Sybex CompTIA CySA+ Study Guide: Exam CS0–001

Los escritores no son muy claros en la forma de detallar el procedimiento para registrar el libro y obtener el material extra.

First of all, this is literally the first book released regarding this exam. Second of all, the nature of the exam is a bit different compared to earlier CompTIA exams. This means ONLY reading a book will not be enough to pass this new exam. This book accurately covers the theory and general knowledge base (syllabus) needed to pass this exam. It's to the point and covers many aspects of work done by security analysts in SOCs. It will give you a good base to understand what software suites are used, and what are many procedures used in the industry (from security in the software development cycle, to analysis of incidents). The problem which some people may come up upon, is that the exam's format requires much more interaction between different skills, and this is taught by doing, and not by reading. The two main pieces of software that the CSA+ exam heavily covers is NMAP & Wireshark. Experience in reading logs (system & IDS/IPS) is also required. As questions go, they're mostly situational, namely they'll give you a situation or some output, and you have to identify the best problem/solution, which often is not as clear cut or direct. Simulations in the exam can also be confusing unless you have had a chance to look over & use these two pieces of software (along with some system reporting commands in Windows & Linux). I don't think this book fails to prepare you for these parts, simply because without direct experience, it's can be hard to actually understand the information presented in the exam. While this book has some labs described per each chapter, they might not be enough for everyone. I would also suggest watching some training videos (as of writing this review, only ITPro.TV has a complete CSA+ video course). And regarding use of SIEM software, these suites are often expensive and only found in larger, enterprise networks. So gaining experience on them is hard. Cybrary.it offers a set of online labs for this certification, and while not required, can help someone new to this field gain hands on experience. Supplementing this book with other training is pretty much required in order to pass the exam. As for me, the book worked well, covered the topics well, and along with supplementary training from third parties (videos) & just messing around on my computer, helped me pass this exam.

I bough this to compliemt a course from Udemy. It comes with a eBook version FoC and also some flashcard and sample questions. I highly recommend iof you are taking the CS0-001. CSO-002 is released in March, so be careful which you are planning to take.

Not study the book YET as I'm currently in between az-900 and the security+ however the book does look fantastic! am not sure how much the CSO-001 will change in October but i was told that it doesn't change much so i will study this book and pick up on topics that are missing. Just a heads up if you are looking on buying this book now.

Update: I passed my test on the first try. I ended up going through this book about four times total as part of my own study method. I would recommend this book. I felt it was pretty detailed and touched on some other topics that may not have been covered by the other CySA+ books. It had a lot more pictures to go along with the reading to show the different reports, logs, etc. that you get from the various software required for the test. Previous: I haven’t taken my test yet, but I’ve read this book through almost twice now. It has a lot of diagrams and pictures to explain the topics. There are occasional typos, but the content seems great despite that minor flaw. I’ve compared this to the other CSA+ books available, and they’re all basically the same on covering all the objectives. One might explain a few concepts more or less than another one does, so they’re great to read together.