Skip to main content

CompTIA CySA+ (CS0-003)

Intermediate6 Hrs 32 Min82 Course Videos100 Test Questions

$399.00

CompTIA CySA+ CS0-003 training for people who want to work as a SOC or cybersecurity analyst. 6 hours 32 minutes of video across 82 lessons, plus 100 practice questions.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Download the course outline (PDF)

This CompTIA CySA+ CS0-003 course prepares you for the CompTIA Cybersecurity Analyst (CySA+) exam and the day-to-day work of a SOC analyst. It is for IT and security staff who want to detect, analyse and respond to threats. You get 6 hours 32 minutes of training in 82 videos, with 100 test questions to check your progress.

What you will learn

  • Read system and network logs to spot signs of an attack
  • Use threat intelligence to understand who might target you and how
  • Run vulnerability scans and make sense of the results
  • Rank weaknesses using CVSS scores and CVE records
  • Use threat modelling to plan where to put your defences
  • Follow an incident response plan from detection to recovery
  • Write clear reports and share security metrics with managers
  • Explain how CySA+ fits into a cybersecurity career path

Course outline

  1. CompTIA CySA+ CS0-003 basics: what CySA+ is, the exam objectives, the cybersecurity career pathway and the US DoD baseline certification list
  2. Domain 1: Security operations: system and network design, log files, identity and access management, encryption, signs of malicious activity, threat intelligence and the tools a SOC uses
  3. Domain 2: Vulnerability management: finding weaknesses, CVSS and CVE, threat modelling, secure coding and managing risk
  4. Domain 3: Incident response and management: response frameworks, detection, containment and recovery
  5. Domain 4: Reporting and communication: writing reports, compliance, metrics and talking to stakeholders
  6. Course closeout: practice questions and tips for the exam

The four main modules match the four CS0-003 domains, so you can track your progress against the exam objectives. Security operations is the largest part, which reflects how much of a SOC analyst’s day is spent reading logs and alerts. The closeout module gives you practice questions and tips for exam day.

Who this course is for

  • IT staff who want to specialise in security analysis
  • Security analysts and SOC team members
  • Network administrators who handle security alerts
  • People preparing to sit the CySA+ CS0-003 exam
  • Learners who have finished Security+ and want the next step

Before you start

You should already understand basic networking and common security tools such as firewalls and antivirus. Security+ level knowledge will help a lot. CompTIA suggests that exam candidates also have some hands-on experience in a security or IT role, but there is no formal entry requirement for the course.

About the CS0-003 exam

CS0-003 is an exam for the CompTIA Cybersecurity Analyst (CySA+) certification. CompTIA is a vendor-neutral IT certification body. CySA+ shows that you can detect, analyse and respond to cyber threats using behaviour-based analysis. CompTIA has released a newer version of CySA+ and plans to retire CS0-003, so check the CompTIA website for current dates before you book your exam.

Jobs this course supports

  • SOC analyst
  • Cybersecurity analyst
  • Threat intelligence analyst
  • Incident response specialist
  • Vulnerability analyst

Skill level

Intermediate
Duration

6 Hrs 32 Min
Videos

82 Course Videos
Questions

100 Test Questions
Certification

CompTIA Cybersecurity Analyst (CySA+)
Exam code

CS0-003
Certification body

CompTIA
Prerequisites

Basic networking and security knowledge. Security+ level skills help.
Best for

Security analysts, SOC analysts, network administrators, incident responders, vulnerability analysts
Topics covered

Security operations, log analysis, threat intelligence, vulnerability management, threat modelling, incident response, reporting and communication
Format

Online video lessons, self-paced
Language

English
Closed captions

Yes
Certificate

StemBoss Certificate of Completion

What is inside this course

6 modules and 82 lessons. Here is the full outline.

Module 1 - CompTIA CySA+ CS0-003 Basics6 lessons
  1. 1.1 Course Introduction
  2. 1.2 Instructor Introduction
  3. 1.3 What is CySA
  4. 1.4 Exam Objectives
  5. 1.5 Cybersecurity Pathway
  6. 1.6 DoD Baseline Certfication
Module 2 - CompTIA CySA+ CS0-003 Domain 1 - Security Operations32 lessons
  1. 2.1 Domain 1 - Security Operations Overview
  2. 2.2 System and Network Architecture Concepts in Security Operations
  3. 2.3 Log Files
  4. 2.4 Operating Systems
  5. 2.5 Infrastructure Concepts
  6. 2.6 Network Architecture
  7. 2.7 Software Defined Networking
  8. 2.8 Whiteboard Discussion - Network Architectures
  9. 2.9 Identity and Access Management IAM Basics
  10. 2.10 Demonstration - IAM
  11. 2.11 Encryption
  12. 2.12 Sensitive Data
  13. 2.13 1.2 Analyze Indicators of Potentially Malicious Activity
  14. 2.14 Network Attack
  15. 2.15 Host Attacks
  16. 2.16 Application Related Attacks
  17. 2.17 Social Attacks
  18. 2.18 Tools or Techniques to Determine Malicious Activity Overview
  19. 2.19 Tools and Toolsets For Identifying Malicious Activity
  20. 2.20 Common Techniques
  21. 2.21 Programming Concerns
  22. 2.22 Threat-Intelligence and Threat-Hunting Concepts Overview
  23. 2.23 Threat Actors
  24. 2.24 Tactics, Techniques and Procedures
  25. 2.25 Confidence Levels IOC
  26. 2.26 Collection Sources
  27. 2.27 Threat Intelligence
  28. 2.28 Cyber Response Teams
  29. 2.29 Security Operations
  30. 2.30 Standardized Processes and Operations
  31. 2.31 Security Operations Tools and Toolsets
  32. 2.32 Module 2 Review
Module 3 - CompTIA CySA+ CS0-003 Domain 2 - Vulnerability Management18 lessons
  1. 3.1 Domain 2 - Vulnerability Management Overview
  2. 3.2 Vulnerability Discovery and Scanning
  3. 3.3 Asset Discovery and Scanning
  4. 3.4 Industry Frameworks
  5. 3.5 Mitigating Attacks
  6. 3.6 CVSS and CVE
  7. 3.7 Common Vulnerability Scoring System (CVSS) interpretation
  8. 3.8 CVE Databases
  9. 3.9 Cross Site Scripting (XSS)
  10. 3.10 Vulnerability Response, Handling, and Management
  11. 3.11 Control Types (Defense in Depth, Zero Trust)
  12. 3.12 Patching and Configurations
  13. 3.13 Attack Surface Management
  14. 3.14 Risk Management Principles
  15. 3.15 Threat Modeling
  16. 3.16 Threat Models
  17. 3.17 Secure Coding and Development (SDLC)
  18. 3.18 Module 3 Review
Module 4 - CompTIA CySA+ CS0-003 Domain 3 - Incident Response and Management9 lessons
  1. 4.1 Domain 3 - Incident Response and Management Overview
  2. 4.2 Attack Methodology Frameworks
  3. 4.3 Cyber Kill Chain
  4. 4.4 Frameworks to Know
  5. 4.5 Incident Response and Post Reponse
  6. 4.6 Detection and Analysis
  7. 4.7 Post Incident Activities
  8. 4.8 Containment, Eradication and Recovery
  9. 4.9 Module 4 Review
Module 5 - CompTIA CySA+ CS0-003 Domain 4 - Reporting and Communication12 lessons
  1. 5.1 Domain 4 - Reporting and Communication Overview
  2. 5.2 Reporting Vulnerabilities Overview
  3. 5.2.1 Vulnerability Reporting
  4. 5.3 Compliance Reports
  5. 5.4 Inhibitors to Remediation
  6. 5.5 Metrics and KPI's
  7. 5.6 Incident Response Reporting and Communications Overview
  8. 5.7 Incident Declaration
  9. 5.8 Communication with Stakeholders
  10. 5.9 Root Cause Analysis
  11. 5.10 Lessons Learned and Incident Closure
  12. 5.11 Module 5 Review
Module 6 - CompTIA CySA+ CS0-003 - Course Closeout5 lessons
  1. 6.1 Course Closeout Overview
  2. 6.2 Practice Questions
  3. 6.3 Exam Process
  4. 6.4 Continuing Education
  5. 6.5 Course Closeout

Your learning path

Where CompTIA CySA+ (CS0-003) fits. Build your skills one step at a time.

Take firstCompTIA Network+ N10-009 Certification Training
You are hereCompTIA CySA+ (CS0-003)
Next stepCompTIA SecurityX (CAS-005)

Frequently asked questions

What exam does this CySA+ course prepare me for?

It prepares you for the CompTIA Cybersecurity Analyst (CySA+) exam, code CS0-003. The lessons follow its four domains.

What are the four CySA+ CS0-003 domains?

Security operations, vulnerability management, incident response and management, and reporting and communication.

Should I take Security+ before CySA+?

It is not required, but it helps. CySA+ builds on the ideas covered in Security+ and goes deeper into analysis and response.

Is CS0-003 still the current CySA+ exam?

CompTIA has released a newer CySA+ version and plans to retire CS0-003. Check the CompTIA website for the exact dates before you book.

How long is the CompTIA CySA+ CS0-003 course?

It runs for 6 hours 32 minutes across 82 videos, with 100 test questions to practise with.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$399.00
Buy course