Cisco CyberOps Associate

Monitor, detect, and respond to cybersecurity threats through hands-on labs aligned with the Cisco CyberOps Associate certification.

Cybersecurity Networking Cisco

Offered through the Cisco Networking Academy

Enroll

This content is offered through the Cisco Networking Academy. Joining the Cisco Networking Academy is free.

Teach this in a class → Request a price quote →

About this course

The CyberOps Associate labs prepare you for the Cisco Certified CyberOps Associate certification. You'll monitor network traffic, detect intrusions, analyze host-based and network-based threats, and apply security policies and procedures.

Topics covered include security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

What you'll learn

01 Analyze network intrusion events using Cisco security monitoring tools
02 Perform host-based and network-based forensic analysis on security incidents
03 Implement security event correlation using SIEM platforms and log analysis
04 Configure endpoint security controls and evaluate their effectiveness
05 Navigate the Cisco CyberOps SOC workflow from detection through incident response

Course outline

11 modules · 37 labs

Module 3: The Windows Operating System

6 items

3.0.3 Lab - Identify Running Processes

3.2.11 Lab - Exploring Processes, Threads, Handles, and Windows Registry

3.3.10 Lab - Create User Accounts

3.3.11 Lab - Using Windows PowerShell

3.3.12 Lab - Windows Task Manager

3.3.13 Lab - Monitor and Manage System Resources in Windows

Module 4: Linux Overview

5 items

4.2.6 Lab - Working with Text Files in the CLI

4.2.7 Lab - Getting Familiar with the Linux Shell

4.3.4 Lab - Linux Servers

4.4.4 Lab - Locating Log Files

4.5.4 Lab - Navigating the Linux Filesystem and Permission Settings

Module 5: Network Protocols

2 items

5.1.5 Lab - Tracing a Route

5.3.7 Lab - Introduction to Wireshark

Module 8: Address Resolution Protocol

1 item

8.2.8 Lab - Using Wireshark to Examine Ethernet Frames

Module 9: The Transport Layer

2 items

9.2.6 Lab - Using Wireshark to Observe the TCP 3-Way Handshake

9.3.8 Lab - Exploring Nmap

Module 10: Network Services

3 items

10.2.7 Lab - Using Wireshark to Examine a UDP DNS Capture

10.4.3 Lab - Using Wireshark to Examine TCP and UDP Captures

10.6.7 Lab - Using Wireshark to Examine HTTP and HTTPS Traffic

Module 17: Attacking What We Do

3 items

17.1.7 Lab - Exploring DNS Traffic

17.2.6 Lab - Attacking a mySQL Database

17.2.7 Lab - Reading Server Logs

Module 21: Cryptography

6 items

21.0.3 Lab - Creating Codes

21.1.6 Lab - Hashing Things Out

21.2.10 Lab - Encrypting and Decrypting Data Using OpenSSL

21.2.11 Lab - Encrypting and Decrypting Data Using a Hacker Tool

21.2.12 Lab - Examining Telnet and SSH in Wireshark

21.4.7 Lab - Certificate Authority Stores

Module 26: Evaluating Alerts

1 item

26.1.7 Lab - Snort and Firewall Rules

Module 27: Working with Network Security Data

7 items

27.1.5 Lab - Convert Data into a Universal Format

27.2.9 Lab - Regular Expression Tutorial

27.2.10 Lab - Extract an Executable from a PCAP

27.2.12 Lab - Interpret HTTP and DNS Data to Isolate Threat Actor

27.2.14 Lab - Isolate Compromised Host Using 5-Tuple

27.2.15 Lab - Investigating a Malware Exploit

27.2.16 Lab - Investigating an Attack on a Windows Host

Cyber Range

1 item

No Lab: Launch Cyber Range

What's in this course

Lab Exercises

Prerequisites

  • Solid understanding of networking fundamentals (TCP/IP, routing, switching)
  • Basic cybersecurity knowledge (threats, vulnerabilities, security concepts)
  • Familiarity with Linux command-line operations recommended

Best for

  • Advanced learners pursuing a career in security operations
  • Professionals preparing for the Cisco CyberOps Associate (200-201 CBROPS) certification
  • SOC analysts and incident responders building hands-on detection skills
  • Learners with networking and cybersecurity fundamentals who want to specialize

Certification

This course aligns to the Cisco Certified CyberOps Associate (200-201 CBROPS) certification, covering security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

Resources & support

NDG Online provides technical support specifically related to the functionality of the lab environment only. Any questions or concerns regarding the learning material or lab content must be directed to your instructor. Self-paced learners who find they require additional support are encouraged to seek out a course at a local academic institution.

Support Center

Instructor information

Demo Content

Common questions

Does this course prepare me for a certification?

The course aligns with the Cisco CyberOps Associate (200-201 CBROPS) exam objectives, covering security monitoring, host and network analysis, and SOC procedures.

How long do I have access?

Your purchase includes 6 months of access to the course content and labs.

What experience do I need before starting?

A solid grasp of networking fundamentals (TCP/IP, routing, switching) and basic cybersecurity concepts. Linux command-line familiarity helps in the analysis labs.