CompTIA Cybersecurity Analyst (CySA+) is an intermediate-level certification that validates your cybersecurity analyst skills and demonstrates the importance of risk mitigation of combating threats to networks and devices through continuous security monitoring. It is the only intermediate high-stakes cybersecurity analyst certification with both hands-on, performance-based questions and multiple-choice to prove you have the most up to date security analyst skills.

Stand Out in Cybersecurity!

COMPTIA CYSA+ GIVES YOU THE CONFIDENCE TO: 

LEAD INCIDENT DETECTION, PREVENTION & RESPONSE

Demonstrate Competency of Current Trends
Make yourself a valuable team member and show your knowledge of current trends that affect the daily work of security analysts, such as cloud and hybrid environments.

Proactively Monitor and Detect
Demonstrate your skills in detecting and analyzing indicators of malicious activity using the most up-to-date methods and tools, such as threat intelligence, security information and event management (SIEM), endpoint detection and response (EDR) and extended detection and response (XDR).

Respond to Threats, Attacks and Vulnerabilities
Prove your knowledge of incident response and vulnerability management processes and highlight the communication skills critical to security analysis and compliance

What you’ll learn

This training, once completed, will provide candidates the knowledge and skills required to leverage intelligence and threat detection techniques, analyze and interpret data, identify and address vulnerabilities, suggest preventative measures, and effectively respond to and recover from incidents.

Possible job opportunities: 

·        Security Analyst
·        Threat Intelligence Analyst
·        Application Security Analyst
·        Incident Response or Handler
·        Security Engineer
·        Threat Hunter
·        Compliance Analyst

What is CertMaster Learn integrated with CompTIA Labs?

CertMaster Learn is a self-paced, comprehensive online learning experience that helps you gain the knowledge and practical skills necessary to be successful on your CompTIA certification exam, and in your IT career. A Learning Plan helps you stay on track with your studies, while robust analytics bring awareness of strengths and weaknesses.

CompTIA Labs make it easy for you to practice and apply your skills in real workplace scenarios in preparation for the certification exam. All lab activities use real equipment and software, are based on scenarios found in the workplace, and align with CompTIA exam objectives.

When purchased with your course, CertMaster Learn bundles the CompTIA Labs which are integrated as Study Tasks within the Learning Plan, accessible through a single login and seamless workflow.

Topics Covered

Lesson 1: Understanding Vulnerability Response, Handling, and Management
Lesson 2: Exploring Threat Intelligence and Threat Hunting Concepts
Lesson 3: Explaining Important System and Network Architecture Concepts
Lesson 4: Understanding Process Improvement in Security Operations
Lesson 5: Implementing Vulnerability Scanning Methods
Lesson 6: Performing Vulnerability Analysis
Lesson 7: Communicating Vulnerability Information
Lesson 8: Explaining Incident Response Activities
Lesson 9: Demonstrating Incident Response Communication
Lesson 10: Applying Tools to Identify Malicious Activity
Lesson 11: Analyzing Potentially Malicious Activity
Lesson 12: Understanding Application Vulnerability Assessment
Lesson 13: Exploring Scripting Tools and Analysis Concepts
Lesson 14: Understanding Application Security and Attack Mitigation Best Practices

Integrated Labs

Assisted Lab: Exploring the Lab Environment
Assisted Lab: Configuring Controls
Assisted Lab: Reviewing IoC and Threat Intelligence Sources
Assisted Lab: Performing Threat Hunting
Assisted Lab: Configuring Centralized Logging
APPLIED LAB: Performing System Hardening
Assisted Lab: Assess Time Synch Errors
Assisted Lab: Configuring Automation
Assisted Lab: Performing Asset Discovery
Assisted Lab: Performing Vulnerability Scanning
Assisted Lab: Performing Passive Scanning
Assisted Lab: Establishing Context Awareness
Assisted Lab: Analyzing Vulnerability Reports
Assisted Lab: Detecting Legacy Systems
APPLIED LAB: Performing Post-Incident Forensic Analysis
APPLIED LAB: Performing IoC Detection and Analysis
ADAPTIVE LAB: Performing Playbook Incident Response
APPLIED LAB: Collecting Forensic Evidence
Assisted Lab: Performing Root Cause Analysis
APPLIED LAB: Using Network Sniffers
APPLIED LAB: Researching DNS and IP Reputation
Assisted Lab: Using File Analysis Techniques
Assisted Lab: Analyzing Potentially Malicious Files
Assisted Lab: Using Nontraditional Vulnerability Scanning Tools
APPLIED LAB: Performing Web Vulnerability Scanning
Assisted Lab: Exploiting Weak Cryptography
Assisted Lab: Performing and Detecting Directory Traversal and Command Injection
Assisted Lab: Performing and Detecting Privilege Escalation
Assisted Lab: Performing and Detecting XSS
Assisted Lab: Performing and Detecting LFI/RFI
Assisted Lab: Performing and Detecting SQLi
Assisted Lab: Performing and Detecting CSRF
APPLIED LAB: Detecting and Exploiting Security Misconfiguration

License Information

Attend Live Training in a Classroom or Online

------------------------------------------------------------------------------------------------------
Exam Details – CompTIA CySA+

Exam Codes | CS0-003
Launch Date | June 6, 2023
Exam Description | The CompTIA Cybersecurity Analyst (CySA+) certification verifies that successful candidates have the knowledge and skills required to detect and analyze indicators of malicious activity, understand threat intelligence and threat management, respond to attacks and vulnerabilities, perform incident response, and report and communicate related activity.

Number of Questions | Maximum of 85 questions
Type of Questions | Multiple choice and performance-based
Length of Test | 165 minutes
Passing Score | 750 (on a scale of 100-900)

Recommended Experience | Network+, Security+ or equivalent knowledge. Minimum of 4 years of hands-on experience as an incident response analyst or security operations center (SOC) analyst, or equivalent experience.

Languages | English, with Japanese, Portuguese and Spanish to follow
Retirement | TBD – Usually three years after launch

DoD 8140 Approved Work Roles | All Source Analyst, Warning Analyst, Forensics Analyst, Cyber Defense Forensics Analyst, Cyber Crime Investigator, Systems Security Analyst, Cyber Defense Analyst, Cyber Defense Incident Responder, Vulnerability Assessment Analyst, Security Control Assessor

Testing Provider | Pearson VUE
Testing Centers Online Testing