CSACertified SOC Analyst
Work on the front line of defense: detect, triage and escalate threats inside a Security Operations Centre.
LevelIntermediate2 of 5
Exam3 hours
Valid for3 years
TrackDefense and incident response
What CSA covers.
CSA (exam code 312-39) is a certification for SOC Tier I and Tier II analysts. The 100-question exam covers threat intelligence, SIEM deployment, log analysis and incident escalation procedures, the core of an analyst's daily work in the SOC.
Skills you gain
- Operate effectively within Security Operations Centers
- Detect and investigate security incidents using SIEM tools
- Analyze logs and correlate events for threat identification
- Respond to and escalate incidents appropriately
Exam domains
- Security Operations Center (SOC) fundamentals
- Cyber threat intelligence & indicators of compromise
- Attack methodologies & kill chain analysis
- Incident detection, logging, & SIEM
- Advanced SIEM deployment & correlation
- Incident response procedures
Prerequisites
- 1 year work experience in Network Admin/Security (waived with official training)
How ordering works.
Send a request
Use the contact page and name the certification you want.
We confirm the details
Our team replies with availability, final price and payment steps.
You receive the voucher
The voucher and booking instructions arrive by email.
Common questions.
How do I schedule the exam?
Booking instructions come with the voucher. Exam slots are booked through EC-Council.
How is the CSA exam structured?
The CSA exam runs for 3 hours. Its format and passing score are set by EC-Council; the details for this track are in the description above.
What if I need a retake?
Retake terms are set by EC-Council. If you want a retake option included, mention it when you send your request.
Can I order for a team?
Yes. Send the number of seats and the certifications you need, and we reply with one quote.
More from EC-Council.
CSA voucher, $388.
Request it now, or compare the other EC-Council certifications first.