Securing Cisco Networks with Threat Detection and Analysis

Course details

Overview:

Securing Cisco® Networks with Threat Detection Analysisis a lab-intensive course that prepares you to take the Cyber Security Specialist Certification exam (600-199) and hit the ground running as a security analyst team member.

The course combines lecture materials and hands-on labs throughout to make sure that you are able to successfully understand cyber security concepts and to recognize specific threats and attacks on your network. This course is designed to teach you how a network security operations center (SOC) works and how to begin to monitor, analyze, and respond to security threats within the network. The job role for a security analyst will vary from industry to industry and differ in the private sector versus the public sector.

Objectives:

• Upon completing this course, the learner will be able to meet these overall objectives:
• Monitor security events
• Configure and tune security event detection and alarming
• Analyze traffic for security threats
• Respond appropriately to security incidents

Content:

• Course Introduction: Overview of Network Security and Operations
• Network and Security Operations Data Analysis
• Packet Analysis
• Network Log Analysis
• Baseline Network Operations
• Preparing for Security Incidents
• Detecting Security Incidents
• Investigating Security Incidents
• Reacting to an Incident
• Communicating Incidents Effectively
• Postevent Activity