CompTIA

CompTIA CySA+ (CS0-003)

Learn and practice key cybersecurity concepts to earn your prestigious CompTIA certification.

(CS0-003.AE2) / ISBN : 978-1-64459-602-9
This course includes
Interactive Lessons
Gamified TestPrep
Hands-On Labs
AI Tutor (Add-on)
Get A Free Trial

About This Course

Practice and prepare with our CompTIA CySA+ training and study guide to pass the CS0-003 exam!  This course includes everything you need to learn about the cybersecurity concepts covered in the exam.  You’ll get lessons on threat detection, incident response, and security analysis. Our practice questions are totally aligned with the exam objectives enabling you to prepare better. Similarly, our hands-on Live Labs will enhance your learning and put your knowledge to test in realistic scenarios. By the end of this course, you'll be well-prepared to take the CompTIA CySA+ certification exam and start your journey as a cybersecurity analyst.

Skills You’ll Get

  • Strong understanding of infrastructure, operating systems & networking
  • Ability to identify and analyze threats related to networks, hosts, services, and applications
  • Execute threat  intelligence organization-wide
  • Ability to set up Honeypot and Kali Linux
  • Discover, prioritize, and remediate vulnerabilities.
  • Respond to security incidents effectively, following established protocols for containment, eradication, and recovery.
  • Conduct digital forensic investigations
  • Understanding of cybersecurity regulations and their implications

 

Download Course Outline

1

Introduction

  • CompTIA
  • The Cybersecurity Analyst+ Exam
  • What Does This Course Cover?
  • Objectives Map for CompTIA CySA+ Exam CS0-003
  • Setting Up a Kali and Metasploitable Learning Environment
2

Today's Cybersecurity Analyst

  • Cybersecurity Objectives
  • Privacy vs. Security
  • Evaluating Security Risks
  • Building a Secure Network
  • Secure Endpoint Management
  • Penetration Testing
  • Reverse Engineering
  • Efficiency and Process Improvement
  • The Future of Cybersecurity Analytics
  • Summary
  • Exam Essentials
  • Lab Exercises
3

System and Network Architecture

  • Infrastructure Concepts and Design
  • Operating System Concepts
  • Logging, Logs, and Log Ingestion
  • Network Architecture
  • Identity and Access Management
  • Federation
  • Encryption and Sensitive Data Protection
  • Summary
  • Exam Essentials
  • Lab Exercises
4

Malicious Activity

  • Analyzing Network Events
  • Investigating Host-Related Issues
  • Investigating Service- and Application-Related Issues
  • Determining Malicious Activity Using Tools and Techniques
  • Summary
  • Exam Essentials
  • Lab Exercises
5

Threat Intelligence

  • Threat Data and Intelligence
  • Threat Classification
  • Applying Threat Intelligence Organizationwide
  • Summary
  • Exam Essentials
  • Lab Exercises
6

Reconnaissance and Intelligence Gathering

  • Mapping, Enumeration, and Asset Discovery
  • Passive Discovery
  • Summary
  • Exam Essentials
  • Lab Exercises
7

Designing a Vulnerability Management Program

  • Identifying Vulnerability Management Requirements
  • Configuring and Executing Vulnerability Scans
  • Developing a Remediation Workflow
  • Overcoming Risks of Vulnerability Scanning
  • Vulnerability Assessment Tools
  • Summary
  • Exam Essentials
  • Lab Exercises
8

Analyzing Vulnerability Scans

  • Reviewing and Interpreting Scan Reports
  • Validating Scan Results
  • Common Vulnerabilities
  • Summary
  • Exam Essentials
  • Lab Exercises
9

Responding to Vulnerabilities

  • Analyzing Risk
  • Managing Risk
  • Implementing Security Controls
  • Threat Classification
  • Managing the Computing Environment
  • Software Assurance Best Practices
  • Designing and Coding for Security
  • Software Security Testing
  • Policies, Governance, and Service Level Objectives
  • Summary
  • Exam Essentials
  • Lab Exercises
10

Building an Incident Response Program

  • Security Incidents
  • Phases of Incident Response
  • Building the Foundation for Incident Response
  • Creating an Incident Response Team
  • Classifying Incidents
  • Attack Frameworks
  • Summary
  • Exam Essentials
  • Lab Exercises
11

Incident Detection and Analysis

  • Indicators of Compromise
  • Investigating IoCs
  • Evidence Acquisition and Preservation
  • Summary
  • Exam Essentials
  • Lab Exercises
12

Containment, Eradication, and Recovery

  • Containing the Damage
  • Incident Eradication and Recovery
  • Validating Data Integrity
  • Wrapping Up the Response
  • Summary
  • Exam Essentials
  • Lab Exercises
13

Reporting and Communication

  • Vulnerability Management Reporting and Communication
  • Incident Response Reporting and Communication
  • Summary
  • Exam Essentials
  • Lab Exercises
14

Performing Forensic Analysis and  Techniques for Incident Response

  • Building a Forensics Capability
  • Understanding Forensic Software
  • Conducting Endpoint Forensics
  • Network Forensics
  • Cloud, Virtual, and Container Forensics
  • Post-Incident Activity and Evidence Acquisition
  • Forensic Investigation: An Example
  • Summary
  • Exam Essentials
  • Lab Exercises

1

Today's Cybersecurity Analyst

  • Creating a Firewall Rule
  • Setting Up a Honeypot on Kali Linux
  • Enforcing Password Policies
2

System and Network Architecture

  • Installing Docker
  • Exporting the Windows File Registry
  • Installing the AD FS Role
  • Examining PKI Certificates
3

Malicious Activity

  • Performing a DoS Attack with the SYN Flood
  • Confirming the Spoofing Attack in Wireshark
  • Using Performance Monitor
  • Performing a Memory-Based Attack
  • Using Social Engineering Techniques to Plan an Attack
  • Capturing a Packet Using Wireshark
  • Examining Audited Events
  • Enabling Logging for Audited Objects
  • Using TCPdump to Capture Packets
  • Analyzing Malware Using VirusTotal
  • Using Command-line Tools
4

Reconnaissance and Intelligence Gathering

  • Using the hping Program
  • Scanning the Local Network
  • Performing an Intense Scan in Zenmap
  • Using Shodan to Find Webcams
  • Using Recon-ng to Gather Information
  • Identifying Search Options in Metasploit
  • Performing Reconnaissance on a Network
  • Using Maltego to Gather Information
  • Using the whois Program
  • Using nslookup for Passive Reconnaissance
  • Making Syslog Entries Readable
  • Using the netstat Command
  • Performing Zone Transfer Using dig
5

Designing a Vulnerability Management Program

  • Using OWASP ZAP
  • Consulting a Vulnerability Database
  • Conducting Vulnerability Scanning Using Nessus
  • Using Nikto
  • Performing Vulnerability Scanning Using OpenVAS
  • Performing Session Hijacking Using Burp Suite
6

Analyzing Vulnerability Scans

  • Detecting Rootkits
  • Exploiting LFI and RFI Vulnerabilities
  • Exploiting a Website Using SQL Injection
  • Conducting CSRF Attacks
  • Defending Against a Buffer Overflow Attack
  • Understanding Local Privilege Escalation
  • Performing a MITM Attack
  • Attacking a Website Using XSS Injection
7

Building an Incident Response Program

  • Examining MITRE ATT&CK
8

Incident Detection and Analysis

  • Creating a Forensic Image with FTK Imager
9

Performing Forensic Analysis and  Techniques for Incident Response

  • Using EnCase Imager
  • Observing an MD5-Generated Hash Value
  • Observing a SHA256-Generated Hash Value
  • Analyzing Forensics with Autopsy
  • Cracking Passwords Using Cain and Abel
  • Finding Hard Drives on the System
  • Completing the Chain of Custody

Any questions?
Check out the FAQs

Still have unanswered questions and need to get in touch?

Contact Us Now

CompTIA CySA+ is an IT certification for cybersecurity professionals focused on incident detection, prevention, and response.

The cost of this exam varies depending on the testing center and packages, but it generally ranges from 400 USD to 2500 USD.

The passing score for this exam is 750 on a scale of 100-900.

The duration of this CompTIA  exam is 165 minutes.

The format of the CS0-003 exam is a mix of multiple-choice and performance-based questions, consisting of a maximum of 85 questions.

Yes, CySA+ is generally considered harder than Security+. Security+ is a foundational certification, while CySA+ focuses on more advanced practical skills.

Related Courses

All Course
scroll to top