CompTIA CySA+ Course

The CompTIA Cyber security Analyst – CySA+ Cyber Security Course is a key requirement for the following jobs:

• Security Analyst
• Security Operations Centre (SOC) Analyst
• Vulnerability Analyst
• Cyber Security Specialist
• Threat Intelligence Analyst
• Security Engineer
• Incident Response Analyst

Unlike many providers who sell the course and leave the exam voucher as a separate cost, the official exam fee is included in the Logitrain course price.

Computer security knowledge and experience.

Network Plus, Security Plus or equivalent knowledge is recommended. CompTIA suggests around four years of hands on experience in a security operations or vulnerability analyst role before sitting CS0-004, although there is no hard requirement to enrol.

Candidates can attend Cyber Security Course and achieve Cyber Security Analyst certification by passing the following exam.

• CS0-004

You can book and sit the exam within three months of finishing your course. Sit it at the Logitrain test centre, at any other Pearson VUE test centre, or online through Pearson VUE online proctoring from a private space.

Exam format: a maximum of 85 multiple choice and performance based questions, 165 minutes, with a passing score of 750 on a scale of 100 to 900.

CompTIA Cybersecurity Analyst (CySA+) Study Guide: Exam CS0-004

The course builds the current CySA+ skills across the four CS0-004 domains:

• Security operations: The largest part of the exam, covering system and network architecture, identifying indicators of malicious activity, using the right tools to investigate, threat intelligence and threat hunting, process improvement, and the use of artificial intelligence in security operations
• Vulnerability management: Covering vulnerability scanning methods, analysing the output of assessment tools, prioritising and mitigating vulnerabilities, and understanding control types and risk.
• Incident response and management: Covering attack methodology frameworks, the incident response process, and the techniques used to detect, contain, eradicate and recover from an incident.
• Reporting and communication: Covering how to report vulnerability findings and incident outcomes, and how to communicate clearly with the stakeholders who rely on that information.

This course is likely to add to the employment related skills of the participants. The skills developed are likely to be used in the course of being an employee or working in a business.

Following people can attend the CompTIA Cyber Security Analyst – CySA+ Cyber Security Course:

• Students
• Security Analyst
• Security Operations Centre (SOC) Analyst
• Vulnerability Analyst
• Cybersecurity Specialist
• Threat Intelligence Analyst
• Security Engineer

• Explain concepts related to system and network architecture in security operations, including logging, operating system concepts, cloud native and virtualised infrastructure, identity and access management, encryption and critical infrastructure
• Analyse indicators of potential malicious activity across network, host, application, cloud, identity and email
• Use tools to determine malicious activity, including packet and log analysis, threat intelligence platforms, endpoint detection and response, and sandboxing
• Explain threat intelligence and threat hunting concepts, including threat actors, tactics, techniques and procedures, MITRE ATT&CK and indicators of compromise
• Explain the importance of efficiency and process improvement, including automation and orchestration with SOAR
• Summarise the use of artificial intelligence in security operations, including the risks, governance and practical use cases
• Implement the appropriate vulnerability scanning method
• Analyse output from vulnerability assessment tools, including network mapping, web application scanners, vulnerability scanners and cloud assessment tools
• Analyse data to prioritise and mitigate vulnerabilities, including scoring methods such as CVSS and EPSS
• Explain control types, risks and vulnerability management concepts, including application security and third party and supply chain risk
• Summarise attack methodology frameworks, including the Cyber Kill Chain, the Diamond Model and MITRE ATT&CK
• Summarise the incident response process from preparation through to post incident
• Implement incident response techniques, including playbooks, evidence gathering, isolation, remediation and root cause analysis
• Explain the importance of vulnerability management reporting and communication
• Explain the importance of security operations and incident response reporting and communication, including metrics and key performance indicators

We highly recommend spending ample time for self study during this course by reviewing and consolidating what you have learned to be well prepared for the exam.

Is CompTIA CySA+ harder than Security Plus?
Yes. CySA+ is an intermediate certification and Security Plus is the foundation level one. CySA+ assumes you already understand security basics and goes deeper into threat detection, vulnerability management and incident response. Most people sit Security Plus first.

Is the CS0-004 exam included in the course price?
Yes. The official CS0-004 exam fee is included in the Logitrain course price. You will not be asked to buy a separate voucher later. You can sit the exam at our Pearson VUE test centre or online within three months of finishing.

What are the prerequisites for CySA+?
CompTIA recommends Network Plus, Security Plus or equivalent knowledge, plus around four years of hands on information security experience. There is no hard requirement to enrol, but the content assumes a working security background.

How long is the CySA+ course?
The course runs over five days full time, or five weeks part time if you prefer evening or weekend study around work.

Where can I do the CySA+ course?
You can train in person at Melbourne, Sydney and Brisbane centres, in person at a conference centre or partner venue in other cities on request, in house at your own premises anywhere in Australia, or live online in real time with a trainer.

What jobs does CySA+ lead to?
CySA+ maps to roles such as security analyst, SOC analyst, vulnerability analyst, threat intelligence analyst and security engineer. It is widely recognised for analyst level positions.