BeginnerSecurity+
The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.
5 days · 35 h✓ Voucher included
From10,900 MAD
CCNA Cybersecurity Training in Morocco
Cisco CCNA Cybersecurity (200-201, ex-CyberOps Associate)
Cisco's path to SOC analyst roles: monitor, detect and analyse security incidents.
- Vendor
- Cisco
- Exam code
- 200-201
- Duration
- 5 days · 40 hours
- Level
- Beginner
Overview
Cisco CCNA Cybersecurity (exam 200-201) validates the skills expected of an analyst in a Security Operations Center (SOC). The syllabus covers security concepts, network and system monitoring, host-based analysis of workstations and servers, network intrusion analysis from packet captures and logs, and incident-handling policies and procedures. It is a hands-on certification: read an alert, correlate it with other sources and decide whether it is a real incident. Formerly known as "CyberOps Associate", it was renamed by Cisco in 2026 with the exam code unchanged (still 200-201), and version 1.2 of the blueprint adds new AI-related objectives.
In Morocco, SOCs are growing fast: in-house SOCs at banks and telecom operators, managed security service providers (MSSPs), and offshoring centres in Casablanca and Rabat that monitor European clients. The framework set by Law 05-20 on cybersecurity and DGSSI requirements for critical infrastructure operators reinforce the need for continuous monitoring. CCNA Cybersecurity lets network or support professionals prove they have the reflexes of a Tier 1 analyst, and it is a natural next step after the networking CCNA (200-301) for anyone moving from networking to detection.
Compared with other entry-level certifications, CCNA Cybersecurity is more focused on analysis and detection than CompTIA Security+, which covers security more broadly; CompTIA CySA+ sits one level higher, for analysts with a few years of experience. Our 5-day (40-hour) course follows the five official 200-201 exam domains, with traffic and log analysis labs. It runs in class in Casablanca or Rabat, or as a live virtual classroom, and the voucher for the official Cisco exam is included.
Who is it for?
- Network technicians and CCNA (200-301) holders who want to move into detection and incident response
- Support and helpdesk staff in offshoring centres aiming for a SOC role
- Graduates of engineering schools, private institutes or OFPPT interested in cyber defence
- System administrators who work with logs and monitoring tools
- Junior SOC analysts who want to structure and validate their skills
Prerequisites
- No formal prerequisites set by Cisco
- Solid networking basics (TCP/IP, common ports and protocols); CCNA (200-301)-level knowledge is a real advantage
- Familiarity with Windows and Linux, especially the command line
- Reading-level technical English, as the exam is offered in English
What you will be able to do
- Explain key security concepts: CIA, threats, vulnerabilities and defence-in-depth approaches
- Use monitoring data (NetFlow, logs, IDS/IPS alerts, packet captures) to detect suspicious activity
- Analyse a compromised workstation or server: processes, system logs, artefacts and indicators of compromise
- Interpret network traffic and identify common attack and evasion techniques
- Classify an incident and apply response procedures based on recognised frameworks (NIST, kill chain, Diamond Model)
- Approach the 200-201 exam with a proven method
Course outline
- 01Domain 1 – Security Concepts
- 02Domain 2 – Security Monitoring
- 03Domain 3 – Host-Based Analysis
- 04Domain 4 – Network Intrusion Analysis
- 05Domain 5 – Security Policies and Procedures
- 06Hands-on labs: analysing Wireshark captures, logs and alerts
- 07Exam preparation: sample questions and practice exams
The exam
| Exam code | 200-201 |
|---|---|
| Format | Exact number of questions not published by Cisco (multiple choice, drag-and-drop and scenario analysis) |
| Duration | 120 minutes |
| Passing score | Not published by Cisco (varies by exam form) |
| Validity | 3 years, renewable by passing an exam or earning Cisco Continuing Education credits |
Career opportunities in Morocco
- Tier 1 SOC analyst
- Junior incident detection and response analyst
- Security monitoring technician or operator at an MSSP
- Security support engineer in an offshoring centre
- Stepping stone to Tier 2 SOC analyst or threat hunter
Frequently asked questions
How much does CCNA Cybersecurity training cost in Morocco and what is included?
The course starts at 10,900 MAD. This covers 5 instructor-led days (40 hours), course materials, access to analysis labs, practice exams and the voucher for the official Cisco 200-201 exam. Corporate quotes are available for SOC teams.
Which payment methods do you accept?
You can pay by bank transfer or by card. Individuals can pay in 3 interest-free monthly instalments, with the exam voucher issued after the second instalment. Companies pay against an invoice once the quote is approved.
Is the course held in class or online?
Sessions run in class in Casablanca and Rabat, or as a live virtual classroom, with the same syllabus and labs. The online format lets you attend from anywhere in Morocco.
Where and how do I take the 200-201 exam?
The exam is delivered by Pearson VUE. You can take it online with remote proctoring (OnVUE) from home or the office, or at an authorised Pearson VUE test centre. It lasts about 120 minutes; Cisco does not publish the exact number of questions. The 200-201 exam code is unchanged since the certification, formerly "CyberOps Associate", was renamed CCNA Cybersecurity, and it is valid for 3 years.
Should I take the CCNA (200-301) or Security+ first? What about CySA+?
There are no mandatory prerequisites, but solid networking basics are essential: if you are starting out, the networking CCNA (200-301) is an excellent first step. Security+ covers security more broadly, while CCNA Cybersecurity is more focused on SOC analyst work. CompTIA CySA+ is a later, more advanced step to consider after a few years of experience.
Complementary certifications
BeginnerIntermediateCySA+
Detect, analyse and respond to threats: the certification for SOC analysts and blue teams.
5 days · 35 h✓ Voucher included
From12,900 MAD
IntermediateCND v3
Protect, detect, respond, predict: the certification that turns a network administrator into a real defender.
5 days · 40 h✓ Voucher included
From15,900 MAD
Related articles
Certifications· 9 min read
Best Cybersecurity Training Centers in Morocco (2026 Guide)
The best cybersecurity training center in Morocco in 2026 is not the one that calls itself number one, but the one whose vendor authorisation you can verify, that includes the official exam voucher, trains you in hands-on labs and publishes its prices in dirhams. Here are the criteria, the certifications (CEH, Security+, CISSP, Cisco) and the questions to ask before you enrol.
Read the article
Certifications· 7 min read
Cybersecurity certification prices in Morocco in 2026 (in MAD)
How much does a cybersecurity certification cost in Morocco? Here are 2026 prices in dirhams for the 12 most requested certifications, what they cover and the extra costs to plan for.
Read the article
Comparisons· 7 min read
CCNA or CompTIA Security+: Which One Should You Start With?
CCNA validates networking fundamentals, Security+ validates cybersecurity fundamentals. The right starting point depends mostly on the job you are aiming for: here is how to decide.
Read the articleReady to earn your certification?
Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.