The CCNA Cybersecurity Operations curriculum provides an introduction to the knowledge and skills needed for a Network Security Specialist working with a Security Operations Center team. Students learn core security skills needed for monitoring, detecting, investigating, analyzing and responding to security events, thus protecting systems and organizations from cybersecurity risks, threats and vulnerabilities. Upon completion of this course, students can prepare for the Implementing Cisco Cybersecurity Operations (SECOPS)Certification Exam.
Learning Objectives
Explain common Linux file system terms.
Investigate common security vulnerability terms as they are defined in the Common Vulnerability Scoring System (CVSS).
Identify the fields in common protocol headers as they relate to intrusion analysis.
Identify the key elements in an intrusion from a given PCAP file.
Extract files from a TCP stream when given a PCAP file and Wireshark.
Identify cybersecurity operations tools.
Interpret common artifact elements from an event to identify an alert.
Select the correct data types used for the common compliance frameworks.
Identify the elements that should be included in an incident response plan as stated in NIST.SP800-61.
Classify intrusion events into categories as defined by the Cyber Kill Chain Model.
Framework Connections
Specialty Areas
- Customer Service and Technical Support
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.