Certification Overview

Each Cisco Certified CyberOps Professional certification requires two exams:

1. Core Exam – Covers foundational and advanced security operations technologies.
2. Concentration Exam – Allows candidates to specialize in incident response and advanced threat hunting.

Note: Passing the core exam also qualifies you for the corresponding CCIE Security lab exam.  

Track Details & Exam Requirements

What CyberOps Professional Validates

With CyberOps Professional, you demonstrate your ability to:

• Monitor and analyze security events
• Perform incident response and digital forensics
• Conduct threat hunting and intelligence analysis
• Use Security Information and Event Management (SIEM) tools
• Automate security operations processes
• Secure enterprise environments against advanced threats

Required Exams

🔹 Core Exam (Required)

• 350-201 CBRCOR – Performing CyberOps Using Cisco Security Technologies

Core Exam Focus Areas:

• Security monitoring and analysis
• Incident response processes
• Threat intelligence and threat hunting
• Endpoint and network security technologies
• Automation and orchestration in security operations

🔹 Concentration Exam (Choose One)

You must choose one of the following CyberOps-focused concentration exams:

• 300-215 CBRFIR – Conducting Forensic Analysis and Incident Response Using Cisco Technologies
• 300-220 CBRTHD – Performing Threat Hunting and Defending Using Cisco Technologies

Concentration Focus Areas Include:

• Advanced incident response
• Digital forensics investigation
• Threat hunting methodologies
• Malware analysis fundamentals
• Security analytics and reporting

Validity & Recertification

Validity Period: 3 Years

Renewal Options

You can recertify by completing any one of the following:

• Pass one professional-level core exam
• Pass any two professional-level concentration exams
• Pass one expert-level lab exam
• Earn continuing education credits

Recommended Experience

There are no formal prerequisites for CyberOps Professional. However, Cisco recommends:

• 3–5 years of experience in cybersecurity or security operations
• Strong understanding of networking fundamentals
• Knowledge of SIEM, incident response, and threat analysis concepts

Who Should Pursue CyberOps Professional?

• Security Operations Center (SOC) Analysts
• Incident Response Analysts
• Threat Hunters
• Security Engineers
• Cybersecurity Specialists

Career Benefits

• Validates advanced security operations expertise
• Prepares you for senior-level cybersecurity roles
• Enhances incident response and threat detection skills
• Increases career growth and earning potential in cybersecurity