Cisco Associate Certification

CCNA
Cybersecurity 200-201 CCNACBR v1.2

Build job-ready cyber operations skills across security monitoring, host and network analysis, threat detection, incident response, and the modern SOC toolchain.

Formerly known as CyberOps Associate / 200-201 CBROPS

Start Your Learning Path

Exam Snapshot

200-201 CCNACBR

120 minutes Exam duration

English Exam language

5 domains Blueprint areas

3 years Certification validity

View current Cisco exam details

No formal prerequisiteStart with foundational IT knowledge

Practice-focusedLogs, traffic, alerts, and evidence

SOC career pathBuilt for entry-level analyst roles

Current v1.2 focusAI, DevSecOps, and modern detection

The certification has evolved

Cisco now presents this path as CCNA Cybersecurity, earned by passing the 200-201 CCNACBR v1.2 exam. The updated direction keeps the proven CyberOps foundation while reflecting how today's SOC teams detect and respond to threats.

Security monitoring across network, host, and cloud data

AI-aware attack and detection concepts

SIEM, SOAR, XDR, playbooks, and threat hunting

Incident response aligned with modern security operations

Modern SOC Skills

Learn what security operations teams use now

Move beyond definitions. Understand how analysts connect telemetry, tools, frameworks, and response processes to make faster, better-informed security decisions.

AI-Assisted Monitoring

Recognize how predictive AI and generative AI affect detection, analysis, and social engineering.

MITRE ATT&CK

Map adversary behavior to tactics and techniques for clearer investigation and response.

SIEM, SOAR and XDR

Correlate security data, automate response workflows, and understand unified detection.

Threat Hunting

Use telemetry, indicators, and hypotheses to uncover threats that alerts may miss.

Cloud Security

Understand cloud deployment models, shared responsibility, and visibility challenges.

Incident Forensics

Correlate logs, PCAPs, artifacts, and timestamps while preserving evidence integrity.

Exam Blueprint

Five domains. One complete analyst foundation.

The learning path follows the published Cisco v1.2 blueprint, with extra attention on the highest-weighted security monitoring domain.

Explore the curriculum

DOMAIN 01 20%

Security Concepts

Build the vocabulary and core principles used by modern security operations teams.

DOMAIN 02 25%

Security Monitoring

Understand how SOC teams collect telemetry and identify suspicious activity.

DOMAIN 03 20%

Host-Based Analysis

Investigate Windows and Linux endpoints using evidence, logs, and analysis tools.

DOMAIN 04 20%

Network Intrusion Analysis

Correlate events, traffic, and alerts to determine what happened and why.

DOMAIN 05 15%

Security Policies and Procedures

Apply repeatable response processes, governance, and evidence-handling practices.

Domain percentages and exam details can change. Always review Cisco's official exam page before scheduling your exam.

What You Will Learn

A clear, exam-aligned curriculum

Expand each domain to see the knowledge and investigation skills covered in your preparation path.

CIA triad, risk, threats, vulnerabilities, and exploits
Defense in depth and access control models
Cloud, endpoint, network, and application security
Threat intelligence, threat hunting, DevSecOps, and CVSS
Data visibility and rule-based, behavioral, and statistical detection

Packet capture, NetFlow, metadata, sessions, and alerts
Firewalls, filtering, encryption, tunneling, and visibility
Network, web, endpoint, social engineering, and AI-assisted attacks
Malware, ransomware, command and control, and evasion
PKI, certificates, key exchange, and secure protocols

Endpoint detection technologies and predictive AI
Windows and Linux operating system components
Indicators of compromise and indicators of attack
Chain of custody and evidence classification
SIEM, SOAR, application, command-line, and malware analysis output

IDS/IPS, firewall, proxy, antivirus, and NetFlow events
True and false positives, impact, and alert validation
Packet filtering, stateful inspection, and deep packet inspection
5-tuple analysis, protocol headers, hashes, URLs, and artifacts
Regular expressions and event correlation

Incident response planning and NIST guidance
Preparation, detection, containment, recovery, and lessons learned
Asset, patch, configuration, and vulnerability management
Network and server profiling and protected data
SOC metrics, playbooks, threat models, and stakeholder roles

Career Outcomes

Turn cyber knowledge into an analyst career

This associate-level path is designed for new security professionals and IT practitioners moving toward monitoring, investigation, and incident response roles.

Who should learn? Aspiring analysts, support teams, network professionals, and career switchers

SOC Analyst

Triage alerts, investigate suspicious activity, and coordinate incident response.

Cybersecurity Analyst

Monitor risks, analyze evidence, and help protect business systems and data.

Security Operations Specialist

Operate security controls, improve playbooks, and support threat detection.

Network Security Analyst

Analyze traffic, validate intrusions, and strengthen defensive controls.

Your Roadmap

From fundamentals to exam readiness

Progress through a practical sequence that connects concepts with the evidence analysts see every day.

Build the foundation

Learn networking, operating system, cloud, cryptography, and core security principles.

Read the telemetry

Work with traffic, logs, endpoint evidence, alerts, NetFlow, and packet captures.

Investigate incidents

Correlate events, validate impact, map attacker behavior, and follow response playbooks.

Validate readiness

Review every blueprint domain, close knowledge gaps, and prepare for the 200-201 exam.

Exam naming, duration, certification validity, and topic direction are based on Cisco's official 200-201 CCNACBR page and published training outline.

Ready to begin your cybersecurity path?

Talk with a course advisor about prerequisites, the learning roadmap, practical preparation, and how this certification fits your career goals.

Chat on WhatsApp