What Is CSA?

Overview

CSA: Certified SOC Analyst is a EC-Council credential. Build skills for Security Operations Center roles including monitoring, analysis, and threat response. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the EC-Council exam. EC-Council sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the EC-Council exam. EC-Council sets exam content, fees, and policies.

Who it is for

• Professionals who are already working in or aspiring to work in Tier I and Tier II SOC positions to enhance their proficiency in security operations.
• Individuals tasked with managing network security operations, looking to specialize in SOC functions and incident response.
• Those interested in cybersecurity and aiming to start a career in security operations, particularly in roles that involve monitoring and responding to threats.

Exam domains

Weights follow the official outline.

1. 01

   SOC Fundamentals

   Introduction to Security Operations Centers (SOC), Understanding SOC components: People, Processes, Technology, and SOC Implementation Strategies.

2. 02

   Understanding Cyber Threats

   Network, Host, and Application-Level Attacks, Indicators of Compromise (IoCs), and Hacker’s Attack Methodology.

3. 03

   Logs and Events

   Local Logging and Centralized Logging, Log Management and Correlation, and Importance of Logs in Incident Detection.

4. 04

   Security Information and Event Management (SIEM)

   Deployment and Architecture of SIEM Solutions, SIEM Use Cases for Incident Detection, and Managing Logs and Alerts with SIEM.

5. 05

   Incident Detection

   Network Level Incident Detection, Host Level Incident Detection, and Application and Insider Threat Detection.

6. 06

   Threat Intelligence

   Sources of Threat Intelligence, Integrating Threat Intelligence with SOC Operations, and Predictive Capabilities using Threat Intelligence.

7. 07

   Incident Response

   Incident Response Lifecycle, Collaboration with CSIRT (Computer Security Incident Response Team), and Post-Incident Activities.

8. 08

   SOC Processes and Procedures

   Daily Operations in a SOC, Incident Handling and Reporting, and Escalation Procedures.

9. 09

   Tools and Technologies

   Overview of Commonly Used SOC Tools, Practical Application of SIEM Tools, and Tools for Enhancing Security Operations.

10. 10

    Advanced Incident Detection

    Advanced Persistent Threats (APT) Detection, Use of Automation in Incident Detection, and Case Studies and Real-World Scenarios.

Exam format and cost

Questions

Confirm on the vendor site

Duration

Confirm on the vendor site

Format

Confirm question format on the vendor outline

Passing score

Confirm the passing score on the vendor site

Cost

Confirm the current exam fee on the vendor site before you register

Delivery

Confirm delivery options on the vendor site

Languages

Confirm available languages on the vendor site

Experience and eligibility

Candidates need one year of experience in the network administration/security domain, unless they have attended EC-Council’s official training. A foundational understanding of networking concepts, including TCP/IP protocols and network topology, is required.

Renewal

Renewal rules for CSA: Certified SOC Analyst are set by EC-Council. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

• SOC fundamentals, cyber threats and attack methodologies, logs and events, SIEM deployment and use cases, incident detection, threat intelligence, incident response, SOC processes and procedures, SOC tools and technologies, and advanced incident detection.
• SOC
• Teams standardizing on this credential for hiring or compliance

Official sources

• EC-Council train and certify

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.