Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Course Objectives:

• Explain how a SOC operates and describe the different types of services that are performed from a Tier 1 SOC analyst’s perspective 
• Explain the use of SOC metrics to measure the effectiveness of the SOC 
• Explain the use of a workflow management system and automation to improve the effectiveness of the SOC 
• Describe the Windows operating system features and functionality 
• Provide an overview of the Linux operating system 
• Understand common endpoint security technologies 
• Explain the network security monitoring (NSM) tools that are available to the network security analyst 
• Describe security flaws in the TCP/IP protocol and how they can be used to attack networks and hosts 
• Explain the data that is available to the network security analyst 
• Describe the basic concepts and uses of cryptography 
• Understand the foundational cloud security practices, including deployment and service models, shared responsibilities, compliance frameworks, and identity and access management, to effectively secure cloud environments against cyberthreats 
• Understand and implement advanced network security, data protection, secure application deployment, continuous monitoring, and effective disaster recovery strategies to secure cloud deployments 
• Understand the kill chain and the diamond models for incident investigations, and the use of exploit kits by threat actors 
• Identify the common attack vectors 
• Identify malicious activities 
• Identify patterns of suspicious behaviors 
• Identify resources for hunting cyber threats 
• Explain the need for event data normalization and event correlation