CompTIA CySA+ (CS0-001) Online Training

CompTIA released an updated version of this exam. If you'd like to prepare for the newest version of the exam, please watch our CompTIA Cybersecurity Analyst CySA+ (CS0-002) course.

In this intermediate CompTIA CySA+ training, Keith Barker covers the objectives in the CS0-001 exam, which is the one required exam to earn the CompTIA CySA+ certification.

Security analysts are the unsung heroes of the cybersecurity world. Every analyst role is different, but they’re commonly combing through logs and identifying threat signatures. It’s painstaking (and sometimes tedious) work that requires encyclopedic knowledge about threats and a proficiency with a number of reconnaissance tools.

The CySA+ exam validates the broad range of cybersecurity skills necessary to be a security analyst. After completing this CySA+ training, you'll be ready to take the CS0-001 exam — and better prepared to secure your environment from threats.

For anyone with security analysts on their team, this CySA+ training can be used for CS0-001 exam prep, on-boarding new security professionals, or even curated as user training.

Note: The CompTIA CySA+ certification is designed to follow the CompTIA Security+ certification. If you’re new to information security and cybersecurity, you may benefit from working through our CompTIA Security+ series prior to progressing through this track.

CS0-001: What You Need to Know

This CompTIA CySA+ training steps through the CS0-001 exam objectives and covers topics including:

Reconnaissance tools, such as NMAP, packet analyzers, IDS, IPS, HIDS, NIDS, and vulnerability scanners
Threat management, including group policies, ACLs, penetration testing, and Network Access Control (NAC)
Types of data, such as personally identifiable information (PII) and personal health information (PHI)
Incident response, incident recovery, and forensics
Frameworks, including ITIL, NIST, ISO, COBIT, SABSA, and TOGAG
Exploits, such as man-in-the-middle (MITM), cross-site scripting (XSS), and privilege escalation

Who Should Take CS0-001 Training?

This CySA+ training is considered associate-level CompTIA training, which means it was designed for security analysts. This CS0-001 course is designed for security analysts with three to five years of experience with security analysis.

New or aspiring security professionals. If you’re a new security professional looking to secure a career in cybersecurity, CySA+ is one of the best cybersecurity certifications you could get. This training - and certification - covers much more than mere fundamentals of information security. It includes intrusion detection and response plus how to identify and combat malware. But the strength of CySA+ training is in the focus on behavior-based analytics. Data analysis and interpretation can reveal vulnerabilities that regular threat-detection tools cannot. And this training shows you how to leverage that data analysis to uncover those threats and risks.This CySA+ training was designed for security professionals who already took the Security+ course. For that reason, junior network or systems administrators will recognize a lot of the tools in this training. It never hurts to start learning security early. Even newcomers to IT will benefit from an understanding of threat types and how they are managed. CySA+ training is primarily for security analysts, but every IT professional should know what happens in the event of an attack and fundamentally know their role in cyber incident response — this CySA+ training does exactly that.

Experienced security analysts. If you’ve already spent the requisite few years rooting around log files looking for threats, then this CySA+ will not only validate what you’ve learned but probably teach you a thing or two. More important even than earning the CySA+ certification, Keith Barker shows you the full range of tools available for finding vulnerabilities in servers, endpoints, and mobile devices. He covers threat management and security architecture. You probably have a good handle on NMAP, but Keith covers the full universe of analysis tools — and what’s on the CySA+ exam.

Skill:
CompTIA CySA+ (CS0-001)
- 1. 1.0 Threat Management: Vocabulary Related to Threats and Attacks
  5 mins
- 2. 1.0 Threat Management: Attack Categories, Types, and Vectors
  4 mins
- 3. 1.0 Threat Management: Reconnaissance and Footprinting Overview
  6 mins
- 4. 1.0 Threat Management: Using DNS for Reconnaissance
  6 mins
- 5. 1.0 Threat Management: Direct Network Scanning Overview
  3 mins
- 6. 1.0 Threat Management: Direct Network Scanning Methodology
  6 mins
- 7. 1.0 Threat Management: Port Discovery Overview
  6 mins
- 8. 1.0 Threat Management: OS and App Fingerprinting
  5 mins
- 9. 1.0 Threat Management: Using NMAP for Host, Port, and OS Discovery: VLab
  18 mins
- 10. 1.0 Threat Management: Vulnerability Scanning Tools
  5 mins
- 11. 1.0 Threat Management: Vulnerability Scan Scenario
  3 mins
- 12. 1.0 Threat Management: Network Mapping
  2 mins
- 13. 1.0 Threat Management: Understanding System Hacking
  6 mins
- 14. 1.0 Threat Management: Honeypot Overview
  5 mins
- 15. 1.0 Threat Management: Using a Network Scanner To See a Honeypot
  7 mins
- 16. 1.0 Threat Management: Social Engineering Overview
  3 mins
- 17. 1.0 Threat Management: Phases and Methods of Social Engineering
  3 mins
- 18. 1.0 Threat Management: Phishing Overview
  5 mins
- 19. 1.0 Threat Management: Defending Against Phishing
  6 mins
- 20. 1.0 Threat Management: Packet Capture and Analysis Overview
  4 mins
- 21. 1.0 Threat Management: Practicing Packet Capture and Protocol Analysis: VLab
  10 mins
- 22. 1.0 Threat Management: Logging Overview
  6 mins
- 23. 1.0 Threat Management: Firewall/Router ACL Review
  6 mins
- 24. 1.0 Threat Management: Trend Awareness
  6 mins
- 25. 1.0 Threat Management: Hardening and Other Best Practices
  5 mins
- 26. 1.0 Threat Management: Whitelisting and Access Control
  4 mins
- 27. 1.0 Threat Management: Evaluating Risk
  4 mins
- 28. 1.0 Threat Management: Network Access Control (NAC)
  6 mins
- 29. 1.0 Threat Management: Uncovering Vulnerabilities
  6 mins
- 30. 2.0 Vulnerability Management: Motivators for Vulnerability Management
  4 mins
- 31. 2.0 Vulnerability Management: SCAP Overview
  4 mins
- 32. 2.0 Vulnerability Management: What to Ask When Doing Focused Vulnerability Scanning
  6 mins
- 33. 2.0 Vulnerability Management: Remediation Considerations
  5 mins
- 34. 2.0 Vulnerability Management: Review and Interpret Output: Web Server Version
  5 mins
- 35. 2.0 Vulnerability Management: Analyzing Vulnerability Scan Output: Enumeration of Shares
  5 mins
- 36. 2.0 Vulnerability Management: Vulnerabilities in Servers
  7 mins
- 37. 2.0 Vulnerability Management: Vulnerabilities in Endpoints
  5 mins
- 38. 2.0 Vulnerability Management: Vulnerabilities in Infrastructure Devices
  5 mins
- 39. 2.0 Vulnerability Management: Vulnerabilities in Mobile Devices: Weak Policy
  5 mins
- 40. 2.0 Vulnerability Management: Vulnerabilities in Mobile Devices: Traveling
  5 mins
- 41. 2.0 Vulnerability Management: Vulnerabilities in Mobile Devices: Remote Wipe
  4 mins
- 42. 2.0 Vulnerability Management: Vulnerabilities Regarding Interconnected Networks
  4 mins
- 43. 2.0 Vulnerability Management: Physical and Virtual Device Vulnerabilities
  6 mins
- 44. 2.0 Vulnerability Management: Using ACLs and VPNs to Reduce Vulnerabilities
  4 mins
- 45. 3.0 Cyber Incident Response: Threat Classification
  5 mins
- 46. 3.0 Cyber Incident Response: Factors Contributing to Incident Severity and Prioritization
  5 mins
- 47. 3.0 Cyber Incident Response: Building a Forensic Tool Kit
  6 mins
- 48. 3.0 Cyber Incident Response: Tool Categories in a Forensic Investigation Suite
  4 mins
- 49. 3.0 Cyber Incident Response: Communication During an Incident Response
  8 mins
- 50. 3.0 Cyber Incident Response: Abnormal Traffic Patterns that May Indicate a Cyber Incident
  5 mins
- 51. 3.0 Cyber Incident Response: Network Scans as a Symptom of a Cyber Incident
  3 mins
- 52. 3.0 Cyber Incident Response: Host-Related Cybersecurity Symptoms
  6 mins
- 53. 3.0 Cyber Incident Response: Application-Related Cyber Incident Symptoms
  3 mins
- 54. 3.0 Cyber Incident Response: Containment and Eradication Techniques
  7 mins
- 55. 3.0 Cyber Incident Response: Validation of Post-Incident Remediation
  4 mins
- 56. 3.0 Cyber Incident Response: Corrective Actions, Updates, and Reports
  2 mins
- 57. 4.0 Security Architecture: Security Frameworks for IT
  4 mins
- 58. 4.0 Security Architecture: Regulatory Compliance and Control Types
  5 mins
- 59. 4.0 Security Architecture: Verification and Validation of Controls
  3 mins
- 60. 4.0 Security Architecture: Having Policies to Improve Security
  3 mins
- 61. 4.0 Security Architecture: Having Procedures to Improve Security
  3 mins
- 62. 4.0 Security Architecture: Identity Context and Repositories
  6 mins
- 63. 4.0 Security Architecture: SSO and Federations
  5 mins
- 64. 4.0 Security Architecture: Exploits Related to Identity and Access
  5 mins
- 65. 4.0 Security Architecture: Recommending Compensating Controls
  6 mins
- 66. 4.0 Security Architecture: Best Practices During Software Development
  5 mins
- 67. 4.0 Security Architecture: Secure Coding Best Practices
  5 mins
- 68. 4.0 Security Architecture: Identifying Preventive Tools and Technologies
  5 mins
- 69. 4.0 Security Architecture: Selecting and Applying Appropriate Preventive Tools
  5 mins
- 70. 4.0 Security Architecture: Tools and Technologies for Information Collection
  4 mins
- 71. 4.0 Security Architecture: Tools and Tech for Analysis, Exploits, and Forensics
  4 mins

No Transcript Available

1.0 Threat Management: Vocabulary Related to Threats and Attacks

Access all premium content with a free week!

Start a free week

Course overview

6 HOURS OF TRAINING

1 SKILL

71 VIDEOS

3 VIRTUAL LABS

0 PRACTICE EXAMS

Keith Barker

Nugget trainer since 2012

Read the full bio

What is it like to train with us?

Our learners say it best.

Helps me learn the skills I need when I need them

THOMAS S. | SYSTEMS ENGINEER & CONSULTANT

Read Reviews

CompTIA CySA+ (CS0-001) FAQs: Cost, Training, Value

How many people pass CISA?

Not many people pass the CISA. In fact, most people don’t pass the CISA on their first attempt at all. The Certified Information Systems Auditor certification from ISACA is a 4-hour long exam with 150 multiple-choice questions. CISA is notoriously difficult, and according to ISACA, only half of people pass the CISA. Among people trying the CISA for the first time, the pass rate is even lower.

How difficult is CySA+?

The CySA+ from CompTIA is a hard exam. CompTIA is notorious for their practical-based exams that test more than just rote memorization but challenge your real-world skills and abilities -- the CySA+ is no different. The CySA+ is so difficult because passing it means you have to prove that you have practical knowledge of advanced cybersecurity practices like log analysis and system and organization controls.

How long does it take to study for CySA?

How long it takes to study for CySA+ is different for everyone, but you should be prepared for at least three months of study. It’s hard to say how long it takes to study for the CySA+ because everyone comes at it with different levels of experience. But the average student wondering how long it takes to study for CySA+ should plan to spend at least several months.

Is the CySA+ worth it?

The CySA+ is an intermediate certification that IT professionals trying to land a job or a promotion in cybersecurity will find worth it. The CySA+ is worth it for IT professionals because it tells employers that you know how to take all the data your network traffic produces and turn that into continuous security monitoring. The pay raises most IT professionals see after earning it is what makes the CySA+ worth it.

How do I pass CISA exam 2020?

If you need to pass the CISA 2020 exam, your best bet is to find an online course. Passing the CISA 2020 exam is easy when you can watch videos to learn auditing, controlling, and monitoring IT systems, and then practice what you’ve learned. Last, if you want to pass the CISA 2020 exam, find training that has quizzes as you study and practice exams when you’re finished.

Related Courses

CompTIA Security+ (SY0-601)

CompTIA PenTest+ (PT0-002)

(ISC)² CISSP – Certified Information Systems Security Professional

What is it like to train with us?

Our learners say it best.

CompTIA CySA+ (CS0-001) FAQs: Cost, Training, Value

Let's chat!