ZCIS1061 - Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Course Description

In preparation for the Cisco Certified CyberOps Associate (200-201 CBROPS) exam the student will learn the key parts of securing information systems.

Course Outline

EXAM: 200-201

TOPICS COVERED:

• Security concepts
• Security monitoring
• Host-based analysis
• Network intrusion analysis
• Security policies and procedures

Learner Outcomes

LEARNING OUTCOMES:

• Compare security deployments
• Network, endpoint, and application security systems
• Describe security terms
• Run book automation (RBA)
• Reverse engineering
• Sliding window anomaly detection
• Principle of least privilege
• Zero trust
• Threat intelligence platform (TIP)
• Security Monitoring
• Compare attack surface and vulnerability
• TCP dump
• Next-gen firewall
• Traditional stateful firewall
• Application visibility and control
• Web content filtering
• Email content filtering
• Security Monitoring
• Compare attack surface and vulnerability
• Describe evasion techniques
• Describe the impact of certificates on security
• Host-based intrusion detection
• Antimalware and antivirus
• Host-based firewall
• Identify type of evidence used based on provided logs
• Network Intrusion Analysis
• IDS/IPS
• Firewall
• Network application control
• Proxy logs
• Transaction data (NetFlow)

Notes

Text Book: ISBN: 10: 0-13-680783-6

PUBLISHER: Ciscopress

TITLE: Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

Author: Omar Santos