CCNACBRCICiscoCI-CCNACBR2.0<ul> <li>Explain the foundational aspects of SOCs, including their types, key roles, and essential metrics for measuring effectiveness</li><li>Apply foundational security principles and risk management concepts to assess and protect organizational assets</li><li>Compare and apply various access control models to secure network resources and enforce organizational policies</li><li>Differentiate between various cloud deployment and service models and explain the shared responsibility for security in cloud environments</li><li>Explain the fundamental concepts of cryptography, differentiate between various cryptographic algorithms, and explain how cryptographic principles are applied in real-world protocols and systems, including key exchange, digital signatures, and SSL/TLS</li><li>Identify and describe the fundamental components and operational aspects of the Windows operating system for security analysis</li><li>Identify and describe the fundamental components and operational aspects of the Linux operating system for security analysis</li><li>Utilize Command Line Interfaces (CLIs) for basic system interaction, file management, and security-related tasks in both Windows and Linux environments</li><li>Explain the operations and identify the security implications of foundational network protocols</li><li>Describe and differentiate various network security controls and their application in protecting network infrastructure</li><li>Differentiate between various Intrusion Detection and Prevention Systems (IDS/IPS) and interpret their output for security monitoring</li><li>Describe and compare various endpoint security solutions and their effectiveness against common threats</li><li>Identify and categorize various cyber threat actors based on their motivations, capabilities, and common tactics</li><li>Explain the phases of the Classic Cyber Kill Chain model and identify adversary actions within each phase</li><li>Apply the MITRE ATT&amp;CK Framework to analyze and map cyber threats, explain its structure and application, and leverage it to enhance threat detection, incident response, and communication within a security operations environment</li><li>Identify and describe various social engineering attack vectors, including those enhanced by generative AI</li><li>Describe fundamental network attack techniques that exploit protocol vulnerabilities</li><li>Describe advanced attack vectors and emerging threats in the current cybersecurity landscape</li><li>Identify and explain various types of Network Security Monitoring (NSM) data and their role in incident investigation</li><li>Identify and interpret various log data sources from operating systems, network devices, and security tools</li><li>Explain NetFlow operations and its application as a security tool for network monitoring and anomaly detection</li><li>Describe common web application attacks and their exploitation methods</li><li>Apply advanced log analysis techniques to interpret security data and identify patterns of suspicious behavior</li><li>Perform packet capture analysis and apply digital forensics processes to investigate security incidents. Focus on the 5-tuple and timestamps to correlate with other logs, as this is your primary tool for network forensics</li><li>Explain malware analysis outputs and apply threat intelligence frameworks for security investigations</li><li>Explain the architecture, core functions, and best practices for implementing SIEM solutions for effective security monitoring</li><li>Explain the features and common use cases of SOAR platforms for automating and streamlining incident response</li><li>Explain the Cisco XDR platform, its core functions, features, and components for unified threat detection and response</li><li>Differentiate between the legacy and modern NIST incident response guidance (NIST SP 800-61 Rev 2 and NIST SP 800-61 Rev 3 special publications), describe core IR components aligned with the NIST CSF 2.0 framework, and identify how these practices satisfy CMMC requirements for the Defense Industrial Base (DIB)</li><li>Describe the roles, categories, and operational services of Computer Security Incident Response Teams (CSIRTs)</li><li>Explain the concept of security monitoring playbooks and their components for standardizing incident response</li><li>Apply various threat hunting methodologies to proactively identify and mitigate hidden threats within a network</li></ul><p>There are no formal prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:</p> <ul> <li>Familiarity with Ethernet and TCP/IP networking</li><li>Working knowledge of the Windows and Linux operating systems</li><li>Familiarity with basics of networking security concepts</li></ul><p>These skills can be found in the following Cisco Learning Offering:</p> <ul> <li><span class="cms-link-marked"><a class="fl-href-prod" href="/swisscom/en/course/cisco-ccna"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>Implementing and Administering Cisco Solutions <span class="fl-prod-pcode">(CCNA)</span></a></span></li></ul><ul> <li>Associate-Level Cybersecurity Analysts</li></ul><ul> <li>Security Operations</li><li>Security Principles</li><li>Access Control Models</li><li>Cloud Security Models</li><li>Cryptography for Security Operations</li><li>Windows OS Basics</li><li>Linux OS Basics</li><li>CLIs in Security</li><li>Network Protocols</li><li>Network Security Controls</li><li>IDS and IPS</li><li>Endpoint Security</li><li>Threat Actors</li><li>Cyber Kill Chain Model</li><li>MITRE Attack Framework</li><li>Social Engineering Attacks</li><li>Network Attack Fundamentals</li><li>Advanced Threat Landscape</li><li>Network Security Monitoring (NSM) Data</li><li>Log Data Sources</li><li>NetFlow for Security Monitoring</li><li>Web Application Attacks</li><li>Advanced Log Analysis</li><li>Packet Capture and Forensics</li><li>Malware and Threat Intelligence</li><li>Security Information and Event Management (SIEM)</li><li>Security Orchestration, Automation, and Response (SOAR)</li><li>Extended Detection and Response (XDR)</li><li>Incident Response Planning</li><li>CSIRT Roles and Operations</li><li>Security Monitoring Playbooks</li><li>Threat Hunting Methodologies</li></ul>- Explain the foundational aspects of SOCs, including their types, key roles, and essential metrics for measuring effectiveness - Apply foundational security principles and risk management concepts to assess and protect organizational assets - Compare and apply various access control models to secure network resources and enforce organizational policies - Differentiate between various cloud deployment and service models and explain the shared responsibility for security in cloud environments - Explain the fundamental concepts of cryptography, differentiate between various cryptographic algorithms, and explain how cryptographic principles are applied in real-world protocols and systems, including key exchange, digital signatures, and SSL/TLS - Identify and describe the fundamental components and operational aspects of the Windows operating system for security analysis - Identify and describe the fundamental components and operational aspects of the Linux operating system for security analysis - Utilize Command Line Interfaces (CLIs) for basic system interaction, file management, and security-related tasks in both Windows and Linux environments - Explain the operations and identify the security implications of foundational network protocols - Describe and differentiate various network security controls and their application in protecting network infrastructure - Differentiate between various Intrusion Detection and Prevention Systems (IDS/IPS) and interpret their output for security monitoring - Describe and compare various endpoint security solutions and their effectiveness against common threats - Identify and categorize various cyber threat actors based on their motivations, capabilities, and common tactics - Explain the phases of the Classic Cyber Kill Chain model and identify adversary actions within each phase - Apply the MITRE ATT&CK Framework to analyze and map cyber threats, explain its structure and application, and leverage it to enhance threat detection, incident response, and communication within a security operations environment - Identify and describe various social engineering attack vectors, including those enhanced by generative AI - Describe fundamental network attack techniques that exploit protocol vulnerabilities - Describe advanced attack vectors and emerging threats in the current cybersecurity landscape - Identify and explain various types of Network Security Monitoring (NSM) data and their role in incident investigation - Identify and interpret various log data sources from operating systems, network devices, and security tools - Explain NetFlow operations and its application as a security tool for network monitoring and anomaly detection - Describe common web application attacks and their exploitation methods - Apply advanced log analysis techniques to interpret security data and identify patterns of suspicious behavior - Perform packet capture analysis and apply digital forensics processes to investigate security incidents. Focus on the 5-tuple and timestamps to correlate with other logs, as this is your primary tool for network forensics - Explain malware analysis outputs and apply threat intelligence frameworks for security investigations - Explain the architecture, core functions, and best practices for implementing SIEM solutions for effective security monitoring - Explain the features and common use cases of SOAR platforms for automating and streamlining incident response - Explain the Cisco XDR platform, its core functions, features, and components for unified threat detection and response - Differentiate between the legacy and modern NIST incident response guidance (NIST SP 800-61 Rev 2 and NIST SP 800-61 Rev 3 special publications), describe core IR components aligned with the NIST CSF 2.0 framework, and identify how these practices satisfy CMMC requirements for the Defense Industrial Base (DIB) - Describe the roles, categories, and operational services of Computer Security Incident Response Teams (CSIRTs) - Explain the concept of security monitoring playbooks and their components for standardizing incident response - Apply various threat hunting methodologies to proactively identify and mitigate hidden threats within a networkThere are no formal prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are: - Familiarity with Ethernet and TCP/IP networking - Working knowledge of the Windows and Linux operating systems - Familiarity with basics of networking security concepts These skills can be found in the following Cisco Learning Offering: - Implementing and Administering Cisco Solutions (CCNA)- Associate-Level Cybersecurity Analysts- Security Operations - Security Principles - Access Control Models - Cloud Security Models - Cryptography for Security Operations - Windows OS Basics - Linux OS Basics - CLIs in Security - Network Protocols - Network Security Controls - IDS and IPS - Endpoint Security - Threat Actors - Cyber Kill Chain Model - MITRE Attack Framework - Social Engineering Attacks - Network Attack Fundamentals - Advanced Threat Landscape - Network Security Monitoring (NSM) Data - Log Data Sources - NetFlow for Security Monitoring - Web Application Attacks - Advanced Log Analysis - Packet Capture and Forensics - Malware and Threat Intelligence - Security Information and Event Management (SIEM) - Security Orchestration, Automation, and Response (SOAR) - Extended Detection and Response (XDR) - Incident Response Planning - CSIRT Roles and Operations - Security Monitoring Playbooks - Threat Hunting Methodologies5 days3305.003290.004495.004170.004495.004495.004495.004495.0044.00