EC-Council Certified Security Analyst (ECSA)

EC-Council Certified Security Analyst (ECSA)

The EC-Council Certified Security Analyst (ECSA) certification is designed for security professionals, managers, and executives who are looking to specialize in enterprise security risk analysis. ECSA certification is a cutting-edge, advanced-level credential for IT and security professionals.

Focus

The EC-Council Certified Security Analyst (ECSA) certification focuses on Enterprise Security Risk Analysis

Exam Duration

The EC-Council Certified Security Analyst (ECSA) exam duration is 4 hours

Num of Question

The exam contains a total of 200 questions

Exam Fee

The exam fee is USD 599.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• EC-Council Certified Security Analyst (ECSA) certification is a prerequisite for EC-Council Certified Chief Information Security Officer (EC-CISO) certification.

Exam Format

The EC-Council Certified Security Analyst (ECSA) exam is a Multiple-choice questions and proctored lab-based (practical) scenario

Passing Conditions

To pass EC-Council Certified Security Analyst (ECSA) exam, applicants must achieve a minimum score of Students need to achieve at least 80% or more pass Percentage to get the certification

Who Should Take

IT and security professionals, security managers, and executives who are looking to specialize in enterprise security risk analysis.

• Security Consultant
• Security Manager
• Chief Information Security Officer (CISO)
• Information Assurance Analyst

Prerequisites

2 years of experience in a related field: IT Security, Cyber Security, or a similar position.

Or can substitute with certifications:

• EC-Council Certified Security Analyst (ECSA) certification is required for EC-Council Certified Chief Information Security Officer (EC-CISO) certification.

Certification Process

• Complete EC-Council approved instructor-led training (ILT) or a self-paced online course.
• Register for the ECSA exam.

Domains with Weights

• Domain 1: Risk Analysis and Mitigation (30%): This domain covers risk analysis, risk assessment, and mitigation techniques. It also includes understanding of compliance and regulatory requirements, audits, and penetration testing.
• Domain 2: EC-Council Computer Forensics & Incident Response (25%): This domain focuses on in-depth knowledge of incident response, computer forensics, and legal issues related to information security.
• Domain 3: Defense of Network Infrastructures (20%): This domain covers network devices, network protocols, network segmentation, switching, routing, and security threats and techniques.
• Domain 4: Defense of Web and Wireless Infrastructures (20%): This domain covers web server security, virtualization, cloud computing, and wireless security threats and countermeasures.
• Domain 5: Defense of Endpoint Systems (5%): This domain focuses on endpoint security best practices, operating system security, and mobile device security.
• Domain 6: Security and Field Auditing ( 30%): This domain covers the security analysis and evaluation of IT systems, applications, and networks. It also includes understanding of security auditing techniques and tools.