Cisco Certified CyberOps Associate (200-201) Cert Prep: 1 Security Concepts
2h 23mIntermediate2021-05-06
Authors

Lisa Bock
Security ambassador with a broad range of IT skills and knowledge
Course details
In this course, instructor Lisa Bock helps you prepare for the Cisco CBROPS exam. Lisa covers the principles of a defense-in-depth strategy, to ensure the confidentiality, availability, and integrity of a system. Lisa outlines today’s threats and threat actors, and explores the relationship between risk, threat, vulnerability, and exploit. She helps you understand the metrics that make up the Common Vulnerability Scoring System. She reviews access control models and stresses the importance of employing the principle of least privilege. Lisa covers the challenges of complex environments in monitoring traffic and describes how using SIEM, SOAR, and log management helps consolidate information. She summarizes security deployments, such as network and endpoint systems. Lisa compares anti-malware applications, outlines the benefits of using threat intelligence, and concludes by describing methods you can use to manage risks and prevent data loss.
Skills covered
Incident ResponseCybersecurityCert Prep
Concepts
0. Introduction
- 01 - Defending the network
- 02 - Prepare for Cisco CBROPS exam
- 03 - Setting up your test environment
1. Exploring Security Concepts
- 04 - Recognizing today s threats
- 05 - Understanding the threat actor
- 06 - Outlining the CIA triad
- 07 - Having zero trust
- 08 - Exploring risk
- 09 - Analyzing risk
- 10 - Challenge - Overview of malware
- 11 - Solution - Overview of malware
2. Assessing Vulnerabilities
- 12 - Using the CVSS
- 13 - Interpreting CVSS metric groups
- 14 - Understanding the CVE and the NVD
- 15 - Challenge - Temporal metric group
- 16 - Solution - Temporal metric group
3. Controlling Access
- 17 - Using the principle of least privilege
- 18 - Defining access control
- 19 - Comparing access control models
- 20 - Summarizing triple-A security
- 21 - Verifying authentication
- 22 - Granting authorization
- 23 - Accounting and logging activity
- 24 - Challenge - Network diagram
- 25 - Solution - Network diagram
4. Understanding the Threats
- 26 - Recognizing the complexity of today s environment
- 27 - Leveraging threat intelligence
- 28 - Hunting threats
- 29 - Analyzing malware
- 30 - Dissecting malware using reverse engineering
- 31 - Detecting anomalies using the sliding window
- 32 - Comparing detection methods
- 33 - Using five-tuple log analysis
- 34 - Monitoring data loss using traffic profiles
5. Managing Risk and Preventing Data Loss
- 35 - Identifying challenges of data visibility
- 36 - Comparing security deployments
- 37 - Using agentless or agent-based methods
- 38 - Utilizing SIEM, SOAR, and log management
- 39 - Employing runbook automation
- 40 - Exploring Nmap
- 41 - Challenge - Using Nmap
- 42 - Solution - Using Nmap
Conclusion
- 43 - Next steps
Related courses
- Cisco Certified CyberOps Associate (200-201) Cert Prep: 2 Security Monitoring
- Cisco Certified CyberOps Associate (200-201) Cert Prep: 5 Security Policies and Procedures
- Cisco Certified CyberOps Associate (200-201) Cert Prep: 4 Network Intrusion Analysis
- Cisco Certified CyberOps Associate (200-201) Cert Prep: 3 Host-Based Analysis
- Cisco Certified Support Technician (CCST) Networking Cert Prep: 1 Network Fundamentals
- Cisco Certified Support Technician (CCST) Networking Cert Prep: 2 IP Addressing
- Cisco Certified Support Technician (CCST) Networking Cert Prep: 3 Connecting Network Devices
- Cisco Certified Support Technician (CCST) Networking Cert Prep: 4 Troubleshooting and Securing Networks
Related learn paths
- CyberOps Associate: Prepare for the Cisco Cybersecurity Operations Fundamentals (200-201 CBROPS) Exam
- CCNP Security: Prepare for the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) Exam
- CCNP Collaboration: Prepare for the Implementing Cisco Collaboration Core Technologies (350-801 CLCOR) Exam
- CCNP Enterprise: Prepare for the Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Exam
- Prepare for the Cisco CCNP ENCOR v1.1 (350-401) Exam
- Getting Started with Cisco Networks
- Prepare for the Cisco Certified Support Technician (CCST) Networking Certification
- Prepare for the Cisco Certified Network Associate (CCNA) (200-301) Certification Exam