An intensive applied course in CompTIA CySA+ objectives, with independently documented technical work.
Recommended preparation: Security+ level concepts, network and endpoint logs, vulnerability management and practical security-operations experience.
Plan 12–16 independent hours each week plus the three-hour class (15–19 total). This advanced eight-week format requires prior foundations, sustained reading, practice, weekend lab reservations, remediation and careful evidence preparation. It compresses the schedule, not the work. These are planning estimates, not college credit determinations. Each example uses the same Monday calendar as an alternative offering; arrange a conflict-free schedule before enrolling in multiple blocks.
Portal reference 207 is an internal identifier. This is an independent college-style example; the institution determines credit, admission, accommodations and final policy. It does not award certification.
Readings and licensed resources
Read the official CompTIA CySA+ CS0-004 objectives and assigned licensed sections before class. This plan follows objective topics; no textbook ISBN or chapter sequence is invented. The instructor must select an exam-matching text and publish exact pages before delivery.
Complete the original graded preparation handout and review instructor-assigned slides. Licensed PowerPoints may be uploaded through administration; no publisher slides have been supplied or extracted.
MeasureUP practice: use the matching CS0-004 version, at least 45 questions weekly, with results and remediation of three weak concepts. Verify the licensed product and access before enrollment.
NETLAB+ and approved remote labs: the instructor matches installed titles to each week's topics, approves access and assigns one or more labs. No exact vendor title is claimed without the catalog. Submit an evidence section for every assigned title.
Practice licenses, authorized lab access and exam vouchers are separate. Use isolated targets and disposable evidence; cloud labs use local fixtures or explicitly approved sandboxes with cost limits.
Weekly work and deadlines
Prepare: read, review slides and submit the graded handout before Monday 5:45 PM. Cite readings, explain concepts and bring two questions.
Quiz: opening reading check, 5:45–6:00 PM, in class.
Labs: two supervised activities, 6:00–8:10 PM, with a 7:00–7:10 break. Record baseline, decisions, procedure, evidence, validation and rollback.
Closeout: 8:10–8:45 PM lecture/debrief, corrections, Q&A and announcements.
Hybrid: 45-question practice, every approved remote lab with a graded portfolio, and a reflection/handoff due following Sunday at midnight Central. Week 8 also has a separately scheduled official exam.
Demonstrate security operations: visibility and baselines through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Security operations: visibility and baselines. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate security operations: detection and threat analysis through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Security operations: detection and threat analysis. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate vulnerability management: assessment and analysis through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Vulnerability management: assessment and analysis. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate vulnerability management: mitigation and validation through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Vulnerability management: mitigation and validation. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate incident response and management: triage and containment through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Incident response and management: triage and containment. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate incident response and management: investigation and recovery through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Incident response and management: investigation and recovery. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate reporting and communication through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: Reporting and communication. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
Demonstrate all cs0-004 domains through the two assigned activities, interpreted evidence and a professional handoff.
Read the current CompTIA CySA+ CS0-004 official objectives and instructor-assigned licensed sections for: All CS0-004 domains. No textbook edition or ISBN has been selected; the instructor must publish exact chapter/page and licensed slide assignments before instruction.
The week 8 meeting is the comprehensive lab day: Monday, March 1, 2027, 5:45–8:45 PM. After the opening readiness quiz, complete one integrated practical with the assigned lab activities as its stations. All stations share the 30% equally. Work independently in the supervised, authorized lab environment; the instructor supplies the fault scenario and permitted tools.
Comprehensive station 1: correlate synthetic alerts, validate a vulnerability, prioritize risk and justify containment with preserved evidence. Comprehensive station 2: complete the incident timeline, verify recovery and produce distinct technical and executive reports with residual risk and follow-up metrics.
Submit a single organized service portfolio across the assigned station submissions: intake and baseline, diagnosis and alternatives, procedure log, before/after evidence, validation tests, rollback or recovery plan, and a customer handoff. Rubric: correct procedure/result 40%; reasoning/evidence 30%; safety, permissions and data handling 20%; documentation 10%. Closeout includes a short explanation of your diagnosis, questions and exam-readiness announcements.
2. Actual certification exam — 30% of the course
After the lab day, take the official CompTIA CySA+ CS0-004 through an authorized testing provider. Schedule a separate appointment after the comprehensive lab and submit result evidence by Sunday, March 7, 2027 at midnight, end of day, America/Chicago. Arrange voucher/payment, identification and testing requirements in advance; this portal does not deliver or book the official exam. MeasureUP is practice and does not replace it. The instructor must announce any approved deadline extension or retake arrangement.
Submit the exam code, date, official scaled score and pass/fail result through the private CertificationExam submission. Provide the official score report through the instructor-approved private method for verification; do not share exam questions or answers. The instructor verifies the result and records the scaled score in administration.
The published passing score for this exam is 750 on a 100–900 scale. For this course only, 100 maps to 0%, the passing score maps to 70%, and 900 maps to 100%, using linear interpolation below and above passing. This is the college course conversion, not CompTIA's percentage score. See the official certification exam information. This course follows the exam version named in its syllabus. Confirm version availability and testing-provider deadlines before buying a voucher or booking.
C-or-better course guarantee
If your pre-exam coursework average is at least 70% and you pass this course's official exam, your final course grade will be at least 70% (C). Pre-exam coursework includes the comprehensive lab and all other non-exam work, normalized over its combined 70% weight. Higher weighted results earn the corresponding higher grade. Missing or unverified exam results remain ungraded and count as zero until verified; they do not trigger the guarantee.