Following completion of this 200-201 CBROPS Online Training Course, you ought to be able to:

• From the viewpoint of a Tier 1 SOC analyst, explain the various services that are provided and how a Security Operations Center (SOC) functions.
• Describe the tools that a network security analyst can use for Network Security Monitoring (NSM).
• Describe the information that the network security analyst can access.
• Describe the fundamental ideas and applications of cryptography.
• Describe the TCP/IP protocol’s security holes and the ways in which hosts and networks can be attacked using them.
• Recognize prevalent technologies for endpoint security.
• Recognize threat actors’ usage of exploit kits and the kill chain and diamond models for incident investigations.
• Find resources to hunt down cyber threats.
• Describe the necessity of normalizing event data and event
• Determine any malevolent activity.
• Determine questionable behavior patterns.
• Investigate security incidents.
• Describe how a standard playbook is used in the SOC.
• Describe how SOC measurements are used to gauge the SOC’s efficacy.
• Describe how automation and a workflow management system are used to increase the SOC’s efficacy.
• Explain the roles of a typical Computer Security Incident Response Team (CSIRT) and an incident response plan.
• Describe how to record security occurrences in a consistent way by using Vocabulary for Event Recording and Incident Sharing (VERIS).