CCNA Cybersecurity in Morocco: 200-201 Exam, Syllabus and Prep

CCNA Cybersecurity is Cisco's certification for aspiring Security Operations Center (SOC) analysts. You earn it by passing a single exam, 200-201, and it validates a very practical skill: reading an alert, putting it in context, correlating it with other evidence and deciding whether it is a real incident.

If the name sounds new, that is because until early 2026 this certification was called "Cisco Certified CyberOps Associate". According to Cisco's announcements, it was renamed CCNA Cybersecurity in February 2026, keeping the same exam code. Existing CyberOps Associate holders should not need to do anything: their credential is recognised under the new name. As always, check the current details on Cisco's official website before registering.

For candidates in Morocco, the appeal is twofold: Cisco is already widely deployed across telecom operators, banks and public bodies, and the exam content maps directly to the daily work of a Tier 1 SOC analyst.

The change is mostly incremental. The 200-201 code is the same, there is still a single exam and the five main domains remain. The most notable update is version 1.2 of the blueprint, which adds AI-related objectives: understanding how AI is used in detection and analysis tools, and what new risks it introduces.

The new name also places the certification in the CCNA family, which recruiters recognise more easily. If you started studying with CyberOps Associate materials, most of them remain useful; just add the objectives introduced in v1.2.

The official blueprint is organised into five domains which, together, follow an alert from detection to handling according to the organisation's procedures.

The exam lasts about 120 minutes and is delivered by Pearson VUE, either online with remote proctoring (OnVUE) or at an authorised test centre. It is offered in English, so solid technical reading skills are essential.

Cisco does not publish the exact number of questions or the passing score, which can vary by exam form. Expect multiple-choice questions as well as drag-and-drop items and scenarios where you interpret a log excerpt or a capture. The certification is valid for 3 years and can be renewed by passing an exam or earning Cisco Continuing Education credits.

The natural target is a Tier 1 SOC analyst role: monitoring SIEM consoles, triaging alerts, ruling out false positives and escalating real incidents to Tier 2. In Morocco, these roles exist at telecom operators, banks and insurers, managed security service providers and offshore service centres monitoring European clients.

The certification also helps a network or systems administrator move towards security, or a recent graduate prove they already have an analyst's reflexes. It does not replace experience, but it gives you a common language with existing teams and a concrete talking point in interviews. Our article on the SOC analyst role in Morocco covers the job and career path in more detail.

With solid networking basics (OSI model, TCP/IP, addressing, common services), a 6 to 8-week plan at 8 to 10 hours a week is realistic. Without them, plan a few weeks of catch-up first, for instance with the general CCNA syllabus.

CompTIA Security+ covers security more broadly: governance, architecture, cryptography, identity management and operations. It is an excellent general foundation. CCNA Cybersecurity is narrower and focused on detection and analysis, so it aligns more directly with a SOC role.

CompTIA CySA+ sits one level higher: it targets analysts with a few years of experience and adds vulnerability management, threat hunting and more advanced incident response. A sensible path is to start with Security+ or CCNA Cybersecurity depending on your profile, then aim for CySA+ after some SOC experience.

GATech offers a 5-day (40-hour) 200-201 preparation starting at 10,900 MAD, with the voucher for the official Cisco exam included. The course follows the five blueprint domains with traffic and log analysis labs and practice exams, in class in Casablanca or Rabat, or as a live virtual classroom. GATech is not a Cisco Learning Partner: this is independent preparation for the official exam.

Several offers can lower the cost: 10% off when you pay at least 4 weeks before the session, 15% for students and recent graduates or for groups of 3 or more from the same company, and 3 interest-free instalments for individuals. Discounts cannot be combined. Request a quote to see the next dates.