Cisco 200-201 Understanding Cisco Cybersecurity Operations CBROPS Training - OEM Certkit

De Understanding Cisco Cybersecurity Operations Fundamentals CBROPS CertKit leert u beveiligingsconcepten, algemene netwerk- en applicatiebewerkingen en aanvallen, en de soorten gegevens die nodig zijn om beveiligingsincidenten te onderzoeken. In deze cursus leert u hoe u waarschuwingen en inbreuken kunt controleren en hoe u de vastgestelde procedures voor het reageren op waarschuwingen die in incidenten zijn omgezet, begrijpt en volgt. Je leert de essentiële vaardigheden, concepten en technologieën om een ​​bijdragend lid te zijn van een Cybersecurity Operations Center (SOC), inclusief inzicht in de IT-infrastructuur, operaties en kwetsbaarheden. Deze cursus helpt je bij de voorbereiding op de Cisco Certified CyberOps Associate-certificering en de rol van Junior of Entry-level cybersecurity operations-analist in een SOC.

Vereisten:
Om ten volle te profiteren van deze cursus, moet u over de volgende kennis en vaardigheden

beschikken:
Bekendheid met Ethernet- en TCP / IP-netwerken
Praktische kennis van de Windows- en Linux-besturingssystemen
Bekendheid met de basisprincipes van netwerkbeveiligingsconcepten.

Cursusinhoud

CBROPS: The CIA Triad & Security Approaches

Course: 1 Hour, 9 Minutes

• CBROPS Overview
• The CIA Triad
• Security Approaches
• Security Tools and Practices

CBROPS: Threat Actors, Security, & Risk Management

Course: 56 Minutes

• Threat Actor Types
• Differentiating Security Concepts
• Identifying Risk Management Methods

CBROPS: CVSS, Deployments, Access Control, & Data Visibility

Course: 1 Hour, 17 Minutes

• Common Vulnerability Scoring System
• Comparing Security Deployments
• Comparing Access Control Models
• Identifying Data Visibility Challenges

CBROPS: Data Loss, Host Isolation, & Detection Methods

Course: 52 Minutes

• Identifying Data Loss from Traffic Profiles
• Using the 5-tuple Approach to Isolate a Host
• Comparing Detection Methodologies

CBROPS: Attack Surfaces, Vulnerability, & Analysis Tools

Course: 30 Minutes

• Comparing Attack Surface and Vulnerability
• NetFlow and tcpdump

CBROPS: Firewall, Filtering, Visibility, & Control Data

Course: 1 Hour, 2 Minutes

• Identifying Firewall Data
• Identifying Content Filtering Data
• Identifying Application Visibility and Control Data
• Identifying Technology Impact on Data Visibility

CBROPS: Data & Attack Types

Course: 52 Minutes

• Network Security Data Types
• Network Attacks
• Web Application Attacks

CBROPS: Social Engineering, Evasion, Obfuscation, & Certificates

Course: 53 Minutes

• Social Engineering Attacks
• Evasion and Obfuscation
• Identifying Certificate Components

CBROPS: Host-based Analysis & the Role of Attribution

Course: 1 Hour, 10 Minutes

• Endpoint-based Attacks
• Windows 10 Components and Host-based Analysis
• Ubuntu Components and Host-based Analysis
• Attribution in an Investigation

CBROPS: Log Evidence, Disk Images, & Malware Analysis Output

Course: 52 Minutes

• Types of Log-based Evidence
• Comparing Disk Images
• Interpreting Output from Malware Analysis Tools

CBROPS: File Extraction, Event Artifacts, & Regular Expressions

Course: 1 Hour, 7 Minutes

• Extracting Files from a TCP Stream
• Identifying Intrusion Elements
• Interpreting Artifact Elements from an Event
• Interpreting Basic Regular Expressions

CBROPS: Incident Response, Security Management, & Analysis

Course: 55 Minutes

• NIST SP 800-86 Concepts
• Security Management Concepts
• SOC Metrics and Scope Analysis

CBROPS: Protected Data, Profiling, Forensics, & IRP

Course: 1 Hour, 8 Minutes

• Identifying Protected Data in a Network
• Identifying Network and Server Profiling Elements
• Integrating Forensic Elements into Incident Analysis