View the objective checklist and study gaps ↓

Study track · CompTIA · CS0-004

CySA+ (CS0-004)

Security operations, vulnerability management, incident response, and reporting, worked like a SOC analyst. Every BB lab, drill, and lesson for this exam, in the order to use them.

QuestionsUp to 85
Time165 min
Passing score750 / 900
FormatMultiple choice + PBQs
▶ Start with Drill 1 (free)See the study path
Tracks
A+ Core 1A+ Core 2Network+Security+CySA+
Exam blueprint

What CS0-004 tests, and where BB covers it

1.0Security Operations34%
Investigation Command Hunt MEMBERSMaster Terms Lab FREEPhishing Email Triage MEMBERSSIEM Correlation Hunt MEMBERSPacket Capture Analysis MEMBERSIDS/IPS Sensor Tuning MEMBERS+ all 8 drills FREE MEMBERS
2.0Vulnerability Management26%
CVSS 4.0 Base Metrics Mastery MEMBERSVulnerability Remediation Command MEMBERSVulnerability Scan Validation MEMBERSSQL Injection Lab MEMBERSCross-Site Scripting (XSS) Lab MEMBERSSecurity Controls: Categories & Types MEMBERS+ all 8 drills FREE MEMBERS
3.0Incident Response and Management24%
Investigation Command Hunt MEMBERSPhishing Email Triage MEMBERSSIEM Correlation Hunt MEMBERS+ all 8 drills FREE MEMBERS
4.0Reporting and Communication16%
Cyber Compliance Gauntlet MEMBERSPhishing Email Triage MEMBERSWrite the Incident Report MEMBERS+ all 8 drills FREE MEMBERS

Gap Metrics and broader stakeholder communication need more practice.

Domain weights from the official CompTIA CySA+ (CS0-004) exam objectives.

Study path

Five steps from first look to exam day

  1. Know what's on the exam

    Read the CySA+ objectives decoded into plain English, with the exam traps for each domain.

    Open CySA+ Clearances ›
  2. Take a baseline drill

    Drill 1 is free: 75 questions with breakdowns. Your score shows which domains to hit first.

    Start Drill 1 (free) ›
  3. Learn the concepts

    Work through the lessons and posts for the domains you missed, starting with the heaviest-weighted ones.

    See the lessons ›
  4. Prove it in a lab

    Run the PBQ-style simulations. They're scored on the final state, just like the real thing.

    See the labs ›
  5. Drill to exam speed

    Work through Drills 2 to 8 until you're consistently above 85% under exam time. Retake anything under 70%.

    See all 8 drills ›
11 labs · 1 free

PBQ-style simulations

75 questions each

Practice drills

8 drills
Lessons, posts and objectives

Learn the concepts

Quick reference

Study tools

Full CySA+ access

Every lab, drill and lesson for CS0-004

Membership unlocks the complete track, plus every other cert on BB Tech Tools.

See membership
Study-gap map · CS0-004

Find your next objective

Open an objective to find matching lessons, practice and references. Coverage means a resource addresses part of the objective; it does not promise every exam bullet is covered.

15 of 15 objectives have resources · 3 still need a lab or Core Learning module.

Free and member resources are labeled below. Clearances explains the objectives; Test Builder offers mixed free questions and focused member practice.

1.0 Security Operations

1.1Explain concepts related to system and network architecture in security operations.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

1.2Given a scenario, analyze indicators of potential malicious activity.✓ Covered

Lesson or lab available.

1.3Given a scenario, use tools to determine malicious activity.✓ Covered

Lesson or lab available.

1.4Explain threat intelligence and threat-hunting concepts.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

1.5Explain the importance of efficiency and process improvement in security operations.✓ Covered

Lesson or lab available.

1.6Summarize concepts related to the use of AI in security operations.✓ Covered

Practice gap: a dedicated lab or Core Learning module is coming soon.

2.0 Vulnerability Management

2.1Given a scenario, implement the appropriate vulnerability scanning method.✓ Covered

Lesson or lab available.

2.2Given a scenario, analyze output from vulnerability assessment tools.✓ Covered

Lesson or lab available.

2.3Given a scenario, analyze data to prioritize and mitigate vulnerabilities.✓ Covered

Lesson or lab available.

2.4Explain concepts related to control types, risks, and vulnerability management.✓ Covered

Lesson or lab available.

3.0 Incident Response and Management

3.1Summarize concepts related to attack methodology frameworks.✓ Covered

Lesson or lab available.

3.2Summarize the incident response process.✓ Covered

Lesson or lab available.

3.3Given a scenario, implement incident response techniques.✓ Covered

Lesson or lab available.

4.0 Reporting and Communication

4.1Explain the importance of vulnerability management reporting and communication.✓ Covered

Lesson or lab available.

4.2Explain the importance of security operations and incident response reporting and communication.✓ Covered

Lesson or lab available.

LAT: 0000
LON: 0000
DEP: 0000