CompTIA CySa+

CompTIA Cybersecurity Analyst (CySA+) is a certification for cyber professionals tasked with incident detection, prevention and response through continuous security monitoring.

What skills will you learn?

1. Security Operations.

   Improve processes in security operations and differentiate between threat intelligence and threat hunting concepts; identify and analyze malicious activity using the appropriate tools and techniques.

2. Vulnerability Management.

   Implement and analyze vulnerability assessments, prioritize vulnerabilities and make recommendations on mitigating attacks and vulnerability response.

3. Incident Response and Management.

   Apply updated concepts of attack methodology frameworks, perform incident response activities and understand the incident management lifecycle.

4. Reporting and Communication.

   Apply communication best practices in vulnerability management and incident response as it relates to stakeholders, action plans, escalation and metrics.

Course Outline

Lesson 1: Understanding Vulnerability Response, Handling, and Management

Lesson 2: Exploring Threat Intelligence and Threat Hunting Concepts

Lesson 3: Explaining Important System and Network Architecture Concepts

Lesson 4: Understanding Process Improvement in Security Operations

Lesson 5: Implementing Vulnerability Scanning Methods

Lesson 6: Performing Vulnerability Analysis

Lesson 7: Communicating Vulnerability Information

Lesson 8: Explaining Incident Response Activities

Lesson 9: Demonstrating Incident Response Communication

Lesson 10: Applying Tools to Identify Malicious Activity

Lesson 11: Analyzing Potentially Malicious Activity

Lesson 12: Understanding Application Vulnerability Assessment

Lesson 13: Exploring Scripting Tools and Analysis Concepts

Lesson 14: Understanding Application Security and Attack Mitigation Best Practices

CompTIA CySA+ Certification Exam Overview 

​

The CompTIA Cybersecurity Analyst (CySA+) certification validates an individual's ability to perform cybersecurity analysis, specifically in areas like security analytics, threat detection, and incident response. It's an intermediate-level certification designed for professionals tasked with analyzing data to identify vulnerabilities, threats, and risks to an organization. This exam is compliant with ISO 17024 standards and approved by the U.S. Department of Defense (DoD) for Directive 8570.01-M requirements. 

​

Target Audience

This certification is aimed at those looking for more advanced roles in cybersecurity, such as security analyst, security operations center (SOC) analyst, and vulnerability analyst. 

​

How to earn this certification?

​

Candidates must complete CS0-003 exam code. ​

​

Skills Overview 

​

• Security Operations. Improve processes in security operations and differentiate between threat intelligence and threat hunting concepts; identify and analyze malicious activity using the appropriate tools and techniques. 

• Vulnerability Management. Implement and analyze vulnerability assessments, prioritize vulnerabilities and make recommendations on mitigating attacks and vulnerability response.

• Incident Response and Management. Apply updated concepts of attack methodology frameworks, perform incident response activities and understand the incident management lifecycle. 

• Reporting and Communication. Apply communication best practices in vulnerability management and incident response as it relates to stakeholders, action plans, escalation and metrics.