Overview

The Cisco CyberOps Associate course provides students with skills and knowledge to setup network infrastructure devices, operations, and vulnerabilities of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite. Students who have attended the CyberOps Associate online training course will gain competency with security concepts, common network application operations and attacks, the Windows and Linux operating systems, and the types of data used to investigate security incidents.

Exam Number: 200-201 – CBROPS

Skills Learned

After completing this online training course, students will be able to:

Describe the CIA triad
Describe NIST and ISO
Describe common security terms and concepts, like Assets, Threats, Exploits, Malware analysis, and more
Describe DoD Two Door policy
Describe CVSS
Describe data types in security monitoring
Describe network attacks, social engineering attacks, and endpoint-based attacks
Utilize different evidence types in logs
Analyze malware
Utilize network intrusion analysis
Identify intrusion using a PCAP file
Identify alerts from events
Implement security policies and procedures

Modules

1. Topic: Security Concepts - Class Recordings

1.1 CIA Triad and Security Standards10 min

1.2 Common Security Terms and Concepts24 min

1.3 Security Deployments13 min

1.4 Defense in Depth10 min

1.5 Access Control Models17 min

1.6 Common Vulnerability Scoring System (CVSS)8 min

2. Topic: Security Monitoring - Class Recordings

2.1 Attack Surface and Vulnerability Management14 min

2.2 Security Effects on Data Visibility21 min

2.3 Data Types in Security Monitoring11 min

2.4 Network Attacks12 min

2.5 Web Application Attacks15 min

2.6 Social Engineering10 min

2.7 Endpoint Based Attacks19 min

2.8 Certificates18 min

2.9 Certificate Components11 min

3. Topic: Host-Based Analysis - Class Recordings

3.1 Endpoint Security Technologies16 min

3.2 Operating System Components11 min

3.3 Attribution and Evidence11 min

3.4 OS, Application, and Command Line Logs18 min

3.5 Malware Analysis10 min

4. Topic: Network Intrusion Analysis - Class Recordings

4.1 Intrusion Event Identification15 min

4.2 Classifying Cybersecurity Events6 min

4.3 Packet Filtering, Inspection, and Analysis44 min

4.4 Identifying Alerts from Events24 min

4.5 Interpreting Basic Regular Expressions20 min

5. Topic: Security Policies and Procedures - Class Recordings

5.1 Management Concepts29 min

5.2 Computer Security Incidents25 min

5.3 Forensic Concepts15 min

5.4 Network and Server Profiling8 min

5.5 Protected and Sensitive Data5 min

5.6 Cyber Kill Chain and Diamond Model23 min

5.7 SOC Metrics4 min