Prepare for the CompTIA CySA+ certification exam with this easy-to-follow course. Learn the main cybersecurity concepts you need to understand for the exam and for a cybersecurity analyst role. This course covers important topics such as vulnerability management, SIEM, log analysis, network security, incident response, threat hunting, identity security, cloud security, and security architecture. You will first learn about the CySA+ exam, the analyst mindset, the attack lifecycle, security operations, Indicators of Compromise (IOC), Indicators of Attack (IOA), and how to approach scenario-based questions. Next, you will learn about Vulnerability Management. You will understand CVE, CWE, CVSS, risk, severity, exploitability, vulnerability scanning, remediation, false positives, and compensating controls. You will also see practical examples using tools such as Nmap, OpenVAS, and Burp Suite.
The course then covers SIEM and Log Analysis. You will learn about log collection, SIEM systems, alert checking, threat intelligence, threat hunting, and how to find suspicious activity in security logs. In Network Security Analysis, you will learn how to understand network traffic and identify common attacks such as DNS attacks, C2 beaconing, data exfiltration, brute-force attacks, and protocol problems. You will also learn the basics of Incident Response and Threat Hunting. This includes containment, eradication, recovery, evidence handling, ransomware analysis, root-cause analysis, IOC enrichment, and ATT&CK mapping. The course also covers important security topics such as MFA, SSO, IAM, least privilege, Zero Trust, segmentation, and cloud security.
