About this course
A CyberSec First Responder® is an IT professional with demonstrated expertise in networking, operating systems, application security, or cloud environments, and their role is to identify, protect, detect, respond, and recover from cybersecurity incidents for their organizations. They have the advanced knowledge, skills, and abilities to deal with an evolving and constantly changing threat landscape, zero-day exploits, and can identify and implement cybersecurity best practices, develop processes for continuous monitoring and detection of potential anomalies, collect and analyze data, accurately report results, are experienced with SIEM and SOAR, and act quickly to mitigate or remediate cyber threats. CyberSec First Responders play a critical role in securing their organization’s information, business processes, and intellectual property.
Duration
This course is 40 class hours, typically consisting of 4-hour sessions (Lecture and Lab) with additional hours for Lab and practice assessments
Benefits
- Assess cybersecurity risks to the organization.
- Analyze the threat landscape.
- Analyze various reconnaissance threats to computing and network environments.
- Analyze various attacks on computing and network environments.
- Analyze various post-attack techniques.
- Assess the organization’s security posture through auditing, vulnerability management, and penetration testing.
- Collect cybersecurity intelligence from various network-based and host-based sources
- Analyze log data to reveal evidence of threats and incidents.
- Perform active asset and network analysis to detect incidents.
- Respond to cybersecurity incidents using containment, mitigation, and recovery tactics.
- Investigate cybersecurity incidents using forensic analysis techniques.
Who should take this course?
The CyberSec First Responder® (CFR) course is designed for individuals with between 2 and 5 years of experience working in a computing environment as part of a CERT, CSIRT, SOC, Command and control (C2) systems, or as an IT professional on the front line of cybersecurity at their organizations, who desire or are required to protect critical information systems before, during, and after an incident which may be a cybersecurity attack.
Class Details
Exam Objectives:
- 1.0 Identify (22%)
- 2.0 Protect (24%)
- 3.0 Detect (18%)
- 4.0 Respond (19%)
- 5.0 Recover (17%)
Exam Specifications
Number of Items: 80
Passing Score: 70% or 73% depending on exam form. Forms have been statistically equated.
Duration: 120 minutes (Note: exam time includes 5 minutes for reading and signing the Candidate Agreement and 5 minutes for the Pearson VUE testing system tutorial.)
Exam Options: In person at Pearson VUE test centers or online via Pearson OnVUE
Item Formats: Multiple Choice/Multiple Response
Pre-requisites:
No prerequisite is required.
Labs:
- Labs provided by Logical Operations and LearnOnDemand
Additional Resources
No additional resources
