CompTIA CySA+ (CS0-001/002) Complete Course & Practice Exam

This lesson includes the downloadable study guide as a resource for your offline studies and note taking.

This lesson will show you the different types of vulnerabilities in risk management.

This lesson discusses the likelihood (probability) of a risk occurring.

This lesson discusses the concepts of qualitative (non-numeric) and quantitative (numerical) analyses.

This lesson covers the concepts utilized in reviewing risk management controls.

This lesson discusses network perimeter security devices such as firewalls and IDS/IPS.

In this lesson we will discuss the importance of network segmentation in risk management.

In this lesson we will discuss the importance of network access control in risk management.

In this lesson we will discuss defense deception methods such as honeypots and DNS sinkholes.

In this lesson we will discuss secure endpoint management such as antivirus and HIDS.

In this lesson, we will discuss the importance of penetration testing in securing your networks.

In this lesson, we will discuss the various types of teams in security exercises.

In this lesson, we will discuss the concepts of reverse engineering and how it applies to malware analysis.

In this quiz, you will receive a quick knowledge check on what you learned about preventing cyber threats.

In this lesson, we will discuss reconnaissance and intelligence and how it applies to a hacker's information gathering.

In this lesson, we will discuss footprinting and how it applies to a hacker's information gathering.

In this lesson, we will discuss network mapping and how it applies to a hacker's information gathering.

In this lesson, we will discuss port scanning and how it applies to a hacker's information gathering.

In this lesson, we will discuss additional types of port scanners (other than NMAP).

In this lesson, we will discuss passive reconnaissance and how it applies to a hacker's information gathering.

In this lesson, we will discuss how to use logs from network devices in passive reconnaissance.

In this lesson, we will discuss how to use Netstat in passive reconnaissance.

In this lesson, we will discuss how to use DHCP logs and configuration files in passive reconnaissance.

In this lesson, we will discuss how to use firewall logs and configuration files in passive reconnaissance.

In this lesson, we will discuss how to use system host log files in passive reconnaissance.

In this lesson, we will discuss how to use DNS harvesting in reconnaissance.

In this lesson, we will discuss how to analyze domain names and IP ranges in reconnaissance.

In this lesson, we will discuss how to conduct a DNS zone transfer in reconnaissance.

In this lesson, you will learn how to use the whois and host commands in reconnaissance.

In this lesson, you will learn how to conduct the aggregation of the information you collected during reconnaissance.

In this lesson, you will learn how to gather organizational intelligence and determine what your organization looks like to the outside world.

In this lesson, you will learn how to detect, prevent, and respond to an attackers reconnaissance efforts.

In this quiz, you will receive a quick knowledge check on what you learned about reconnaissance and intelligence gathering.

A short welcome to the section, providing an overview all the topics we will cover. 

In this lesson, we will discuss the regulatory and legal requirements for having a Vulnerability Management Program, including the PCI DSS, FISMA, and others.

In this video, you will learn about how to determine your scanning scope and frequency based on corporate requirements.

In this lesson, we will discuss the types of scanning tools you can use within your vulnerability management programs.

In this lesson, we will discuss the types of scoping tools you can use within your vulnerability management programs.

In this lesson, we will talked about the various ways to configure your scanner.

In this lesson, we will discuss how to adjust the scanning sensitivity of your scanners.

In this lesson, we will cover the various scanning perspectives you can configure, such as internal and external perspectives, and why they are important.

In this lesson, we will cover the importance of authenticated scanning and how this provides you a deeper understanding of your systems.

In this lesson, we will talk about the vulnerabilities associated with your vulnerability scanner itself.

In this lesson, we will cover how vulnerabilities are standardized into common databases like CVE.org.

In this lesson, we will cover to create workflows to remediation the different vulnerabilities found during your scans.

In this lesson, we will cover how vulnerability reporting is conducted using our scanners.

In this lesson, we will cover how to prioritize vulnerabilities for remediation.

In this lesson, we will cover how to setup implementation and testing before rolling out a vulnerability patch across the network.

In this lesson, you will receive a walkthrough of how to use Nessus to conduct a scan and analyze a vulnerability report created during that scan.

In this quiz, you will receive a quick knowledge check concerning Vulnerability Management Programs.

In this lesson, we will cover how to interpret the results from a vulnerability scan.

In this lesson, we will cover how to interpret the value of a CVSS number.

In this lesson, we will break down how a CVSS is calculated.

In this lesson, we will discuss the CVSS Temporal Score.

This lesson will teach you how to validate the results of your vulnerability scans by comparing them to logs, configuration files, and other pieces of outside data.

This lesson will cover the various types of common vulnerabilities you will encounter in your scan results.

This lesson will dive into the different vulnerability categories affecting servers and hosts on your network.

This lesson will dive into the different vulnerability categories affecting your network.

This lesson will dive into the different vulnerability categories affecting virtualization on your network.

This lesson will dive into the different vulnerability categories affecting web applications on your network.

This lesson will dive into the different vulnerability categories affecting IoT devices on your network.

In this quiz, you will receive a quick knowledge check concerning Vulnerability Management Programs.

In this video, you will receive a quick overview of what will be covered in this section of the course.

In this lesson, you will learn about the different types of security incidents you may face as a cyber incident responder.

In this lesson, you will learn about how an incident response team is formed and who the members are.

In this lesson, you will learn the four phases of incident response.

In this lesson, you will learn about the different things to include in your incident response policy and procedures.

In this lesson, you will learn what information to communicate during an incident response, and to who.

In this lesson, you will learn how to classify different incidents.

In this quiz, you will receive a quick knowledge check about creating and operating a cyber incident response program.

In this lesson, we will discuss how to monitor different events on your networks.

In this lesson, we will discuss different tools for monitoring your network.

In this lesson, we will discuss how to detect different network events.

In this lesson, you will learn about the different types of network probes and attacks.

In this lesson, you will learn about the different types of attacks and symptoms for your server and hosts.

In this lesson, you will learn about the different types of attacks and symptoms for your services and applications.

In this quiz, you will receive a quick knowledge check about the symptoms of a cyber attack.

In this lesson, you will learn the basics of digital forensics.

In this lesson, you will learn the basic tools used by digital forensic experts.

In this lesson, you will learn the basic mobile forensic tools needed.

In this lesson, you will learn the different types of forensic software available.

In this lesson, we will discuss the different type of training and certifications for digital forensics.

In this lesson, we will discuss the process to conduct forensic investigations.

In this lesson, we will discuss how you conduct  disk imaging in forensics.

In this hands-on demonstration, you will learn how to create a forensic disk image using standard Linux commands.

In this hands-on demonstration, you will learn how to use the Windows tool, FTK Imager, to create a forensic disk image.

In this quiz, you will receive a quick knowledge check about digital forensics

In this lesson, we will discuss the process of containing incidents on your network.

In this lesson, we will discuss how to eradicate and recover from network attacks.

In this lesson, we will discuss the final actions to conduct after an incident response.

In this quiz, you will receive a quick knowledge check about conducting incident containment and eradication.

In this lesson, we will introduce what will be covered in Domain 4 of the CSA+ exam.

In this lesson, you will learn about policies, standards, guidelines, and procedures.

In this lesson, you will learn about TOGAF, ITIL, COBIT, NIST Cybersecurity, and other policy frameworks.

In this lesson, we will discuss the three types of policy-based controls.

In this lesson, you will learn the differences between audits and assessments.

In this lesson, you will learn a brief overview of the different laws and regulations covered by the exam.

In this quiz, you will receive a quick knowledge check about policies, standards, procedures, and frameworks.

In this lesson, you will learn the types of controls and layered defenses that can be applied to protect your networks.

In this lesson, you will learn the types of controls that can be applied to protect your networks.

In this lesson, you will learn the layered defenses that can be applied to protect your networks.

In this lesson, you will learn the layered defenses that can be applied to protect your hosts.

In this lesson, you will learn about data analytics and how they are used in designing secure architectures.

In this lesson, you will learn what types of issues you should consider in providing security from your personnel.

In this lesson, you will learn what types of issues you should consider in providing security from your outsource provider.

In this lesson, you will learn what types of issues you should discuss with your employees during user awareness training.

In this lesson, you will learn how to best analyze your security architecture.

In this quiz, you will receive a quick knowledge check about defense in depth architectures.

In this lesson, you will learn what identity is in terms of cybersecurity and the kinds of attributes associated with it.

In this lesson, you will learn about identity systems, including RADIUS, TACACS+, and Kerberos.

In this lesson, you will learn the different threats to your identity systems.

In the lesson, you will learn the various ways attackers break into our identity systems.

In this video, you will learn how attackers target the account lifecycle.

In this lesson, you will learn about some different kinds of exploits used against identity systems.

In this lesson, you will learn how attackers attempt to steal credentials from your users and systems.

In this lesson, you will be provided a summary of the different methods to secure your authentication and authorization in your systems.

In this lesson, we will discuss the use of Identity as a Service (IDaaS), its challenges, and its benefits.

In this lesson, you will learn some of the key things to do in order to identify when identities are being attacked.

In this lesson, you will learn about the different types of Federated Identity Systems, including OAuth, OpenID Connect, Facebook Connect, Active Directory Federated Services, and more.

In this quiz, you will receive a quick knowledge check about identity and access management architectures.

In this lesson, we will discuss the 8 portions of the basic Software Development Life Cycle (SDLC).

In this lesson, we will discuss the different software development models in both formal and agile programming.

In this lesson, we will discuss the best practices to use when coding software in a secure manner.

In this lesson, we will dig a little deeper into how to test the security of your applications.

In this lesson, we will discuss how to find security flaws by using code reviews.

In this lesson, we will discuss the various types of Web Application Vulnerability Scanners, like Burp Suite, Accunetix, HP's Web Inspect, and more.

In this quiz, you will receive a quick knowledge check about software development and the SDLC.

In this video, we will provide a quick summary of the course and where to go from here in your CSA+ journey.

In this video, you will receive a special thank you message from Jason with tips on how to get the best price for ANY of our other courses on Udemy!

This practice exam contains 80 multiple-choice questions ranging in difficulty from easy to hard. The questions on this exam are very similar to the type of questions you will receive when you take the actual CompTIA CySA+ certification exam at your testing center.

If you can score 90% or higher on this practice exam, you should be able to take and pass the CompTIA CySA+ Certification Exam on your first attempt!

Download your study guide and exam objectives in this lesson

Describes the role of the Security Operations Center and how it integrates into the overall organization

Describes the NIST SP 800-53 and the three control categories that are tested on the CySA+ exam

Describes the methods of selecting controls to mitigate vulnerabilities and enforce the confidentiality, integrity, and availability of a system

This quiz will test your knowledge of the topics covered in this section of the course.

A brief introduction to this section of the course

Provides an overview of Security Intelligence and Threat Intelligence

Describes the five steps of the intelligence cycle

Describes the sources of intelligence and the factors that identify the value of threat intelligence: timeliness, relevancy, accuracy, and confidence level

Describes the public/private partnerships that disseminate sector-specific threat intelligence

Describes the dissemination of threat information to support risk management and security engineering, incident response, vulnerability management, and detection and monitoring functions.

This quiz will test your knowledge of the topics covered in this section of the course.