The CSX Cybersecurity Practitioner (CSX-P) Certification Suite allows individuals to purchase the training and exam at the same time at a reduced rate! Through purchasing the bundle, individuals will gain access to the full prep course and receive a voucher for the exam!

Training Description

The CSX Cybersecurity Practitioner Certification Prep Course provides students with 6 months of access to informative lessons and in-depth, skills-based labs to hone their technical cybersecurity skills and prepare for the [CSX Cybersecurity Practitioner Certification Exam]. Upon completion of each lab, students are provided a detailed analytic report, identifying student strengths and weaknesses. Additionally, as students complete the course, they are awarded continuing professional education (CPE) credits which are applicable to the maintenance of their professional certifications.

Continuing Professional Education (CPE) Credit Count: 48

• Network infrastructure analysis
• Digital asset analysis

Understanding how to perform basic asset identification is an important skill for any cybersecurity practitioner. Leveraging Nmap, students will learn how to scan a network and ascertain the identity of computers for which they are responsible.

• Network topology construction
• Network topology diagrams
• Data flow identification and mapping
• Tools used to construc a network topology diagram
• Tools used to identify data flow

In order to capture and analyze data flow, it is important to understand how to use Wireshark and Tshark, two critical tools in the packet analysis field. This lab uses these tools to map endpoints on the network.

• Importance of security reviews
• Gap analysis and its usage

In addition to small networks, it is also just as important to practice working with large networks. Using nmap and zenmap, students will identify assets on an enterprise network in order to build a topology.

• Security policies and procedures
• NDevelopment processes for policies and procedures

In this lab, students will be identifying packets with Wireshark. Due to the fact that data loss is a prevalent aspect of technology, we will need to recover the packet identification data using the tool Foremost.

Since Wireshark cannot handle large amounts of data, students will be using SiLK for this lab. SiLK is a command line network protocol analyzer to help students map out endpoints within a network.

• Information sharing
• Importance of understanding legal and regulatory requirements

• Information sharing
• Elements of threat modeling

In this lab students will utilize their skills learned during the Identify module to map their network and identify an attack on a local machine.

• Vulnerability scanning
• Vulnerability scanning personnel
• Vulnerability scanning tools

• Configuring monitoring systems and alert criteria
• Implementing, configuring, and monitoring security tools and systems
• Developing use cases for security monitoring

In this lab, students will create firewall rules for a pfSense firewall based on their networks layout.

• Incident response plan development
• Incident response plan testing

• Incorporation of security considerations into business functions
• Monitoring user access, privileges, and permissions
• Monitoring compliance with security procedures and requirements
• Development of security training

In this lab, students will create a Windows restore point and backup Linux servers from a baseline functioning.

• Evaluating security configurations against established configuration standards and baselines

In this lab, students will learn how to set file permissions on a Windows Server as well as an Ubuntu machine.

In this lab, students will get more practice with MBSA, as well as be introduced to the Linux Tiger IDS.

In this lab, students will utilize skills learned during the Protect module to complete a challenge.

• Assessing threat level and potential impact of anomalous behavior and security events
• Researching, analyzing, and correlating system activity and security events
• Monitoring and analyzing outputs from security tools, systems, and logs

In this lab, students will set up a standalone Security Onion Server and explore and test its functionality.

In this lab, students will learn to construct simple SNORT rules and use Kibana to conduct post-attack analysis.

An investigation is needed for an intrusion detection system alert. It is up to you to find out what is occurring in the network.

• Analyzing malicious activity to determine weaknesses and exploitation methods

In this lab, students will use WireShark to conduct a live packet capture while they are under attack. Using WireShark, students will identify the attackers IP, type of attack, and isolate anomalous packets related to the attack,

This lab focuses on the security of the local area network. Vulnerability scans are key when maintaining strong security within a network. In this lab, vulnerability assessments will be conducted.

In this lab, students will utilize skills learned during the Detect module to complete a challenge.

• Notifying appropriate incident response teams according to established protocols
• Identifying and implementing appropriate containment measures, countermeasures, and corrective actions

SecOnion has reported a possible threat to the network. Investigate the tripped SNORT rule and the system logs of the possible affected systems via Kibana.

• Collecting and preserving digital evidence according to relevant regulations and laws
• Conducting post-incident analysis
• Communicating and documenting notifications and outcomes of incident response

After snort reported a network issue, conduct network forensics on the compromised system to identify and isolate the possible malware.

This lab utilizes various tools (ClamAV, strings, PDF Parser, and PDF Toolkit), to not only investigate, but also evaluate, possible malware that has been attached to emails in the form of PDFs.

Properly document and preserve evidence of an attack, and notify the appropriate personnel in accordance with the Incident Response Plan.

Using Security Onion, SGUIL, Snort, SSH, and ClamAV, students will put their Respond domain skills to the test.

• Validating whether restored systems meet security requirements

In this lab, students will restore a Linux server from an image. Students will use Clonezilla in order to restore the Linux system to its baseline.

• Updating security plans and procedures following incident response

In this labs, students will restore a Windows Server using the restore point created in Lab 2.2 "Restore and Backup".