The Cybersecurity Analysis course and exam are based on the following Intended Learning Outcomes (ILOs):

1 Security Operations
The candidate can…
1.1 Explain the importance of system and network architecture concepts in security operations.
1.2 Given a scenario, analyze indicators of potentially malicious activity.
1.3 Given a scenario, use appropriate tools or techniques to determine malicious activity.
1.4 Compare and contrast threat-intelligence and threat-hunting concepts.
1.5 Explain the importance of efficiency and process improvement in security operations.
2 Vulnerability Management
The candidate can…
2.1 Given a scenario, implement vulnerability scanning methods and concepts.
2.2 Given a scenario, analyze output from vulnerability assessment tools.
2.3 Given a scenario, analyze data to prioritize vulnerabilities.
2.4 Given a scenario, recommend controls to mitigate attacks and software vulnerabilities.
2.5 Explain concepts related to vulnerability response, handling, and management.
3 Incident Response and Management
The candidate can…
3.1 Explain concepts related to attack methodology frameworks.
3.2 Given a scenario, perform incident response activities.
3.3 Explain the preparation and post-incident activity phases of the incident management life cycle.
4 Reporting and Communication
The candidate can…
4.1 Explain the importance of vulnerability management reporting and communication.
4.2 Explain the importance of incident response reporting and communication.

You will need to use a special browser that uses camera proctoring while you take the exam. The exam consists of forty (40) multiple choice questions. Each question has three (3) answer options, exactly one (1) of which is correct. You should answer all questions, since there is no penalty for questions answered incorrectly, but you will not get any points for questions left unanswered.  To pass, you must answer at least 27 questions correctly. You will have 60 minutes to take the exam.

Ordering the exam entitles you to sit for one (1) exam attempt.

This is one of the eight exams you need to pass to earn the CCISO® diploma.