Security Operations and Monitoring

Catalog description

This course continues the preparation of students for the CompTIA CySA+ (Exam CS0-003) certification examination. During this course, students will learn how to follow incident response procedures including how to apply detection and containment, eradication, recovery, and post-incident processes. Students will also learn to apply risk mitigation and establish frameworks, policies, and procedures, perform vulnerability management, analyze output from enumeration tools, configure infrastructure vulnerability scanning parameters, analyze output from infrastructure vulnerability scanners, and mitigate vulnerability issues.