StationX
Start free

Home › Exams › 200-201

200-201 hands-on labs — Cisco CCNA Cybersecurity

200-201 is the exam for Cisco CCNA Cybersecurity. 68 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 85 hours of hands-on practice across the 66 that state a duration. Each runs in your browser, with nothing to install. All 68 are in StationX Membership ($299/year).

68 labsabout 85 hoursStationX Membership · $299 / year · 68 labs

Access

StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

200-201 at a glance

Exam code
200-201
Certification
Cisco CCNA Cybersecurity
Vendor
Cisco
Labs
68 in StationX Membership
How the labs are mapped
68 from the StationX roadmap
Practice time
About 85 hours, from the 66 of 68 labs that state a duration

The 68 200-201 labs

  1. Analysis and Recommendation Report1 h
  2. Analyze and Classify Malware1 h
  3. Analyze and Update a Company BCP/BIA/DRP/CIRP2 h
  4. Analyze Browser-based Heap Spray Attack1 h
  5. Analyze DoomJuice Infection to Identify Attack Vector and Payload1 h
  6. Analyze Malicious Activity in Memory Using Volatility1 h
  7. Applying Filters to TCPDump and Wireshark1 h
  8. Automated in-Depth Packet Decoding2 h
  9. BCP DRP and Test Planning2 h
  10. Clonezilla_Network1 h
  11. Comprehensive Threat Response2 h
  12. Conduct Root Cause Analysis for System Crashes1 h
  13. Conduct Supplemental Monitoring1 h
  14. Create Custom Snort Rules1 h
  15. Creating a Case in Autopsy2 h
  16. Creating a Case in OSF1 h
  17. Creation of BCP and DRP3 h
  18. Detect Embedded Shellcode in a Microsoft Office Document1 h
  19. DNS as a Remote Shell1 h
  20. Dynamic Malware Analysis1 h
  21. Event Log Collection with QRadar2 h
  22. Firewall Setup and Configuration1 h
  23. FTK Analysis & Reporting1 h
  24. FTK Enterprise Fundamentals and Mobile Investigation2 h
  25. Fundamentals of Malware Analysis
  26. Gap Analysis of Firewall Rules2 h
  27. Identifying Intrusion and Mitigating Attacks with RHEL Server1 h
  28. Identifying Malicious Callbacks1 h
  29. Identifying Malicious Network Connections1 h
  30. Implementing Least-Privilege on Windows1 h
  31. Incident Detection and Identification3 h
  32. Linux Analysis1 h
  33. Log Analysis1 h
  34. MAC Analysis1 h
  35. Metadata Extraction Lab1 h
  36. MITRE - Attack1 h
  37. Monitoring for False Positives1 h
  38. Monitoring Network Traffic1 h
  39. Monitoring Network Traffic for Potential IOA/IOC1 h
  40. Network Segmentation (FW/DMZ/WAN/LAN)1 h
  41. Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)1 h
  42. Parse Files Out of Network Traffic1 h
  43. Practical Malware Analysis Labs
  44. QRADAR - Auditing Service Accounts and Generating SIEM Reports2 h
  45. QRadar - Centralized Monitoring1 h
  46. QRADAR - Collecting Logs and Verifying Syslog Aggregation with pfSense2 h
  47. QRadar - IDS Setup and Configuration1 h
  48. QRadar - Log Correlation & Analysis to Identify Potential IOC1 h
  49. QRadar - Log Correlation & Analysis to Identify Potential IOC with Custom Log Types3 h
  50. QRADAR - Setting Up SYSLOG Forwarding From a Windows System2 h
  51. QRadar - Snort Signatures, IDS Tuning, and Blocking1 h
  52. Recover from Incident2 h
  53. Registry Analysis2 h
  54. Remove Trojan1 h
  55. Searching for Indicators of Compromise1 h
  56. Setting up Filters and Queries in Kibana1 h
  57. Setting Up Zones in a Firewall1 h
  58. Snorby Setup and Operation1 h
  59. SNORT Configuration and Operation Lab1 h
  60. TCPDump1 h
  61. Tweaking Firewall Rules for Detection1 h
  62. Use pfTop to Analyze Network Traffic1 h
  63. Using Snort and Wireshark to Analyze Traffic1 h
  64. Validate Indications of Compromise: Analysis of PE File1 h
  65. Verify Attributes of Identified SilentBanker Intrusion1 h
  66. Verify Attributes of Intrusion Through Additional Analysis1 h
  67. Windows Event Log Manipulation via Windows Event Viewer1 h
  68. Wireshark1 h

Roadmaps for 200-201