CompTIA CySA+ Sheffield Course (Exam CS0-001)

CySA+ Certification and Related Examinations

To achieve CySA+ certification, you'll need to pass the following exam:

• CompTIA CySA+ CS0-001 - foundation-level security skills and knowledge

Our Sheffield CySA+ course covers the CS0-001 examination syllabus and we provide additional preparation materials, including the MeasureUP Practice Test for CS0-001 and examination succcess guidance.

Audience

The CySA+ is recognised worldwide as the foundational certification for security experts. Here's a list of just some of the job roles that the CySA+ is a foundation for:

• Security Administrator
• Security Specialist
• Information Assurance Technician/Specialist (and Other Military-related Roles)
• Security Analyst
• Senior Cybersecurity Engineer/Architect

Contact us for an informal chat about the value of the CompTIA CySA+.

At Course Completion

After completing this course, students have covered the CompTIA CySA+ exam syllabus (exam CS0-001) which is presented under the follow domains:

• 1.0 Threat Management
• 2.0 Vulnerability Management
• 3.0 Cyber Incident Response
• 4.0 Security Architecture and Tool Sets

In particular, this will include the knowledge and skills to:

• Identify tools and techniques to use to perform an environmental reconnaissance of a target network or security system
• Collect, analyze, and interpret security data from multiple log and monitoring sources
• Use network host and web application vulnerability assessment tools and interpret the results to provide effective mitigation
• Understand and remediate identity management, authentication, and access control issues
• Participate in a senior role within an incident response team and use forensic tools to identify the source of an attack
• Understand the use of frameworks, policies, and procedures and report on security architecture with recommendations for effective compensating controls

Contact us to discuss the course objectives.

Prerequisites

The course is suitable for learners who have core IT and security skills and the following is recommended as a prerequisite:

• CompTIA Security+ certification or equivalent knowledge and skills
• CompTIA Network+ certification or equivalent knowledge and skills

Please contact us for further information.

CySA+ Course Materials

The courseware adheres to CompTIA's strict quality standards and is CompTIA Approved Quality Content (CAQC).

The CySA+ requires understanding of Server, PC and Networking technologies and we provide a very comprehensive CompTIA authorised set of 'labs' during the course to ensure you've relevant 'hands-on' experience.

Course Outline - Days One through Five

The public course duration is five days - for onsite and weekend courses this may be varied.

Below is the overview of the 4 Domains (knowledge and skill areas). The course design is based on the listed domains and provides in-depth concepts and hands-on skill development for each.

• 1.0 Threat Management
• 2.0 Vulnerability Management
• 3.0 Cyber Incident Response
• 4.0 Security Architecture and Tool Sets

Module 1 / Threat Management (1)

Cybersecurity Analysts

• Cybersecurity Roles and Responsibilities
• Frameworks and Security Controls
• Risk Evaluation
• Penetration Testing Processes

Reconnaissance Techniques

• The Kill Chain
• Open Source Intelligence
• Social Engineering
• Topology Discovery
• Service Discovery
• OS Fingerprinting
• Labs
• OSINT
• VM Orientation
• Host, Topology, and Service Discovery with Nmap Course overview

Module 2 / Vulnerability Management

Managing Vulnerabilities

• Vulnerability Management Requirements
• Asset Inventory
• Data Classification
• Vulnerability Management Processes
• Vulnerability Scanners
• Microsoft Baseline Security Analyzer
• Vulnerability Feeds and SCAP
• Configuring Vulnerability Scans
• Vulnerability Scanning Criteria
• Exploit Frameworks
• Labs
• Vulnerability Scanning with OpenVAS and MBSA

Remediating Vulnerabilities

• Analyzing Vulnerability Scans
• Remediation and Change Control
• Remediating Host Vulnerabilities
• Remediating Network Vulnerabilities
• Remediating Virtual Infrastructure Vulnerabilities

Secure Software Development

• Software Development Lifecycle
• Software Vulnerabilities
• Software Security Testing
• Interception Proxies
• Web Application Firewalls
• Source Authenticity
• Reverse Engineering
• Labs
• Web Application Testing with Nikto and Burpsuite

Module 3 / Threat Management (2)

Security Appliances

• Configuring Firewalls
• Intrusion Detection and Prevention
• Configuring IDS
• Malware Threats
• Configuring Anti-virus Software
• Sysinternals
• Enhanced Mitigation Experience Toolkit
• Labs
• Network Security Monitoring with Snort and Security Onion
• Malware Analysis with Sysinternals

Logging and Analysis

• Packet Capture
• Packet Capture Tools
• Monitoring Tools
• Log Review and SIEM
• SIEM Data Outputs
• SIEM Data Analysis
• Point-in-Time Data Analysis
• Labs
• Packet Analysis with Wireshark and Network Miner
• SIEM with OSSIM

Module 4 / Cyber Incident Response

Incident Response

• Incident Response Processes
• Threat Classification
• Incident Severity and Prioritization
• Types of Data

Forensics Tools

• Digital Forensics Investigations
• Documentation and Forms
• Digital Forensics Crime Scenes
• Digital Forensics Kits
• Image Acquisition
• Password Cracking
• Analysis Utilities
• Labs
• Forensic Image Analysis with Autopsy

Incident Analysis and Recovery

• Analysis and Recovery Frameworks
• Analyzing Network Symptoms
• Analyzing Host Symptoms
• Analyzing Data Exfiltration
• Analyzing Application Symptoms
• Using Sysinternals
• Containment Techniques
• Eradication Techniques
• Validation Techniques
• Corrective Actions
• Labs
• Red Team Versus Blue Team Course overview

Module 5 / Security Architecture

Secure Network Design

• Network Segmentation
• Blackholes, Sinkholes, and Honeypots
• System Hardening
• Group Policies and MAC
• Endpoint Security
• Labs
• Network Segmentation with pfSense

Managing Identities and Access

• Network Access Control
• Identity Management
• Identity Security Issues
• Identity Repositories
• Context-based Authentication
• Single Sign On and Federation
• Exploiting Identities
• Exploiting Web Browsers and Applications
• Labs
• Secure Appliance Administration
• Email Spoofing and XSS

Security Frameworks and Policies

• Frameworks and Compliance
• Reviewing Security Architecture
• Procedures and Compensating Controls
• Verifications and Quality Control
• Security Policies and Procedures
• Personnel Policies and Training