Implementing Cisco Cybersecurity Operations (SECOPS)

1 800 U Learn (853 276)

DDLS - Implementing Cisco Cybersecurity Operations (SECOPS)

Length

5 days

Price

$6380.00 inc GST

Version

1.0

Reserve Your Spot

Overview

Today’s organisations are challenged with rapidly detecting cybersecurity breaches and effectively responding to security incidents. Teams of people in Security Operations Centres (SOCs) keep a vigilant eye on security systems, protecting their organisations by detecting and responding to cybersecurity threats. CCNA Cyber Ops prepares candidates to begin a career working with associate-level cybersecurity analysts within security operations centres.

This course allows learners to understand how a Security Operations Center (SOC) functions and the introductory-level skills and knowledge needed in this environment. It focuses on the introductory-level skills needed for a SOC Analyst at the associate level. Specifically, understanding basic threat analysis, event correlation, identifying malicious activity, and how to use a playbook for incident response.

Exam Description

210-255 SECOPS

This exam is the second of the two required exams to achieving the CCNA Cyber Ops certification and prepares candidates to begin a career within a Security Operations Centre (SOC), working with Cybersecurity Analysts at the associate level. The SECFND exam tests a candidate’s knowledge and skills needed to successfully handle the tasks, duties, and responsibilities of an associate-level Security Analyst working in a SOC.

This course is part of the following Certifications:

Cisco Certified Network Associate Cyber Ops (CCNA)

Key Topics

Detailed Info

SOC Overview
Security Incident Investigations
SOC Operations

Reserve your space Request a callback

Skills Gained

Key Topics

Target Audience

Prerequisites

Skills Gained

After completing this course you should be able to:

Define a SOC and the various job roles in a SOC
Understand SOC infrastructure tools and systems
Learn basic incident analysis for a threat centric SOC
Explore resources available to assist with an investigation
Explain basic event correlation and normalisation
Describe common attack vectors
Learn how to identifying malicious activity
Understand the concept of a playbook
Describe and explain an incident respond handbook
Define types of SOC Metrics
Understand SOC Workflow Management system and automation

Key Topics

Module 1: SOC Overview

Lesson 1: Defining the Security Operations Center
Lesson 2: Understanding NSM Tools and Data
Lesson 3: Understanding Incident Analysis in a Threat-Centric SOC
Lesson 4: Identifying Resources for Hunting Cyber Threats

Module 2: Security Incident Investigations

Lesson 1: Understanding Event Correlation and Normalisation
Lesson 2: Identifying Common Attack Vectors
Lesson 3: Identifying Malicious Activity
Lesson 4: Identifying Patterns of Suspicious Behaviour
Lesson 5: Conducting Security Incident Investigations

Module 3: SOC Operations

Lesson 1: Describing the SOC Playbook
Lesson 2: Understanding the SOC Metrics
Lesson 3: Understanding the SOC WMS and Automation
Lesson 4: Describing the Incident Response Plan
Lesson 5: Appendix A – Describing the Computer Security Incident Response Team
Lesson 6: Appendix B – Understanding the use of VERIS

Labs:

Guided Lab 1: Explore Network Security Monitoring Tools
Discovery 1: Investigate Hacker Methodology
Discovery 2: Hunt Malicious Traffic
Discovery 3: Correlate Event Logs, PCAPs, and Alerts of an Attack
Discovery 4: Investigate Browser-Based Attacks
Discovery 5: Analyse Suspicious DNS Activity
Discovery 6: Investigate Suspicious Activity Using Security Onion
Discovery 7: Investigate Advanced Persistent Threats
Discovery 8: Explore SOC Playbooks

Target Audience

Security Operations Center – Security Analyst
Computer Network Defense Analysts
Computer Network Defense Infrastructure Support Personnel
Future Incident Responders and Security Operations Center (SOC) personnel
Students beginning a career, entering the cybersecurity field
Cisco Channel Partners

We can also deliver and customise this training course for larger groups – saving your organisation time, money and resources. For more information, please contact us on 1800 853 276.

Prerequisites

It is recommended to have the following skills and knowledge before attending this course:

Skills and knowledge equivalent to those learned in Interconnecting Cisco Networking Devices Part 1 (ICND1)
Skills and knowledge equivalent to those learned in Understanding Cisco Cybersecurity Fundamentals (SECFND)
Working knowledge of the Windows operating system
Working knowledge of Cisco IOS networking and concepts

Print course details

The supply of this course by DDLS is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.