Certified Cybersecurity Analyst Certification Exam

Exam code

ITC-180

Launch date

May 28, 2025

Exam description

The Certified Cybersecurity Analyst certification exam validates the candidate’s knowledge of cybersecurity management.

Current version

v1 (May 28, 2025)

Exam format

Multiple choice; computer-based; closed book (online proctored exam)

Number of questions

80 questions

Passing score

70% (56 out of 80)

Exam duration

120 minutes

Level

Foundation

Languages

English and Portuguese

Exam description

The exam covers topics such as Cybersecurity concepts, most common types of cybersecurity attacks (Spoofing, IP Address spoofing, ARP spoofing, DNS spoofing, email spoofing, port scanning, Denial of Service Attack, Distributed Denial of Service Attack, network sniffing, Man-in-the-middle attack, session hijacking attack, Cross-side scripting attack, SQL injection attack, buffer overflow attack, brute force attack) threats, vulnerabilities, types of malware (viruses, worms, trojans, rootkits, backdoors, ransomware, adware, spyware, botnets), phishing, pharming, spam, scams, frauds, identity theft, social engineering, network security, encryption, cryptography, digital certificates, privacy, anti-malware tools and wireless security), techniques and tools used in the identification, collection, acquisition and preservation of digital evidence, Ethical Hacking Terminology, Hacking Tools, Foot printing, Reconnaissance, Scanning Networks, Enumeration, Sniffing, Exploits, Social Engineering, DoS and DDoS Attack, Cross-Site Scripting (XSS), Malwares (Viruses, Worms, Trojans, Spyware, Rootkits, and Ransomware), Session Hijacking, Buffer Overflow, Cracking Passwords, Hacking Wireless Networks, Evading IDS, Firewalls, and Honeypots, Types Of Penetration Testing, Stages of Penetration Testing (information gathering, finding exploitable vulnerabilities, gaining access to systems, exploitation, post exploitation and reporting), Ethical Hacking Techniques and Tools (Kali Linux, Wireshark, Nmap, Nessus and Burp Suite), Vulnerability Scanning, Exploits, The Metasploit Framework, Web Application Attacks, Password Attacks (Brute Force and Wordlists), Port Scanning, Enumeration, Social Engineering, Web Application Attacks (Cross Site Scripting, SQL Injection), Exploitation, Wireless Attacks, Mobile Hacking, CSF Core (Functions, Categories, and Subcategories), CSF Core Functions (Govern, Identify, Protect, Detect, Respond, and Recover), CSF Profiles (Current Profile and Target Profile), Steps for creating and using a CSF Organizational Profile, CSF Tiers, Online Resources That Supplement the CSF (Informative References, Implementation Examples, and Quick Start Guides), Improving Cybersecurity Risk Communication and Integration, and Appendix A. CSF Core).

RECOMMENDED HOURS OF STUDY

16 hours

BLOOM'S TAXONOMY

Level 1 (Remembering), Level 2 (Understanding) and Level 3 (Applying)

Recommended reading

• The NIST Cybersecurity Framework (CSF) 2.0
• ISO/IEC 27032:2023(en) Cybersecurity — Guidelines for Internet security
• ISO/IEC 27037:2012(en) Information technology — Security techniques — Guidelines for identification, collection, acquisition and preservation of digital evidence

Prerequisites

There are no prerequisites for this certification

Recommended experience

Six months of work experience in Cybersecurity

Validity period

Lifetime