CREST Practitioner Security Analyst (inglise keeles)
Want to boost your career in cyber security? CREST Practitioner Security Analyst is specially designed to give you the skills to succeed.
Koolituse maht: 40 akadeemilist tundi (5 päeva)
Sihtgrupp: This course is designed for:
- Penetration testers.
- Security consultants.
- Cyber security analysts.
- Security engineers.
- IT professionals looking to develop practical ethical hacking skills.
Koolitusel osalemise eeldused:
- Hea inglise keele oskus.
- A working knowledge of TCP/IP networking and common network protocols.
- Experience administering Windows and Linux operating systems.
- A basic understanding of cybersecurity concepts and information security principles.
- Familiarity with command-line tools and scripting is beneficial.
- Previous experience in IT administration or cyber security is recommended.
Koolituse eesmärk
The objective of this CREST Practitioner Security Analyst course is to provide cyber security professionals with the knowledge and practical skills required to perform penetration testing against modern IT environments.
Koolituse kirjeldus
CREST Practitioner Security Analyst course:
- Assess infrastructure and web applications to uncover real security vulnerabilities.
- For aspiring penetration testers taking their first step into offensive security.
This five-day instructor-led course provides cyber security professionals with the knowledge and practical skills required to perform penetration testing against modern IT environments. Learners develop the ability to identify vulnerabilities, exploit security weaknesses in a controlled and ethical manner, and produce professional reports that help organisations strengthen their security posture.
Through a combination of instructor-led learning, and realistic attack scenarios, participants gain hands-on experience using industry-standard penetration testing tools and techniques. By the end of the course, learners will understand the basic requirements penetration tests aligned to the CREST syllabus, while following recognised ethical hacking methodologies and security best practices.
Hands-on learning – This course includes:
- Hands-on exercises using industry-standard security tools.
- Guided vulnerability assessment and exploitation activities.
- Real-world ethical hacking scenarios.
- Instructor-led demonstrations and practical workshops.
What is Virtual?
Live, instructor-led training delivered online. Interactive online sessions led by subject matter experts. Learners join live classes, take part in discussions, and complete practical exercises from any location, making it easy to fit collaborative learning into busy schedules. Best for: Teams and individuals who want expert guidance, real-time collaboration, and flexible access.
Teemad
Introduction to penetration testing
- Explore penetration testing methodologies.
- Understand legal, ethical, and professional responsibilities.
- Review the penetration testing lifecycle.
- Prepare the testing environment.
Reconnaissance and enumeration
- Perform passive and active information gathering.
- Enumerate hosts, services, and users.
- Identify attack surfaces.
- Analyse reconnaissance results.
Vulnerability assessment and exploitation
- Identify common security vulnerabilities.
- Perform vulnerability validation.
- Exploit systems in controlled environments.
- Assess the impact of identified weaknesses.
Web application security testing
- Identify common web application vulnerabilities.
- Perform authentication and session management testing.
- Test input validation and application security controls.
- Apply recognised web security testing techniques.
Post-exploitation and reporting
- Perform post-exploitation activities.
- Gather evidence and document findings.
- Produce professional penetration testing reports.
- Recommend practical remediation strategies.
Penetration testing best practices
- Review industry frameworks and standards.
- Apply secure testing methodologies.
- Manage penetration testing engagements professionally.
- Consolidate learning through practical exercises.
Antud koolituse läbiviijaks on QA.
Koolituse õpiväljundid
By the end of this course, learners will be able to:
- Plan and prepare for penetration tests using recognised methodologies.
- Perform reconnaissance and information gathering against target systems.
- Identify common vulnerabilities within networks, systems, and web applications.
- Assess security risks and validate remediation activities.
- Understand penetration testing reports with actionable recommendations.
- Apply ethical hacking techniques responsibly and within legal boundaries.
- Use industry-standard penetration testing tools confidently.
Eksam
Learners reinforce their knowledge through practical exercises, instructor-led demonstrations designed to develop confidence in identifying, exploiting, and reporting security vulnerabilities. Where applicable, the course also supports preparation for the Certified Penetration Testing Specialist (CPSA) certification. It serves as a prerequisite for the CREST Registered Penetration Tester (CRT) examination, though candidates should note that CRT is not currently available; QA advises progressing to the OffSec OSCP (PEN-200), which holds equivalency with CRT.
Eksami hind on kursuse hinnas. Õppekava mahu tõttu ei ole võimalik eksameid sooritada koolituse jooksul. Eksam tuleb broneerida pärast kursuse läbimist endale sobival ajal.
Lisainfo
Koolitushind sisaldab:
- koolitust;
- õppematerjale (õppekeskkonnasisesed);
- eksamit.
Õppekeskkonna kirjeldus: Õppekorralduse alused (alapunkt 8)
Täienduskoolituse õppekavarühm: Andmebaaside ja võrgu disain ning haldus
Koolitaja
-
QA ametlik koolitaja
