CCNA Cyber Ops CBROPS

Topics covered in this Cisco CCNA eLearning course

Introduction

• The Cisco CyberOps Associate Certification
• The Exam Objectives (Domains)
• Steps to Pass the Exam
• Signing Up for the Exam
• Facts About the Exam
• About the Cisco CyberOps Associate CBROPS
• Official Cert Guide

Cybersecurity Fundamentals

• Introduction to Cybersecurity
• Threats, Vulnerabilities, and Exploits
• Network Security Systems
• Intrusion Detection Systems and Intrusion Prevention Systems
• Advanced Malware Protection
• Web Security Appliance
• Email Security Appliance
• Cisco Security Management Appliance
• Cisco Identity Services Engine
• Security Cloud-Based Solutions
• Cisco NetFlow
• Data Loss Prevention
• The Principles of the Defense-in-Depth Strategy
• Confidentiality, Integrity, and Availability: The CIA Triad
• Risk and Risk Analysis
• Personally Identifiable Information and Protected Health Information
• Principle of Least Privilege and Separation of Duties
• Security Operations Centers
• Playbooks, Runbooks, and Runbook Automation
• Digital Forensics
• Review

Introduction to Cloud Computing and Cloud Security

• Cloud Computing and the Cloud Service Models
• Cloud Security Responsibility Models
• DevOps, Continuous Integration (CI), Continuous Delivery (CD), and DevSecOps
• Understanding the Different Cloud Security Threats
• Review

Access Control Models

• Information Security Principles
• Subject and Object Definition
• Access Control Fundamentals
• Access Control Process
• Information Security Roles and Responsibilities
• Access Control Types
• Access Control Models
• Access Control Mechanisms
• Identity and Access Control Implementation
• Review

Types of Attacks and Vulnerabilities

• Types of Attacks
• Types of Vulnerabilities
• Review

Fundamentals of Cryptography and Public Key Infrastructure (PKI)

• Cryptography
• Block and Stream Ciphers
• Symmetric and Asymmetric Algorithms
• Hashes
• Digital Signatures
• Next-Generation Encryption Protocols
• IPsec and SSL/TLS
• Fundamentals of PKI
• Root and Identity Certificates
• Revoking Digital Certificates
• Using Digital Certificates
• Review

Introduction to Virtual Private Networks (VPNs)

• What Are VPNs?
• Site-to-Site vs. Remote-Access VPNs
• An Overview of IPsec
• SSL VPNs
• Review

Introduction to Security Operations Management

• Introduction to Identity and Access Management
• Security Events and Log Management
• Asset Management
• Introduction to Enterprise Mobility Management
• Configuration and Change Management
• Vulnerability Management
• Patch Management
• Review

Fundamentals of Intrusion Analysis

• Introduction to Incident Response
• The Incident Response Plan
• The Incident Response Process
• Information Sharing and Coordination
• Incident Response Team Structure
• Common Artifact Elements and Sources of Security Events
• Understanding Regular Expressions
• Protocols, Protocol Headers, and Intrusion Analysis
• How to Map Security Event Types to Source Technologies
• Review

Introduction to Digital Forensics

• Introduction to Digital Forensics
• The Role of Attribution in a Cybersecurity Investigation
• The Use of Digital Evidence Evidentiary
• Chain of Custody
• Reverse Engineering
• Fundamentals of Microsoft Windows Forensics
• Fundamentals of Linux Forensics
• Review

Network Infrastructure Device Telemetry and Analysis

• Network Infrastructure Logs
• Traditional Firewall Logs
• NetFlow Analysis
• Network Packet Capture
• Network Profiling
• Review

Endpoint Telemetry and Analysis

• Understanding Host Telemetry
• Host Profiling
• Analysing Windows Endpoints
• Linux and macOS Analysis
• Endpoint Security Technologies
• Review

Challenges in the Security Operations Center (SOC)

• Security Monitoring Challenges in the SOC
• Additional Evasion and Obfuscation Techniques
• Review

The Art of Data and Event Analysis

• Normalizing Data
• Using the 5-Tuple Correlation to Respond to Security Incidents
• Using Retrospective Analysis and Identifying Malicious Files
• Mapping Threat Intelligence with DNS and Other Artifacts
• Using Deterministic Versus Probabilistic Analysis
• Review

Classifying Intrusion Events into Categories

• Diamond Model of Intrusion
• Cyber Kill Chain Model
• The Kill Chain vs. MITRE’s ATT&CK
• Review

Introduction to Threat Hunting

• What Is Threat Hunting?
• The Threat-Hunting Process
• Threat Hunting and MITRE’s ATT&CK
• Threat-Hunting Case Study
• Threat Hunting, Honeypots, Honeynets, and Active Defense

Assessment

• Once you successfully pass the programme(s), you will be able to download a CMIT Digital Certificate of Completion.
• You may optionally take exams to receive certification. Exam fees are not included in the course price. More information on exams can be found on the CMIT exam page.
• More information on accreditation can be found on the CMIT Accreditation Details page.