Intermediate
150 pts
Cisco CyberOps Associate (200-201): SOC Analyst Foundations
A complete, exam-grade track for the Cisco Certified CyberOps Associate (200-201 CBROPS) — the entry point to a career as a Security Operations Center (SOC) analyst. Covers all five official domains: security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies & procedures — with practical examples of attack techniques, packet and log analysis, and the incident-response lifecycle.
Exam Facts — Cisco
Exam code
200-201 CBROPS
Questions
~95–105 (multiple-choice and drag-and-drop)
Duration
120 minutes
Passing score
Pass / Fail (cut score not publicly disclosed)
Exam cost
$300 USD
Certification validity
3 years
What you'll master
- Security Concepts (20%) — the CIA triad, defense-in-depth, attack surfaces and vectors, common vulnerabilities, and security models
- Security Monitoring (25%) — data types (full packet, NetFlow, logs), detection methods, and the impact of encryption and NAT on visibility
- Host-Based Analysis (20%) — endpoint telemetry, Windows/Linux artifacts, malware analysis outputs, and the role of endpoint tooling
- Network Intrusion Analysis (20%) — interpreting IDS/IPS alerts, packet and protocol analysis, and extracting indicators from traffic
- Security Policies & Procedures (15%) — incident response (NIST), the cyber kill chain, the Diamond Model, SOC metrics, and evidence handling