CompTIA CyberDefense Pro
CompTIA CyberDefense Pro builds practical cyber defense skills for learners preparing for the CompTIA CySA+ CS0-003 exam and the CompTIA CyberDefense Pro competency assessment . The course uses the CompTIA CertMaster platform with online lessons, guided demonstrations, quizzes, practice assessments, and hands-on simulations across Windows , Windows Server , Linux , routers, and switches.
No sessions available
Check back later or contact a provider directly.
Description
CompTIA CyberDefense Pro builds practical cyber defense skills for learners preparing for the CompTIA CySA+ CS0-003 exam and the CompTIA CyberDefense Pro competency assessment. The course uses the CompTIA CertMaster platform with online lessons, guided demonstrations, quizzes, practice assessments, and hands-on simulations across Windows, Windows Server, Linux, routers, and switches.
Participants practice Wireshark, Nmap, vulnerability scanning, threat detection, log analysis, incident response, and automation with Python and PowerShell. Risk and compliance topics include GDPR, PCI DSS, and HIPAA. After completion, learners can investigate alerts, identify vulnerabilities, document evidence, and support SOC workflows.
What You Will Learn
Module 1: Security Operations, Architecture, and Threat Intelligence
CompTIA CyberDefense Pro content aligned with the CompTIA CySA+ CS0-003 (V3) exam objectives, including security operations, logging, time synchronization, retention, system hardening, IAM, PAM, secrets management, encryption, and data protection.
Security analysis for hybrid cloud, ZTNA, SASE, virtualization, containerization, APIs, endpoint systems, mobile devices, OT, ICS, and SCADA environments.
Threat intelligence and threat hunting using indicators of compromise, OSINT, MITRE ATT&CK, STRIDE, the Pyramid of Pain, threat mapping, and cyber deception concepts.
Module 2: Monitoring, Detection, and Security Tools
Guided labs for packet, log, endpoint, file, email, and reputation analysis using Wireshark, tcpdump, Snort, Suricata, Zeek, Security Onion 2, Kibana, CyberChef, VirusTotal, YARA, WHOIS, AbuseIPDB, and MXToolbox.
Detection work covering network, host, application, cloud, identity, social engineering, and business email compromise indicators.
Use of SIEM concepts, EDR/XDR, MDM, UEBA, dashboards, alert tuning, SOAR, APIs, Python, PowerShell, and shell scripting for repeatable security tasks.
Module 3: Vulnerability Management and Risk
Asset inventory, scan planning, credentialed and non-credentialed scanning, passive and active scanning, segmentation, PCI DSS, CIS benchmarks, and ISO 27000 series concepts.
Practice with Nmap, Metasploit, Nessus, OpenVAS, Nuclei, Burp Suite, ZAP, Nikto, ScoutSuite, Prowler, Trivy, Checkov, Atomic Red Team, and Caldera.
Vulnerability prioritization using CVSS, EPSS, exploitability, asset value, impact, remediation options, exceptions, compensating controls, and validation of fixes.
Module 4: Incident Response, Reporting, and Communication
Incident response workflows covering preparation, detection, analysis, containment, eradication, recovery, post-incident review, evidence handling, chain of custody, legal hold, and escalation.
Reporting practice for vulnerability findings, compliance evidence, risk scorecards, action plans, executive summaries, incident handovers, after-action reports, root cause analysis, and operational metrics.
After completion, participants should be able to monitor security events, investigate suspicious activity, assess vulnerabilities, use common cyber defense tools, automate selected tasks, document findings, and support Tier 1 or Tier 2 security operations work.
Certification & Exam
Participants can prepare for the CompTIA Certificate of Competency associated with CompTIA CyberDefense Pro. CompTIA awards this certificate after the participant passes the CyberDefense Pro competency assessment; course completion alone does not grant the certificate.
The assessment includes up to 45 performance-based questions or tasks, with a 120-minute time limit. Scores range from 200 to 2,000, and the listed passing score is 1,370. Depending on the provider’s delivery model, preparation may include CompTIA CertMaster simulations, hands-on cybersecurity tasks, and CompTIA practice assessments. The course may also support preparation for related cyber defense topics covered in CompTIA CySA+, but learners should confirm the certification target with the provider.
If an assessment voucher is included, the provider should state this clearly. For current requirements, see the official CompTIA CyberDefense Pro page.
What You Will Achieve
After completing CompTIA CyberDefense Pro, participants will be able to:
Analyze threat intelligence, indicators of compromise, and attacker behavior to support security monitoring, incident triage, and risk decisions.
Perform reconnaissance, enumeration, vulnerability assessment, and traffic analysis using lab tools such as Kali Linux, Nmap, Metasploit, and Wireshark.
Assess network, system, and application security weaknesses, then recommend controls for vulnerability management, infrastructure protection, and risk reduction.
Implement defensive measures for network appliances, intrusion prevention, identity and access management, endpoint protection, and host-based security.
Automate common security tasks using Python and PowerShell, including log review, data parsing, basic alerting, and repeatable investigation steps.
Evaluate compliance and risk requirements using frameworks and regulatory standards such as GDPR, PCI DSS, and HIPAA, then connect findings to security controls and reporting needs.
Investigate security events by analyzing network traffic, forensic drive images, endpoint evidence, social engineering activity, and related system data.
Respond to incidents using structured practices for containment, evidence handling, recovery planning, communication of findings, and preparation for the CompTIA Certificate of Competency, CompCert.
Training Providers
1 providerFAQs
General Information
Prerequisites & Requirements
Certification & Exam
Get Custom In-house Training
Post once, get competitive offers from multiple providers. Choose the one that fits your team.
Similar Trainings
EC Council Certified Ethical Hacker Certification (CEH)
The Certified Ethical Hacker (CEH) course teaches participants how to identify and fix security vulnerabilities. Through hands-on labs and theory, learners use attacker tools to test and strengthen network security. The training covers networks , web applications , cloud , mobile , and IoT systems. Participants develop technical skills for security audits and vulnerability assessments. Upon completion, professionals can perform penetration testing and report security gaps to protect systems from exploitation.
EC-Council Certified Penetration Testing Professional (CPENT)
The Certified Penetration Testing Professional (CPENT ) program is the world’s most comprehensive guided penetration testing program. It offers a complete hands-on pentesting methodology and AI techniques mapped to all pentesting phases. CPENT enables you to master pentesting within an enterprise network environment, evaluating intrusion risks and compiling actionable, structured reports. Distinguish yourself with the CPENT , learning beyond technical knowledge, scoping engagements, understanding design, estimating effort, and presenting findings and thrive as a leader in offensive security with versatile skills. CPENT combines guided learning with hands-on practice while immersing you in diverse live scenarios involving IoT systems, segmented networks, and advanced defenses, with practical challenges mapped to each domain. Gain expertise in advanced skills necessary to create your tools, conduct advanced binary exploitation, double pivot, customize scripts, and write your exploits to penetrate the deepest pockets of the network. Hands-on course featuring CTFs, 110+ labs, live cyber ranges, and 50+ tools Practical exam tests skills on unique multi-disciplinary network ranges The only program to teach a complete pen testing methodology
EC-Council Computer Hacking Forensic Investigator (CHFI)
EC-Council’s CHFI program enabled cybersecurity professionals with the knowledge and skills to perform effective digital forensics investigations and accomplish forensic readiness. Master the methodological approach of forensics process, evidence handling procedures, chain-of-custody, acquisition, preservation, analysis, and reporting of digital evidence, legal procedures to ensure it is admissible in court. Build skills beyond traditional hardware and memory forensics and with cloud forensics, mobile and IoT, investigating web application attacks, and malware forensics. CHFI equips you with skills to validate/triage incidents and guide the incident response teams. Build job ready skills on immersive 68 forensic labs Earn globally recognized and demanded by employers Flexible learning options without quitting your current jobs
EC-Council Certified Network Defender (CND) Program
The CND course gives you a full introduction to network security from a defender’s perspective. You learn how to protect, monitor, detect and respond to threats in modern network environments. The training includes theory and hands-on labs , teaching you how to secure networks, configure firewalls and IDS/IPS, monitor traffic, and implement defensive strategies across devices, endpoints, cloud and IoT. The goal is to equip you to build and maintain secure networks for organisations.
EC-Council Certified Cloud Security Engineer (CCSE)
The CCSE course teaches you how to secure, manage and defend cloud environments. You learn both general cloud-security principles and specific skills for major providers such as AWS, Azure and GCP. The training includes hands-on labs, real-world scenarios, and guidance on cloud governance, compliance, monitoring and incident response. This course prepares you to build secure cloud infrastructures , protect data and services in multi-cloud settings , and respond to cloud-specific threats professionally.
EC-Council Certified DevSecOps Engineer (ECDE)
The ECDE course shows you how to combine development, operations and security in a modern workflow. You learn both cloud-native and on-prem security practices, secure coding, infrastructure hardening, automated security tools and continuous deployment pipelines. The training uses many hands-on labs to build real-world DevSecOps skills.