Start free

← All paths

Cisco CCNA Cybersecurity (200-201)

Exam 200-201 Cisco Intermediate

Cisco's SOC-analyst certification, formerly CyberOps Associate — monitoring, intrusion analysis and incident response from a network operations perspective.

1 course · 11 sections · 80 lectures · 68 labs · at least 85 h of hands-on labs

All 68 200-201 hands-on labs on one page →

Free to start: the free lessons and guides for this roadmap →

Free resources to get you started

Exam domains

  • Security Concepts — 20%
  • Security Monitoring — 25%
  • Host-Based Analysis — 20%
  • Network Intrusion Analysis — 20%
  • Security Policies and Procedures — 15%

Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Learn CCNA Cybersecurity

Security monitoring, host and network analysis, incident response.

1 course · 11 sections · 80 lectures

Learn

Step 2 — Analyse real traffic

Detect intrusions in live captures.

35 labs

Learn

Practise

Step 3 — Monitor with a SIEM and analyse hosts

Collect and correlate logs, then work the endpoint: processes, memory and malware artefacts. Security Monitoring is 25% of the exam, Host-Based Analysis 20%.

24 labs

Learn

Practise

Step 4 — Respond to incidents

Incident handling, evidence and chain of custody, and the plans behind them: Security Policies and Procedures is 15% of the exam.

9 labs

Learn

Before the exam

Where this leads

Explore free resources

Choose your next roadmap