WGU - D483 - Security Operations
Introduction
Objective
Recommend Incident Response Solutions - The learner recommends solutions to respond to
a detected cybersecurity incident.
Overview
This lab will assess learner abilities aligned to the CompTIA Cybersecurity Analyst (CySa+)
certification exam. Given affected hardware, learners will analyze system logs and data to
diagnose an attack and its impact. A summary of detection, investigation, and remediation
actions as well as recommendations for next steps to stakeholders will be recorded in an
incident report.
A series of five challenge questions will be used to capture evidence from this lab. Before
answering each challenge question, ensure the evidence to support that answer is clearly
visible on the desktop of the active virtual machine. Upon correctly answering a challenge
question, a screenshot is captured of the active virtual machine desktop for inclusion in your
submission.
Supporting Documents
The supporting documents “Background Information”, “Virtual Lab Supplementary
Instructions”, and “Incident Reporting Template” are located with the performance
assessment task instructions and should be downloaded and reviewed prior to beginning this
lab. The supporting documents include scenario context, process instructions for interacting
with the lab and acquiring challenge question evidence, and a template for reporting on the
incident. It is recommended to complete Part A of the “Incident Reporting Template” prior to
, beginning work in the virtual lab.
Credentials
Credentials
Introduction
Objective
Recommend Incident Response Solutions - The learner recommends solutions to respond to
a detected cybersecurity incident.
Overview
This lab will assess learner abilities aligned to the CompTIA Cybersecurity Analyst (CySa+)
certification exam. Given affected hardware, learners will analyze system logs and data to
diagnose an attack and its impact. A summary of detection, investigation, and remediation
actions as well as recommendations for next steps to stakeholders will be recorded in an
incident report.
A series of five challenge questions will be used to capture evidence from this lab. Before
answering each challenge question, ensure the evidence to support that answer is clearly
visible on the desktop of the active virtual machine. Upon correctly answering a challenge
question, a screenshot is captured of the active virtual machine desktop for inclusion in your
submission.
Supporting Documents
The supporting documents “Background Information”, “Virtual Lab Supplementary
Instructions”, and “Incident Reporting Template” are located with the performance
assessment task instructions and should be downloaded and reviewed prior to beginning this
lab. The supporting documents include scenario context, process instructions for interacting
with the lab and acquiring challenge question evidence, and a template for reporting on the
incident. It is recommended to complete Part A of the “Incident Reporting Template” prior to
, beginning work in the virtual lab.
Credentials
Credentials
