Cisco CyberOps Associate Labs Frequently Asked Questions


This guide is designed to provide instructors and administrators information on the Cisco CyberOps Associate Lab curriculum, requirements, and other frequently asked questions. 



  1. Who is sponsoring the labs?

NDG has developed the NDG Cisco CyberOps Associate labs for institutions participating in the Cisco Networking Academy program. These labs are hosted by NDG and are being offered as supplementary learning material for the CyberOps Associate course in the Cisco Networking Academy for Instructor-Led Training (ILT). To learn more about NDG, visit

  1. Where can I find information about the course?

The CyberOps Associate course is a Cisco NetAcad offering currently available to Cisco NetAcad instructors. For more information about the CyberOps Associate course in NetAcad please visit the course FAQs here.

  1. What are the lab objectives?

The NDG CyberOps Associate Lab objectives cover the following subject areas:

      • Identify running processes on a computer
      • Exploring processes, threads, handles, and Windows Registry
      • Create and modify user accounts in Windows
      • Using Windows PowerShell
      • Explore Windows Task Manager 
      • Monitor and manage Windows system resources
      • Become familiar with Linux command line text editors and configuration files
      • Use the Linux command line to identify running servers
      • Become familiarized with the Linux filesystem 
      • Locate and manipulate Linux log files
      • Navigate the Linux filesystem and permission settings
      • Trace a route to a remote server using Traceroute
      • Explore Wireshark
      • Capture and analyze ICMP Data in Wireshark
      • Analyze packets using Wireshark
      • Explore Nmap
      • Use Wireshark to view HTTP and HTTPS traffic
      • Explore DNS traffic
      • Analyze attacks against an SQL database
      • Analyze server logs
      • Create and encrypt messages
      • Encrypt and decrypt messages using OpenSSL
      • Examine Telnet and SSH sessions using Wireshark
      • Create and verify hashes using OpenSSL
      • Understand Certificate Authority Stores
      • Snort and Firewall rules
      • Converting data into universal format
      • Use regular expressions (regex) to query data
      • Analyze and extract PCAP
      • Use 5-Tuple to isolate a compromised host
      • Investigating a malware exploit
      • Investigating an attack on a Windows host
  1. Do the labs align with any industry-recognized certification?

The NDG Cisco CyberOps Associate labs align to the CyberOps Associate course in NetAcad, which aligns to the Cisco Certified CyberOps Associate Certification. Labs aligned to the CyberOps Associate course modules are listed in the table below:

Title of Course Learning Module 
NDG CyberOps Associate Labs
1 The Danger
2 Fighters in the War Against Cybercrime
3 The Windows Operating System
3.0.3 Identify Running Processes
3.2.11 Exploring Processes, Threads, Handles, and Windows Registry
3.3.10 Create User Accounts
3.3.11 Using Windows PowerShell
3.3.12 Windows Task Manager
3.3.13 Monitor and Manage System Resources in Windows
4 Linux Overview
4.2.6 Working with Text Files in the CLI
4.2.7 Getting Familiar with the Linux Shell
4.3.4 Linux Servers
4.4.4 Locating Log Files
4.5.4 Navigating the Linux Filesystem and Permission Settings
5 Network Protocols
5.1.5 Tracing a Route
5.3.7 Introduction to Wireshark
6 Ethernet an Internet Protocol (IP)

7 Connectivity Verification


8 Address Resolution Protocol

8.2.8 Using Wireshark to Examine Ethernet Frames

9 The Transport Layer
9.2.6 Using Wireshark to Observe the TCP 3-Way Handshake
9.3.8 Exploring Nmap
10 Network Services
10.2.7 Using Wireshark to Examine a UDP DNS Capture
10.4.3 Using Wireshark to Examine TCP and UDP Captures
10.6.7 Using Wireshark to Examine HTTP and HTTPS Traffic
11 Network Communication Devices
12 Network Security Infrastructure
13 Attackers and Their Tools
14 Common Threats and Attacks
15 Network Monitoring and Tools
16 Attacking the Foundation
17 Attacking What We Do
17.1.7 Exploring DNS Traffic
17.2.6 Attacking a MySQL Database
17.2.7 Reading Server Logs
18 Understanding Defense
19 Access Control
20 Threat Intelligence
21 Cryptography
21.0.3 Create Codes
21.1.6 Hashing Things Out
21.2.10 Encrypting and Decrypting Data Using OpenSSL
21.2.11 Encrypting and Decrypting Data Using a Hacker Tool
21.2.12 Examining Telnet and SSH in Wireshark
21.4.7 Certificate Authority Stores
22 Endpoint Protection
23 Endpoint Vulnerability
24 Technologies and Protocols
25 Network Security Data
26 Evaluating Alerts

26.1.7 Snort and Firewall Rules

27 Working with Network Security Data

27.1.5 Convert Data into a Universal Format
27.2.9 Regular Expression Tutorial
27.2.10 Extract an Executable from a PCAP
27.2.12 Interpret HTTP and DNS Data to Isolate Threat Actor
27.2.14 Isolate Compromised Host using 5-Tuple
27.2.15 Investigating a Malware Exploit
27.2.16 Investigating an Attack on a Windows Host

28 Digital Forensics and Incident Analysis and Response


  1. Is there a fee for the NDG CyberOps Associate labs?

Yes, The NDG CyberOps Associate labs are available at $39.95 per student for 6 months of unlimited access, $29.95 per student for 3 months of unlimited access, or $11.95 per student for 1 month of unlimited access. 

Upon purchase of the labs, an access code will be provided. This access code will be valid until claimed during the lab enrollment process in the NDG Online Portal. Once claimed, the access code will provide unlimited access to the labs until its expiration based on the amount of access time purchased.

The NDG CyberOps Associate labs are available for purchase individually by learners or in bulk by instructors or purchasing agents. To learn more about creating bulk purchase orders, please visit our purchase order guide. Learners can also purchase the labs by clicking on the lab module in the course in NetAcad, which will redirect to our NDG Online Portal where the labs can be purchased through our payment provider FastSpring™.


Instructor accounts tied to the class automatically have access to the labs at no charge and will not be prompted for payment when accessing the labs. Evaluation access to the NDG Portal content can be obtained by using instructor tools within the NDG Portal. Information regarding how to apply for instructor access to the NDG Portal can be found here:

Lab Setup and Requirements

  1. As an instructor, how do I enable access to the NDG CyberOps Associate labs?

If your organization is participating in the Cisco Networking Academy, you can use this course for Instructor-Led Training (ILT). To enable the NDG CyberOps Associate labs, complete the following steps:

      • From the NetAcad Home page, select the Teach tab.
      • Go to your CyberOps Associate course and click Launch Course.
      • In the course, click on the Course Home tab.
      • Click the settings icon on the right-hand side of the course to open the drop-down menu then click on the Turn Editing On option.

      • Scroll down to the NDG Online lab service item and click on the Edit button to open the drop-down menu then click on the Show topic option.
      • Repeat for each module where NDG labs are present. 


Note that when clicking on the NDG labs, participants will be directed to the NDG Online Portal to create an NDG Online Portal account and to purchase the labs. For more information about the lab enrollment process, visit our Enrollment Guide.


  1. Where can I find more information about how to use NetAcad?

For more information, please visit the FAQs and Tutorials web page (you must be logged in to your NetAcad account to access):

We also encourage new instructors to complete the Academy Orientation course located in the Global Instructor Resources page (you must be logged in to your NetAcad account to access):

  1. How long will it take to complete the labs?

By default, the environment provides users with no less than fifty (50) minutes to complete each lab. When the time remaining equals fifteen (15) minutes or less, users are prompted with the option to request additional time if needed. Additional time extends the lab session and can be requested a maximum of five times.

The labs are supplementary material for the CyberOps Associate NetAcad course which is designed to be taught for a semester or quarter, but academies and instructors are encouraged to use the material based on the unique needs of their academic institution and students.

  1. How long will I be able to access the labs?

The CyberOps Associate course in NetAcad is designed to be taught for a semester or quarter, but academies and instructors are encouraged to use the material based on the unique needs of the academic institution and students. The NDG CyberOps Associate labs are designed to provide three levels of access time; 1-month, 3-months, or 6-months. Access to the labs is based on the access time purchased by an individual. Although the course itself may have a duration of six months or more, access to the labs is based on access time purchased through NDG and not on the duration of the course in NetAcad. If your course has expired in NetAcad but your NDG lab access period is still valid, you can access your labs through the NDG Portal. 

  1. What are the computer requirements for the labs?

The NDG Online Lab service requires the use of a desktop operating system with physical keyboard and pointing device. Smartphones and tablet devices are not supported. For additional information please refer to our system requirements article on our support website:

  1. Do I need any additional equipment for the labs?

No additional equipment is required for the labs.

  1. How do I access the internet from the NDG Portal?

The CyberOps Associate labs in the NDG Portal are deliberately isolated from the internet to serve as a safe sandbox environment. Labs do not require internet access to complete, but there may be some limited demonstrations the labs will ask you to perform with a computer connected to the internet outside of the NDG Portal. You must use the lab documentation found within the NDG Portal under the Content tab to complete the labs, and external documentation is not supported.

  1. Is this an instructor-led course?

Yes, this course is currently only available as an instructor-led course.

  1. How are labs graded?

    The labs themselves do not have any grading functions and the NDG Portal does not provide scores for completing labs. Instructors that have been granted instructor access to the NDG Portal can review screenshots taken by students, student lab reservations, and usage history using their instructor tools. Information regarding instructor access to the NDG Portal can be found here:
  2. Do the labs include questions?

Questions are presented throughout the labs to the user as skills review. These questions are not graded in the lab. The CyberOps Associate course also includes chapter assessments, a graded Final Skills Exam, a Final Exam covering chapters One through Twenty-seven, and a Certification Practice Exam. These exams do not require NDG Portal participation as the NDG labs are designed as supplementary material for skills practice. All questions for the course exams are scored and results are posted in the Networking Academy grade book.



Where do I get NDG CyberOps Associate lab help?

Learners should direct all content-related questions to the course instructor. Learners and instructors can also use an online tool to submit feedback to NDG for content typos or clarification edits, bugs, or problem instances. When viewing the NDG CyberOps Associate lab exercises, click the Help tab in the menu on the left-hand side of the NDG Online Portal lab environment to submit a question or report a bug or typo. After submitting a request, the online system will search the frequently asked questions (FAQ) database for an answer. If an answer is not available, the learner will be able to route the submission to NDG for review.


Note: The NDG CyberOps Associate labs are provided by NDG. All questions, comments and feedback specific to the lab content and NDG Portal environment should be directed to NDG.


Have more questions? Submit a request


Article is closed for comments.