IT Infrastructure & Networks Category Banner Image

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Length 5 days
Price NZD 5995 exc GST
Version 1.2

Course overview

View dates &
book now

Why study this course

The Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) training course provides an understanding of the network infrastructure devices, operations, and vulnerabilities of the TCP/IP protocol suite, and basic information security concepts, common network application operations and attacks, the Windows and Linux operating systems, and the types of data that are used to investigate security incidents. After completing this training, you will have the basic knowledge that is required to perform the job role of an associate-level cybersecurity analyst in a threat-centric security operations center (SOC).

This training prepares you for the 200-201 CBROPS v1.2 exam. If passed, you earn the Cisco Certified Cybersecurity Associate certification and the role of a junior or entry-level cybersecurity operations analyst in a SOC. This training also earns you 30 Continuing Education (CE) credits toward recertification.

Digital courseware: Cisco provides students with electronic courseware for this course. Students who have a confirmed booking will be sent an email prior to the course start date, with a link to create an account via learningspace.cisco.com before they attend their first day of class. Please note that any electronic courseware or labs will not be available (visible) until the first day of the class.

Exam Vouchers: Cisco exam vouchers are not included in the course fees but can be purchased separately where applicable.

Aligns to certification

Cisco Certified Cybersecurity Associate

Request Course Information

What you’ll learn

After taking this course, you should be able to:

Explain how a Security Operations Center (SOC) operates and describe the different types of services that are performed from a Tier 1 SOC analyst’s perspective
Explain the use of SOC metrics to measure the effectiveness of the SOC
Explain the use of a workflow management system and automation to improve the effectiveness of the SOC
Describe the Windows operating system features and functionality
Provide an overview of the Linux operating system
Understand common endpoint security technologies
Explain the network security monitoring (NSM) tools that are available to the network security analyst
Describe security flaws in the TCP/IP protocol and how they can be used to attack networks and hosts
Explain the data that is available to the network security analyst
Describe the basic concepts and uses of cryptography
Understand the foundational cloud security practices, including deployment and service models, shared responsibilities, compliance frameworks, and identity and access management, to effectively secure cloud environments against cyberthreats
Understand and implement advanced network security, data protection, secure application deployment, continuous monitoring, and effective disaster recovery strategies to secure cloud deployments
Understand the kill chain and the diamond models for incident investigations, and the use of exploit kits by threat actors
Identify the common attack vectors
Identify malicious activities
Identify patterns of suspicious behaviors
Identify resources for hunting cyber threats
Explain the need for event data normalisation and event correlation
Conduct security incident investigations
Explain the use of a typical playbook in the SOC
Describe a typical incident response plan and the functions of a typical computer security incident response team (CSIRT)

Cisco at Lumify Work

Lumify Work is the largest provider of authorised Cisco training in Australia, offering a wider range of Cisco courses, run more often than any of our competitors. Lumify Work has won awards such as ANZ Learning Partner of the Year (twice!) and APJC Top Quality Learning Partner of the Year.

View all Cisco at Lumify Work courses

Who is the course for?

This training is designed for associate-level cybersecurity analysts who are working in security operation centers.

Course subjects

Course outline

Defining the Security Operations Center
Understanding SOC Metrics
Understanding SOC Workflow and Automation
Understanding Windows Operating System Basics
Understanding Linux Operating System Basics
Understanding Endpoint Security Technologies
Understanding Network Infrastructure and Network Security Monitoring Tools
Understanding Common TCP/IP Attacks
Exploring Data Type Categories
Understanding Basic Cryptography Concepts
Cloud Security Fundamentals
Securing Cloud Deployments
Understanding Incident Analysis in a Threat-Centric SOC
Identifying Common Attack Vectors
Identifying Malicious Activity
Identifying Patterns of Suspicious Behavior
Identifying Resources for Hunting Cyber Threats
Understanding Event Correlation and Normalisation
Conducting Security Incident Investigations
Using a Playbook Model to Organise Security Monitoring
Describing Incident Response

Lab outline

Explore the Windows Operating System
Explore the Linux Operating System
Explore Endpoint Security
Explore TCP/IP Attacks
Use NSM Tools to Analyse Data Categories
Explore Cryptographic Technologies
Investigate Hacker Methodology
Investigate Browser-Based Attacks
Analyse Suspicious DNS Activity
Explore Security Data for Analysis
Investigate Suspicious Activity Using Security Onion
Hunt Malicious Traffic
Cisco XDR to Splunk Enterprise Integration Simulation
Correlate Event Logs, PCAPs, and Alerts of an Attack
Investigate Advanced Persistent Threats
Explore SOC Playbooks

Prerequisites

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

Familiarity with Ethernet and TCP/IP networking
Working knowledge of the Windows and Linux operating systems
Familiarity with basics of networking security concepts

The following Cisco course can help you gain the knowledge you need to prepare for this course:

Implementing and Administering Cisco Solutions (CCNA)

Downloads

Cisco Learning Credits Brochure

Terms & Conditions

The supply of this course by Lumify Work is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.