Cisco CCNA Cybersecurity

Cisco CCNA Cybersecurity Operations Fundamentals v1.2 certification validates foundational cybersecurity skills for analyzing threats, monitoring security, and responding to incidents in a Security Operations Center (SOC).

4578 learners enrolled

Skill level

Beginner, Intermediate

Hours to complete

Projects

Prerequisites

None

Your Guided Learning Pathway

In this 15 hour course your instructor will take you from beginner to intermediate level practitioner.

Step 1

Step 2

Step 3

Learn Cyberops Principles

Updated for the latest 200-201 CCNACBR v1.2 exam.

You’ll learn foundational cybersecurity skills, including threat detection, incident response, and security monitoring in a Security Operations Center (SOC) environment.

The course covers new topics such as integration of AI (predictive AI in endpoint technologies for security monitoring, behavioral/statistical/sliding window anomaly detection versus rule-based methods, and generative AI in social engineering attacks.

Manage Network Security

Passing the Cisco CyberOps Associate exam equips you to monitor and analyze security threats in a company’s Security Operations Center, enhancing its ability to detect and respond to cyberattacks.

You can implement security policies, perform intrusion analysis, and strengthen overall cybersecurity defenses to protect organizational assets.

Get Exam Ready

This course not only prepares you to become a senior cybersecurity manager, but it also prepares you for the exam.

Read real-world case studies about cybersecurity attacks and responses. Then take over 350 exam-style questions in order to prepare you for the Cisco Cybersecurity Associate exam.

What it Covers

This course prepares you for a cybersecurity role in any organization.

Security Concepts
Security Monitoring
Host-Based Analysis
Network Intrusion Analysis
Security Policies and Procedures

Benefits of the certification

Getting certified in your chosen career path is essential, but passing the Cisco Cybersecurity Associate exam gets you:

Industry-Recognized Certification
Enhanced Cybersecurity Knowledge
Career Advancement Opportunities
Improved SOC Operational Skills
Increased Employability

Target audience

This certification is ideal for:

Aspiring SOC Analysts
IT Professionals
Entry-Level Cybersecurity Enthusiasts
Network Security Technicians
Students/Recent Graduates

Prerequisites

While there are no mandatory prerequisites, Cisco recommends having:

Basic Networking Knowledge
Fundamental Cybersecurity Understanding
Experience with IT Systems

Cisco CCNA Cybersecurity Exam Pass

Noah Hirahara

Noah took us up on a recent CCNA Cybersecurity exam challenge. He was one of many students who took and passed his Cybersecurity certification using our program.

Due to numerous recent high-profile hacks and network attacks, cyber operations jobs are in high demand. The CCNA Cybersecurity certification prepares you for a role as a network security engineer or CyberOps desk engineer, helping to advise and protect network managers on potential or active threats.

The Cisco Certified Cybersecurity Associate certification validates your skills and knowledge in security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures. We cover a wide range of topics, accompanied by optional follow-along labs that let you configure security devices using free online or downloadable software and tools.

Your Instructor

Jay Ocampo CCIE

Jay is CCIE 59340 and is a seasoned Solution Network Architect/Engineer with 15 years of total experience in IT service management, operations, system integration, network engineering, and enterprise architecture.

He obtained a Cisco CCIE Data Center certification and holds a Bachelor's degree in Electronics and Communications Engineering. He currently lives in the Philippines.

Curriculum

Module 1	Security Concepts
Unit 1	IT Security Overview and CIA Triad
Unit 2	Compare Security Deployments - Security Deployment Overview
Unit 3	Compare Security Deployments - Network, Endpoint, and Application Security Systems
Unit 4	Compare Security Deployments - Agentless and Agent-Based Protections
Unit 5	Compare Security Deployments - Legacy Antivirus and Antimalware
Unit 6	Compare Security Deployments - SIEM, SOAR and Log Management
Unit 7	Container and Virtual Environments
Unit 8	Cloud-Security-Deployments
Unit 9	Describe Security Terms - Threat Intelligence
Unit 10	Describe Security Terms - Threat Hunting
Unit 11	Describe Security Terms - Malware Analysis
Unit 12	Describe Security Terms - Threat Actor
Unit 13	Describe Security Terms - Run Book Automation (RBA)
Unit 14	Describe Security Terms - Reverse Engineering
Unit 15	Describe Security Terms - Sliding Window Anomaly Detection
Unit 16	Threat-Modeling-for-Security-Operations
Unit 17	DevSec Ops Security in the Development Pipeline
Unit 18	Compare Security Concepts - Risk , Threat, Vulnerability and Exploit
Unit 19	Describe the Principles of the Defense-in-Depth Strategy - Defense-in-Depth Strategy
Unit 20	Compare Access Control Models - Access Control Modes
Unit 21	Attribute-Based-Access-Control ABAC
Unit 22	Describe terms as defined in CVSS - CVSS Metrics and Calculation
Unit 23	CVSS Temporal Metrics
Unit 24	CVSS Environmental Metrics
Unit 25	Identify the Challenges of Data Visibility (network, host, and cloud) in Detection - Cloud Data Visibility
Unit 26	Identify the Challenges of Data Visibility (network, host, and cloud) in Detection - Network Data Visibility
Unit 27	Identify the Challenges of Data Visibility (network, host, and cloud) in Detection - Endpoint Data Visibility
Unit 28	Identify Potential Data Loss from Provided Traffic Profiles - Data Loss Prevention (DLP)
Unit 29	Interpret the 5-Tuple Approach to Isolate a Compromised Host in a Grouped Set of Logs - Identify Compromised Host Using 5-Tuple
Unit 30	Compare Rule-based Detection vs. Behavioral and Statistical Detection - Signature-based vs Behavior-based Detection
Unit 31	Exam
Module 2	Security Monitoring
Unit 1	Compare Attack Surface and Vulnerability - Attack Surface
Unit 2	Compare Attack Surface and Vulnerability - Vulnerabilities
Unit 3	Identify the Types of Data Provided by These Technologies - TCP Dump
Unit 4	Identify the Types of Data Provided by These Technologies - Netflow
Unit 5	Identify the Types of Data Provided by These Technologies - Next Gen Firewall
Unit 6	Identify the Types of Data Provided by These Technologies - Traditional Stateful Firewall
Unit 7	Identify the Types of Data Provided by These Technologies - Application Visibility and Control
Unit 8	Identify the Types of Data Provided by These Technologies - Web Content Filtering
Unit 9	Compare Attack Surface and Vulnerability - Attack Surface Identify the Types of Data Provided by These Technologies - Email Content Filtering
Unit 10	Describe the Impact of These Technologies on Data Visibility - Access Control List
Unit 11	Describe the Impact of These Technologies on Data Visibility - NAT/PAT
Unit 12	Describe the Impact of These Technologies on Data Visibility - Tunneling and Encapsulation
Unit 13	Describe the Impact of These Technologies on Data Visibility - TOR
Unit 14	Describe the Impact of These Technologies on Data Visibility - Encryption
Unit 15	Describe the Impact of These Technologies on Data Visibility - P2P
Unit 16	Describe the Impact of These Technologies on Data Visibility - Load Balancing
Unit 17	Describe the Uses of These Data Types in Security Monitoring - Full Packet Capture
Unit 18	Describe the Uses of These Data Types in Security Monitoring - Session Data
Unit 19	Describe the Uses of These Data Types in Security Monitoring - Transaction Data
Unit 20	Describe the Uses of These Data Types in Security Monitoring - Statistical Data
Unit 21	Describe the Uses of These Data Types in Security Monitoring - Metadata
Unit 22	Describe the Uses of These Data Types in Security Monitoring - Alert Data
Unit 23	Describe Network Attacks - Denial of Service and Distributed Denial of Service Attack
Unit 24	Describe Network Attacks - Man-in-the-Middle
Unit 25	Describe Web Application Attacks - SQL Injection
Unit 26	Describe Web Application Attacks - Command Injection
Unit 27	Describe Web Application Attacks - Cross-site Scripting
Unit 28	Security Monitoring for Social Engineering Attacks
Unit 29	Security Monitoring for Generative AI Attacks
Unit 30	Describe Endpoint-based Attacks - Buffer Overflow
Unit 31	Describe Endpoint-based Attacks - Command and Control
Unit 32	Describe Endpoint-based Attacks - Malware
Unit 33	Describe Endpoint-based Attacks - Ransomware
Unit 34	Describe the Impact of Certificates on Security - Encryption
Unit 35	Describe the Impact of Certificates on Security - Cryptanalysis
Unit 36	Describe the Impact of Certificates on Security - Symmetric Encryption & Asymmetric Encryption
Unit 37	Describe the Impact of Certificates on Security - Public Key Infrastructure (PKI)
Unit 38	Identify the Certificate Components in a Given Scenario - Certificate Components
Unit 39	Exam
Module 3	Host-Based Analysis
Unit 1	Host-based Firewall
Unit 2	Endpoint Technologies - Host-based Intrusion Prevention System
Unit 3	Endpoint Technologies - Host-based Antivirus
Unit 4	Endpoint Technologies - Host-based AntiMalware
Unit 5	Endpoint Technologies for Host Based Analysis
Unit 6	Predictive AI in Host Based Analysis
Unit 7	Components of an Operating System - Windows Processes
Unit 8	Components of an Operating System - Windows Threads
Unit 9	Components of an Operating System - Windows Registry Database
Unit 10	Components of an Operating System - Windows Handles
Unit 11	Components of an Operating System - Windows Services
Unit 12	Components of an Operating System - Windows Users, Group and Permissions
Unit 13	Components of an Operating System - Windows Network Activity from the CLI
Unit 14	Components of an Operating System - Windows Network Activity from the GUI
Unit 15	Components of an Operating System - Linux Bash – Bourne Again Shell
Unit 16	Components of an Operating System - Linux Directory Structure
Unit 17	Components of an Operating System - Linux Basic File manipulations
Unit 18	Components of an Operating System - Linux File system permissions
Unit 19	Components of an Operating System - Linux Piping and redirection of standard I/O
Unit 20	Components of an Operating System - Linux Grep stream filter
Unit 21	Components of an Operating System - Linux processes
Unit 22	Components of an Operating System - Linux Netstat command
Unit 23	Describe the role of attribution in an investigation - Role of Attribution in an Investigation
Unit 24	Identify Type of Evidence Used Based on Provided Logs - Types of Evidence
Unit 25	Interpreting OS Application and Command Line Logs
Unit 26	Interpret the Output Report of a Malware Analysis Tool
Unit 27	Interpret Operating System, Application, or Command Line Logs to Identify an Event - Interpret Logs to Identify an Event
Unit 28	SIEM Platforms for Host Based Analysis
Unit 29	SOAR Platforms for Security Operations
Unit 30	Exam
Module 4	Network Intrusion Analysis
Unit 1	Map the Provided Events to Source Technologies
Unit 2	Compare Impact and no Impact for These Items
Unit 3	Compare Deep Packet Inspection with Packet Filtering and Stateful Firewall Operation
Unit 4	Compare Inline Traffic Interrogation and Taps or Traffic Monitoring
Unit 5	Compare the Characteristics of Data obtained from Taps or Traffic Monitoring
Unit 6	Extract files from a TCP Stream when Given a PCAP File and Wireshark
Unit 7	Identify Key Elements in an Intrusion from a Given PCAP File
Unit 8	Interpreting Protocol Header Fields - Ethernet Frame
Unit 9	Interpreting Protocol Header Fields - IPv4
Unit 10	Interpreting Protocol header fields - IPv6
Unit 11	Interpreting Protocol Header Fields - TCP
Unit 12	Interpreting Protocol Header Fields - UDP
Unit 13	Interpreting Protocol Header Fields - ICMP
Unit 14	Interpreting Protocol Header Fields - DNS
Unit 15	Interpreting Protocol Header Fields - ARP
Unit 16	Interpret Common Artifact Elements from an Event to Identify an Alert
Unit 17	Interpret Basic Regular Expressions
Unit 18	Exam
Module 5	Security Policies and Procedures
Unit 1	Describe Management Concepts
Unit 2	Describe the Elements in an Incident Response Plan as Stated in NIST.SP800-61r2
Unit 3	The Cyber Kill Chain (Incident Response Model)
Unit 4	NIST.SP800-61 - Preparation
Unit 5	NIST.SP800-61 - Detection and Analysis
Unit 6	NIST.SP800-61 - Containment, Eradication, and Recovery
Unit 7	NIST.SP800-61 - Post-incident Activity
Unit 8	Incident Response Stakeholders
Unit 9	Describe concepts as documented in NIST.SP800-86
Unit 10	Identify these elements used for Network profiling - Throughput
Unit 11	Identify these elements used for Network profiling - Session Duration
Unit 12	Identify these elements used for Network profiling - Ports Used
Unit 13	Identify these elements used for Network profiling - Critical Asset Address Space
Unit 14	Identify these elements used for Host profiling - Listening Ports
Unit 15	Identify these elements used for Host profiling - Logged in Users/Services Accounts
Unit 16	Identify these elements used for Host profiling - Running Processes
Unit 17	Identify these elements used for Host profiling - Applications
Unit 18	Identify Protected Data in a Network
Unit 19	The Diamond Model (Incident Response model)
Unit 20	SOC Metrics
Unit 21	Exam
Module 6	Bonus Exams
Unit 1	Bonus Exam 1
Unit 2	Bonus Exam 2

What’s in every How to Network membership?

Try Us Out Risk Free

We’re so confident that you will love our videos, labs and practice exams that we offer a 30-day 100% money back guarantee.

Choose your plan. Cancel anytime.

Access All Areas - Monthly

After a 7 day trial for $1

$29 Per month

Unlimited IT certification courses
Video lessons
Exam brain training drills and lessons
End-of-lesson exams
Instructor-led hands-on labs
End-of-course certificates
Forum supported by experts
Exam Prep PBQs - Value $297
Discounts on products and websites
Live Linux VMs 24/7
Live Cisco rack access 24/7
Cancel anytime

Best Value – Over 5 Months Free

Access All Areas - Yearly

5.1 months free! One Free book!

$199 Per year

Unlimited IT certification courses
Video lessons
Exam brain training drills and lessons
End-of-lesson exams
Instructor-led hands-on labs
End-of-course certificates
Forum supported by experts
Exam Prep PBQs - Value $297
Discounts on products and websites
Live Linux VMs 24/7
Live Cisco rack access 24/7
Cancel anytime

Access All Areas - Lifetime

One payment, no renewals. Three free books!

$497 Lifetime

Unlimited IT certification courses
Video lessons
Exam brain training drills and lessons
End-of-lesson exams
Instructor-led hands-on labs
End-of-course certificates
Forum supported by experts
Exam Prep PBQs - Value $297
Discounts on products and websites
Live Linux VMs 24/7
Live Cisco rack access 24/7
Cancel anytime

Recent Courses

How to Become a Cyber Security Engineer2

4.9

22.5K Students

CompTIA Security+ [801]

The CompTIA Security+ is an entry-level, vendor-neutral cybersecurity certification that validates foundational skills in identifying threats, securing systems, managing risks, and ensuring compliance across IT environments. SY0-801 latest version.

CompTIA, Beginner, Cybersecurity, Intermediate

cybersecurity vs information security illustrationweb

4.5

4.6K Students

Cisco CCNA Cybersecurity

Cisco, Beginner, Cybersecurity, Intermediate

4.6

3.8K Students

Microsoft Azure AI Fundamentals

The Microsoft Azure AI Fundamentals (AI-900) exam validates foundational knowledge of AI concepts, including machine learning, computer vision, NLP, and generative AI, and their application using Azure AI tools, preparing candidates for entry-level AI roles.

Microsoft, AI, Beginner

Reviews

I passed my Network+ using howtonetworks training videos, follow-along labs and practice exams. I highly recommend them if you want to pass first time.

Adam

CompTIA Network+ Certified

I was struggling to understand the materials but following the howtonetwork.com course really helped make it all clear to me. Highly recommended.

Ajlinda

Microsoft Azure Certified

I passed the Cisco CCNA, CCNA Security and CCNP exams in six months. Doing the hands-on labs really helped and of course the live Cisco racks are perfect!

Igor

Cisco CCNA & CCNP

I passed my Network+ on my first attempt. I'd been dreading it but I was more than ready come exam day. The practice exams and labs really helped me to understand everthing.

Kristy

CompTIA Network+

Frequently Asked Questions

If your questions isn’t answered here then please log a ticket and we’ll get right back to you.

What does the site teach me?

If you want to have a successful career in IT you need to be qualified. We help you prepare for your IT certification exams with video lectures, exams, case studies and lab exercises to follow along.

I'm a beginner. Where do I start?

We’ve set out a roadmap for you to follow. This is based on many years experience in the IT industry. It gives you a solid foundation and internationally recognized qualifications. From there you can choose to specialize.

What is included in the joining fee?

Everything! All courses, videos and exams. All future courses we add. No hidden extras and no catches. Check out the full list of courses here.

How much is it to join?

It’s $1 to join and then $20 per month thereafter. You can quit any time by logging into your account.

Is there a money back guarantee?

Yes. You have a full 30 days to try the site out. If you aren’t happy for any reason then please log a ticket and we will refund you. This applies if you haven’t completely finished your course.

Are my credit card details safe?

Absolutely. We don’t actually store any card details. All transactions take place via a fully PCI compliant card processing company.

How many courses can I take at once?

You can access one course at a time. We have this limit to prevent overwhelm. There are hundreds of hours of training here and most people take one certification at a time. If you need to study for a related course at the same time then please log a ticket.

Can I download the course videos?

Unfortunately not. But your videos all stream off super fast cloud servers on the cloud so are delivered locally to you.

Cisco CCNA Cybersecurity

Your Guided Learning Pathway

Learn Cyberops Principles

Manage Network Security