you’re going to stay in IT over the coming decade.” - Jim Lucari, Senior Manager, Certification Solutions Development, HP Enterprise
Audience	The CompTIA Cybersecurity Analyst (CSA+) examination is designed for IT security analysts, vulnerability analysts, or threat intelligence analysts. The exam will certify that the successful candidate has the knowledge and skills required to configure and use threat detection tools, perform data analysis, and interpret the results to identify vulnerabilities, threats, and risks to an organization with the end goal of securing and protecting applications and systems within an organization.
Prerequisites	Recommended: CompTIA Network+ Certification Recommended: CompTIA Security+ Certification 3-4 years of hands-on information security or related experience
Contents	Module 1 - Threat Management Given a scenario, apply environmental reconnaissance techniques using appropriate tools and processes Given a scenario, analyze the results of a network reconnaissance Given a network-based threat, implement or recommend the appropriate response and countermeasure Explain the purpose of practices used to secure a corporate environment Module 2 - Vulnerability Management Given a scenario, implement an information security vulnerability management process Given a scenario, analyze the output resulting from a vulnerability scan Compare and contrast common vulnerabilities found in the following targets within an organization Module 3 - Cyber Incident Response Given a scenario, distinguish threat data or behavior to determine the impact of an incident Given a scenario, prepare a toolkit and use appropriate forensics tools during an investigation Explain the importance of communication during the incident response process Given a scenario, analyze common symptoms to select the best course of action to support incident response Summarize the incident recovery and post-incident response process Module 4 - Security Architecture and Tool Sets Explain the relationship between frameworks, common policies, controls, and procedures Given a scenario, use data to recommend remediation of security issues related to identity and access management Given a scenario, review security architecture and make recommendations to implement compensating controls Given a scenario, use application security best practices while participating in the Software Development Life Cycle (SDLC) Compare and contrast the general purpose and reasons for using various cybersecurity tools and technologies

Human

Digital Tools

Technology

Data Science

Organizational Strategy

Project Management

Change region

COMPTIA - CSA+

Course outline