CompTIA Cybersecurity Analyst+ (CySA+) CT-04B

Module 1Assessing Information Security Risk

• Understand the importance of risk management
• Perform risk assessments across systems and networks
• Apply risk mitigation strategies
• Integrate documentation into the risk management process

Module 2Analyzing Reconnaissance Threats to Computing

• and Network Environments
• Evaluate the impact of reconnaissance activities
• Assess the risks posed by social engineering attacks

Module 3Analyzing Attacks on Computing and Network

• Environments
• Analyze the impact of system hacking attempts
• Evaluate the effects of web- based attacks
• Assess malware threats and their consequences
• Understand hijacking and impersonation attacks
• Analyze Denial - of - Service (DoS) incidents
• Examine mobile security threats
• Explore cloud security risks

Module 4Analyzing Post -Attack Techniques

• Identify command and control methods
• Assess techniques for maintaining persistence
• Analyze lateral movement and pivoting strategies
• Understand data exfiltration methods
• Examine anti - forensics techniques

Module 5Managing Vulnerabilities in the Organization

• Implement a comprehensive vulnerability management plan
• Identify and assess common system and application vulnerabilities
• Conduct vulnerability scans effectively
• Perform penetration testing on network assets

Module 6Collecting Cybersecurity Intelligence

• Set up platforms for collecting and analyzing security intelligence
• Gather data from network - based intelligence sources
• Collect intelligence from host - based sources

Module 7Analyzing Log Data

• Utilize common tools to analyze log files
• Leverage SIEM (Security Information and Event Management) tools for deeper
• analysis

Module 8Performing Active Asset and Network Analysis

• Investigate incidents using Windows - based tools
• Analyze events using Linux - based tools
• Perform basic malware analysis
• Examine indicators of compromise (IOCs)

Module 9Responding to Cybersecurity Incidents

• Deploy an effective incident response architecture
• Mitigate active threats
• Prepare your CSIRT team for forensic investigation

Module 10Investigating Cybersecurity Incidents

• Apply a structured forensic investigation plan
• Securely collect and analyze electronic evidence
• Conduct post - investigation follow - up and reporting

Module 11Addressing Security Architecture Issues

• Resolve identity and access management (IAM) problems
• Integrate security considerations throughout the Software Development Life Cycle
• (SDLC)