Cisco Cybersecurity Operations Fundamentals (200-201 CBROPS) Training Course

The CCNA Cybersecurity certification proves you can do the entry job in a security operations centre: monitor alerts, investigate incidents, work with network security monitoring data, and follow established procedures to respond. It sits at the associate (CCNA) tier of Cisco’s certification ladder, which is a recognised and respected starting point for a cyber security career in Australia, where security analyst and SOC roles ask for exactly these skills. Holding it gives employers a clear signal that you understand the fundamentals well enough to contribute on day one.

With Logitrain the official Cisco 200-201 CCNACBR exam is included in the course fee, and you keep the digital course material to revise from after class. Every course carries our price beat guarantee, so you train for less than you will pay elsewhere. You can sit the exam at the Logitrain test centre, at any other Pearson VUE test centre, or online through Pearson VUE online proctoring. Choose in person training in Melbourne, Sydney and Brisbane, or join live online across Australia, with everything delivered live in real time by experienced trainers.

There are no formal prerequisites for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) course. Cisco recommends some background before you start, and so do we: a working familiarity with the Windows and Linux operating systems, a basic understanding of networking and the TCP/IP protocol suite, and a general grasp of information security concepts. None of these are mandatory, and the course teaches each area from the ground up.

If networking and security are completely new to you, start lower. The Cisco Certified Support Technician (CCST) Cybersecurity course introduces the core ideas with no assumed knowledge, and the CCNA 200-301 certification training builds the networking foundation that makes security monitoring far easier to follow.

Candidates can achieve this certification by passing the following exam.

• 200-201 CCNACBR, Understanding Cisco Cybersecurity Operations Fundamentals, CCNA Cybersecurity

You can book and sit the exam within three months of finishing your course. Sit it at the Logitrain test centre, at any other Pearson VUE test centre, or online through Pearson VUE online proctoring from a private space.

Exam format: multiple choice and performance based questions, 120 minutes, in English. Cisco does not publish the number of questions or the passing score for this exam.

The digital course material for the 200-201 CCNACBR exam is included with your course and yours to keep. It maps to the current Understanding Cisco Cybersecurity Operations Fundamentals exam topics, so you can revise each domain after class.

• Explain how a security operations centre operates and the role of a Tier 1 cybersecurity analyst.
• Describe core security concepts including the CIA triad, defence in depth, the attack surface and risk.
• Apply access control models and common security management principles.
• Describe the fundamentals of cryptography, certificates and public key infrastructure.
• Identify security flaws in the TCP/IP protocol suite and the network attacks that exploit them.
• Compare endpoint protection technologies across Windows and Linux hosts.
• Deploy and interpret network security monitoring tools and the data types they produce.
• Analyse NetFlow, session data and full packet capture to investigate security incidents.
• Interpret protocol headers and extract files from a TCP stream using Wireshark.
• Classify intrusion events using the Cyber Kill Chain and the Diamond Model.
• Investigate host based evidence and identify malicious activity on endpoints.
• Recognise common web application attacks such as SQL injection and cross site scripting.
• Apply event normalisation and correlation to reduce noise and confirm genuine alerts.
• Follow a SOC playbook and a structured incident response process.
• Measure the effectiveness of a SOC using metrics and workflow automation.
• Document security incidents using VERIS and support the work of a CSIRT.

This course is likely to add to the employment-related skills of the participants. The skills developed are likely to be used in the course of being an employee or working in a business.

• Tier 1 SOC analyst (entry and associate level)
• Cybersecurity analyst and security operations analyst
• Incident response and threat detection staff
• Network and systems administrators moving into security
• IT support staff stepping into a security operations centre
• Graduates and career changers starting out in cyber security
• Candidates working towards the CCNA Cybersecurity certification

• Security Concepts: the CIA triad, defence in depth and the attack surface; security deployments and access control models; risk, vulnerability scoring with CVSS, and the threat landscape
• Security Monitoring: network data types including NetFlow, session, transactional and full packet capture; network security monitoring tools, firewalls and intrusion detection and prevention; security flaws in TCP/IP and the fundamentals of cryptography and certificates
• Host Based Analysis: endpoint protection technologies such as host firewalls, host intrusion detection, antimalware and sandboxing; Windows and Linux components and logs; interpreting endpoint and malware analysis output
• Network Intrusion Analysis: reading packet captures, protocol headers and NetFlow with Wireshark; mapping events to the Cyber Kill Chain and the Diamond Model; distinguishing true and false positives and negatives
• Security Policies and Procedures: the incident response process and the role of a CSIRT; SOC metrics, playbooks and runbook automation; documenting incidents with VERIS, evidence handling and chain of custody

We highly recommend spending ample time for self-study during this course by reviewing and consolidating what you’ve learned, to be well prepared for the exam.

• Cisco Certified Support Technician (CCST) Cybersecurity is the entry level cyber security certification and the best starting point if you are new to the field before stepping up to 200-201 CCNACBR.
• CCNA 200-301 certification training builds the core networking knowledge that makes security monitoring and intrusion analysis much easier to follow.
• Cisco Certified Support Technician (CCST) Networking is a sound first step for anyone who wants networking fundamentals before tackling security.
• Cyber security training courses shows the full range of cyber security certifications available at Logitrain across vendors.
• Cisco certification training sets out the complete Cisco pathway from CCST through CCNA to CCNP and CCIE, including the professional level security track.
• Cyber security job ready program combines training, certifications, an internship and career counselling for people aiming to land their first cyber security role.
• Cyber security training package bundles related certifications together at a better combined price.

Got a team to train? Logitrain can deliver the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) course in house at your premises anywhere in Australia, with the same experienced trainer, the same digital course material, mock test and included official exam as the public courses. It suits security and IT teams who want everyone trained together on dates that suit the business, whether that is at your office, a third party venue, or live online in real time.

What is the CCNA Cybersecurity certification?

CCNA Cybersecurity is Cisco’s associate level cyber security certification, earned by passing exam 200-201 CCNACBR, Understanding Cisco Cybersecurity Operations Fundamentals. It replaced the former Cisco Certified CyberOps Associate and proves you can perform the work of an entry level analyst in a security operations centre.

Is the exam included in the course fee?

Yes. The official Cisco 200-201 CCNACBR exam is included in your Logitrain course fee. You can book and sit it within three months of finishing the course, at the Logitrain test centre, at any other Pearson VUE test centre, or online through Pearson VUE online proctoring.

Are there any prerequisites?

There are no formal prerequisites. Cisco recommends a basic familiarity with Windows and Linux, an understanding of networking and TCP/IP, and a general grasp of security concepts. The course teaches each area from the ground up, so beginners are welcome.

Which exam version will I sit?

You will prepare for the current 200-201 CCNACBR v1.2 exam, which runs for 120 minutes and covers security concepts, security monitoring, host based analysis, network intrusion analysis, and security policies and procedures.

How long is the course?

The course runs for 5 days full time on weekdays, or 5 weeks part time if you study in the evenings or on weekends. Part time keeps your weekdays free while you work towards the certification.

Where can I train?

You can train in person in Melbourne, Sydney, Brisbane, Adelaide, Perth and Canberra, plus live online across Australia, all delivered live in real time with a trainer. In house delivery at your own premises is also available for teams.

How much does the course cost?

Logitrain prices the course from $1,999 with the exam included, well below the larger training providers who charge several thousand dollars for the course alone. Every course carries our price beat guarantee, so you will not pay more here than for the same course advertised elsewhere.

Which course should I do first?

If you are new to security, start with the Cisco Certified Support Technician (CCST) Cybersecurity course, then move up to 200-201 CCNACBR. If you want a networking foundation first, the CCNA 200-301 certification training pairs well with cybersecurity operations and is a common starting point.