CCNACBR – Understanding Cisco Cybersecurity Operations Fundamentals
- • Nov 30 – Dec 4, 2026 · Live Remote Online
- • Jan 4–8, 2027 · Live Remote Online
- • Mar 15–19, 2027 · Live Remote Online
Contact IT Dojo for current pricing, available dates, and a custom quote tailored to your team or organization.
Course Duration
5 Days
Audience
Employees of federal, state and local governments; and businesses working with the government.
Prerequisites
There are no formal prerequisites. Students should have a working knowledge of Ethernet and TCP/IP networking, hands-on familiarity with the Windows and Linux operating systems, and an understanding of basic network security concepts. Cisco recommends Implementing and Administering Cisco Solutions (CCNA) as preparation.
Course Description
Understanding Cisco Cybersecurity Operations Fundamentals (CCNACBR) is Cisco's associate-level security operations course and the replacement for CBROPS, which Cisco renamed in February 2026. The course builds the skills an analyst needs to contribute in a threat-centric security operations center (SOC): network infrastructure and TCP/IP weaknesses, core security principles and access control, cryptography, Windows and Linux fundamentals, common network and web application attacks, and the data sources used to investigate security incidents. Students work through network security monitoring data, log analysis, NetFlow, packet capture and forensics, malware analysis, and threat intelligence, then apply SIEM, SOAR, and Cisco XDR along with NIST-based incident response, CSIRT operations, SOC playbooks, and threat hunting. Thirteen hands-on labs reinforce the material. The course prepares students for the 200-201 exam, which now earns the Cisco Certified Network Associate (CCNA) Cybersecurity certification (formerly CyberOps Associate).
Learning Objectives
- Describe how a SOC is organized, the analyst roles within it, and the metrics used to measure its effectiveness.
- Apply core security principles, risk management concepts, and access control models.
- Explain cloud deployment and service models and the shared responsibility model.
- Explain cryptography used in security operations, including key exchange, digital signatures, and SSL/TLS.
- Use Windows and Linux fundamentals and command-line tools for security analysis.
- Explain network protocols, network security controls, IDS/IPS, and endpoint security technologies.
- Describe threat actors and analyze attacks using the Cyber Kill Chain and MITRE ATT&CK frameworks.
- Identify social engineering, network, and web application attacks, and the evolving advanced threat landscape.
- Analyze network security monitoring data, log sources, and NetFlow to detect malicious activity.
- Perform packet capture analysis and basic forensics, and apply malware analysis and threat intelligence.
- Explain how SIEM, SOAR, and Cisco XDR support detection and response.
- Describe incident response planning based on NIST guidance, CSIRT roles, security monitoring playbooks, and threat hunting methodologies.
Course Outline
Security Operations Foundations
- Security Operations
- Security Principles
- Access Control Models
- Cloud Security Models
- Cryptography for Security Operations
Operating Systems and the Command Line
- Windows OS Basics
- Linux OS Basics
- CLIs in Security
Network and Endpoint Defense
- Network Protocols
- Network Security Controls
- IDS and IPS
- Endpoint Security
Threats and Attacks
- Threat Actors
- Cyber Kill Chain Model
- MITRE ATT&CK Framework
- Social Engineering Attacks
- Network Attack Fundamentals
- Advanced Threat Landscape
- Web Application Attacks
Security Monitoring and Investigation
- Network Security Monitoring (NSM) Data
- Log Data Sources
- NetFlow for Security Monitoring
- Advanced Log Analysis
- Packet Capture and Forensics
- Malware and Threat Intelligence
Detection, Response, and Threat Hunting
- Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Extended Detection and Response (XDR)
- Incident Response Planning
- CSIRT Roles and Operations
- Security Monitoring Playbooks
- Threat Hunting Methodologies
Hands-On Labs
- Explore Cryptographic Technologies
- Explore the Windows Operating System
- Explore the Linux Operating System
- Explore Endpoint Security
- Investigate Hacker Methodology
- Explore TCP/IP Attacks
- Investigate Advanced Persistent Threats
- Use NSM Tools to Analyze Data Categories
- Analyze Suspicious DNS Activity
- Investigate Browser-Based Attacks
- Correlate Event Logs, PCAPs, and Alerts of an Attack
- Explore SOC Playbooks
- Hunt Malicious Traffic
Frequently Asked Questions
Is CCNACBR the same course as CBROPS?
Yes. In February 2026 Cisco renamed Understanding Cisco Cybersecurity Operations Fundamentals from CBROPS to CCNACBR and updated the content. The exam number stays 200-201, and the certification is now called Cisco Certified Network Associate (CCNA) Cybersecurity, replacing the CyberOps Associate name.
What does the CCNACBR course cover?
CCNACBR covers SOC operations, security principles and access control, cryptography, Windows and Linux for security analysis, network and endpoint defenses, threat actors and attack frameworks such as the Cyber Kill Chain and MITRE ATT&CK, security monitoring data and log analysis, packet capture and forensics, SIEM, SOAR, Cisco XDR, incident response, and threat hunting, with 13 hands-on labs.
Which exam and certification does this course prepare me for?
The course prepares you for Cisco exam 200-201. Passing it earns the Cisco Certified Network Associate (CCNA) Cybersecurity certification, formerly known as Cisco Certified CyberOps Associate.
How long is IT Dojo's CCNACBR training?
IT Dojo's CCNACBR – Understanding Cisco Cybersecurity Operations Fundamentals training is 5 Days. It is available as live remote online instruction or on-site at your facility. All sessions are instructor-led with small class sizes to ensure individual attention.
Is this course available as live remote online training?
Yes. IT Dojo offers CCNACBR as live remote online training. A certified instructor leads the session in real time. Students interact via chat or microphone. Classes are kept small (typically no more than 16 students) to ensure engagement. On-site delivery at your government facility or contractor location is also available.
What prerequisites are recommended before this course?
There are no formal prerequisites. Students should have a working knowledge of Ethernet and TCP/IP networking, hands-on familiarity with Windows and Linux, and an understanding of basic network security concepts. Cisco recommends Implementing and Administering Cisco Solutions (CCNA) as preparation.
Does IT Dojo offer this training on-site at government or DoD facilities?
Yes. IT Dojo delivers CCNACBR – Understanding Cisco Cybersecurity Operations Fundamentals on-site at government agencies, DoD commands, military installations, and contractor facilities. On-site training is ideal for teams of four or more and can be customized to your organization's specific environment and mission requirements. Contact IT Dojo to schedule.
How do I register for this course?
IT Dojo training is employer sponsored. Your organization registers and pays for seats. To schedule CCNACBR – Understanding Cisco Cybersecurity Operations Fundamentals for your team, contact IT Dojo via the Request Training form or call 757-216-3656. IT Dojo will work with your contracting officer, training coordinator, or program office to set up the course.