CompTIA CySA+ ( CS0-002 ) Cybersecurity Analyst
$199.00
Prepare for the CompTIA CySA+ CS0-002 exam and learn threat intelligence, vulnerability management, security monitoring and incident response. 14 hours 34 minutes across 36 videos, with 100 practice questions.
- Login details sent straight after payment
- Self-paced. Study on any device
- StemBoss Certificate of Completion
- 14-day refund promise
Secure checkout. Pay by card, Apple Pay or Google Pay.
CompTIA CySA+ (CS0-002) is an intermediate cybersecurity analyst course that prepares you for CompTIA’s CS0-002 exam. It is for security analysts, SOC staff and network administrators who want to find, study and respond to threats. The course runs for 14 hours 34 minutes across 36 videos, with 100 practice questions.
What you will learn
- Use threat data and threat intelligence to guide security work
- Run vulnerability management and read the output of scanning tools
- Spot risks in specialised technology and cloud services
- Apply controls that reduce attacks and software flaws
- Secure infrastructure and follow software and hardware assurance good practice
- Analyse logs and monitoring data, including SIEM and intrusion detection output
- Hunt for threats before they cause harm and use automation
- Follow the incident response process and spot signs of compromise
- Use basic digital forensic techniques
- Apply data privacy, risk and framework concepts
Course outline
- Threat and Vulnerability Management: threat intelligence, vulnerability scans, cloud and specialised technology risks
- Software and Systems Security: infrastructure security and software and hardware assurance
- Security Operations and Monitoring: analysing data, improving controls, threat hunting and automation
- Incident Response: the response process, indicators of compromise and basic forensics
- Compliance and Assessment: privacy, risk reduction, frameworks, policies and controls
- Afterword: recap, review questions and tips for exam day
Who this course is for
- Security analysts and SOC analysts
- Incident responders
- Vulnerability assessors
- Security engineers
- Network administrators moving into security
- IT professionals preparing for the CS0-002 exam
- Security+ holders ready for their next certification
Before you start
You should understand basic networking and know the common security tools, such as firewalls and antivirus. No earlier certification is required, though many learners take CompTIA Security+ first.
The course is self-paced. Use the 100 practice questions to find the domains you need to revisit, and spend extra time on the scenario-based lessons, since CySA+ tests how you apply what you know.
About the CS0-002 exam
CS0-002 is the CompTIA Cybersecurity Analyst (CySA+) exam that this course follows. CompTIA is a vendor-neutral body, so the certification is not tied to one product. CySA+ shows that you can use monitoring, threat intelligence and vulnerability management to defend an organisation and respond to incidents. In CompTIA’s security pathway it sits above Security+ and below the advanced CASP+ (now SecurityX), and it focuses on hands-on, defensive analyst work.
CompTIA refreshes its exams every few years and has since released newer CySA+ versions. Check comptia.org for the version on offer before you book, and see our CS0-003 course for the newer objectives.
The core skills, such as reading logs, managing vulnerabilities and handling incidents, stay the same across versions.
Jobs this course supports
- Security analyst
- SOC analyst
- Threat intelligence analyst
- Incident responder
- Vulnerability assessor
- Security engineer
| Skill level | Intermediate |
|---|---|
| Duration | 14 Hours 34 Minutes |
| Videos | 36 Course Videos |
| Questions | 100 Test Questions |
| Certification | CompTIA Cybersecurity Analyst (CySA+) |
| Exam code | CS0-002 |
| Certification body | CompTIA |
| Prerequisites | Basic networking and knowledge of common security tools. |
| Best for | Security analysts, SOC analysts, incident responders, network administrators |
| Topics covered | Threat intelligence, Vulnerability management, Infrastructure security, Security monitoring, Threat hunting, Incident response, Digital forensics, Risk and compliance |
| Format | Online video lessons, self-paced |
| Language | English |
| Closed captions | Yes |
| Certificate | StemBoss Certificate of Completion |
What is inside this course
6 modules and 36 lessons. Here is the full outline.
Module 1: Threat and Vulnerability Management12 lessons
- Instructor Intro
- About the Exam
- Test Taking Tips and Techniques
- Explain the importance of threat data and intelligence
- Given a scenario, utilize threat intelligence to support organizational security
- Given a scenario, perform vulnerability management activities Pt 1
- Given a scenario, perform vulnerability management activities Pt 2
- Given a scenario, analyze the output from common vulnerability assessment tools
- Explain the threats and vulnerabilities associated with specialized technology
- Explain the threats and vulnerabilities associated with operating in the Cloud
- Given a scenario, implement controls to mitigate attacks and software vulnerabilities Pt 1
- Given a scenario, implement controls to mitigate attacks and software vulnerabilities Pt 2
Module 2: Software and Systems Security5 lessons
- Given a scenario, apply security solutions for infrastructure management Pt 1
- Given a scenario, apply security solutions for infrastructure management Pt 2
- Given a scenario, apply security solutions for infrastructure management Pt 3
- Explain software assurance best practices
- Explain hardware assurance best practices
Module 3: Security Operations and Monitoring7 lessons
- Given a scenario, analyze data as part of security monitoring activities Pt 1
- Given a scenario, analyze data as part of security monitoring activities Pt 2
- Given a scenario, analyze data as part of security monitoring activities Pt 3
- Given a scenario, implement configuration changes to existing controls to improve security Pt 1
- Given a scenario, implement configuration changes to existing controls to improve security Pt 2
- Explain the importance of proactive threat hunting
- Compare and contrast automation concepts and technologies
Module 4: Incident Response4 lessons
- Explain the importance of the incident response process
- Given a scenario, apply the appropriate the incident response procedure
- Given an incident, analyze potential indicators of compromise
- Given a scenario, utilize basic digital forensic techniques
Module 5: Compliance and Assessment5 lessons
- Understand the importance of data privacy and protection
- Given a scenario, apply security concepts in support of organizational risk mitigation Pt 1
- Given a scenario, apply security concepts in support of organizational risk mitigation Pt 2
- Explain the importance of frameworks, policies, procedures, and controls Pt 1
- Explain the importance of frameworks, policies, procedures, and controls Pt 2
Module 6: Afterword3 lessons
- Recap
- Review Questions
- Before the Exam
Your learning path
Where CompTIA CySA+ ( CS0-002 ) Cybersecurity Analyst fits. Build your skills one step at a time.
Frequently asked questions
What does the CompTIA CySA+ CS0-002 course cover?
It follows the five CS0-002 domains: threat and vulnerability management, software and systems security, security operations and monitoring, incident response, and compliance and assessment.
Do I need Security+ before CySA+?
It is not required. You should know basic networking and common security tools, and many learners find Security+ a helpful first step.
Is CS0-002 the current CySA+ exam?
No. CompTIA has released newer CySA+ versions. Check comptia.org before booking, and take our CS0-003 course for the newer objectives.
Does the course cover digital forensics?
Yes. The incident response module includes basic digital forensic techniques and spotting indicators of compromise.
What jobs does CySA+ support?
It fits defensive roles such as SOC analyst, security analyst, threat intelligence analyst and incident responder.
Do I get a certificate?
Yes. You get a StemBoss Certificate of Completion when you finish the course.
Can I get a refund?
Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.



