CCNA Cybersecurity Training in Morocco

Cisco CCNA Cybersecurity (200-201, ex-CyberOps Associate)

Cisco's path to SOC analyst roles: monitor, detect and analyse security incidents.

Vendor: Cisco
Exam code: 200-201
Duration: 5 days · 40 hours
Level: Beginner

Overview

Cisco CCNA Cybersecurity (exam 200-201) validates the skills expected of an analyst in a Security Operations Center (SOC). The syllabus covers security concepts, network and system monitoring, host-based analysis of workstations and servers, network intrusion analysis from packet captures and logs, and incident-handling policies and procedures. It is a hands-on certification: read an alert, correlate it with other sources and decide whether it is a real incident. Formerly known as "CyberOps Associate", it was renamed by Cisco in 2026 with the exam code unchanged (still 200-201), and version 1.2 of the blueprint adds new AI-related objectives.

In Morocco, SOCs are growing fast: in-house SOCs at banks and telecom operators, managed security service providers (MSSPs), and offshoring centres in Casablanca and Rabat that monitor European clients. The framework set by Law 05-20 on cybersecurity and DGSSI requirements for critical infrastructure operators reinforce the need for continuous monitoring. CCNA Cybersecurity lets network or support professionals prove they have the reflexes of a Tier 1 analyst, and it is a natural next step after the networking CCNA (200-301) for anyone moving from networking to detection.

Compared with other entry-level certifications, CCNA Cybersecurity is more focused on analysis and detection than CompTIA Security+, which covers security more broadly; CompTIA CySA+ sits one level higher, for analysts with a few years of experience. Our 5-day (40-hour) course follows the five official 200-201 exam domains, with traffic and log analysis labs. It runs in class in Casablanca or Rabat, or as a live virtual classroom, and the voucher for the official Cisco exam is included.

Who is it for?

Network technicians and CCNA (200-301) holders who want to move into detection and incident response
Support and helpdesk staff in offshoring centres aiming for a SOC role
Graduates of engineering schools, private institutes or OFPPT interested in cyber defence
System administrators who work with logs and monitoring tools
Junior SOC analysts who want to structure and validate their skills

Prerequisites

No formal prerequisites set by Cisco
Solid networking basics (TCP/IP, common ports and protocols); CCNA (200-301)-level knowledge is a real advantage
Familiarity with Windows and Linux, especially the command line
Reading-level technical English, as the exam is offered in English

What you will be able to do

Explain key security concepts: CIA, threats, vulnerabilities and defence-in-depth approaches
Use monitoring data (NetFlow, logs, IDS/IPS alerts, packet captures) to detect suspicious activity
Analyse a compromised workstation or server: processes, system logs, artefacts and indicators of compromise
Interpret network traffic and identify common attack and evasion techniques
Classify an incident and apply response procedures based on recognised frameworks (NIST, kill chain, Diamond Model)
Approach the 200-201 exam with a proven method

Course outline

01Domain 1 – Security Concepts
02Domain 2 – Security Monitoring
03Domain 3 – Host-Based Analysis
04Domain 4 – Network Intrusion Analysis
05Domain 5 – Security Policies and Procedures
06Hands-on labs: analysing Wireshark captures, logs and alerts
07Exam preparation: sample questions and practice exams

The exam

The exam CCNA Cybersecurity
Exam code	200-201
Format	Exact number of questions not published by Cisco (multiple choice, drag-and-drop and scenario analysis)
Duration	120 minutes
Passing score	Not published by Cisco (varies by exam form)
Validity	3 years, renewable by passing an exam or earning Cisco Continuing Education credits

Career opportunities in Morocco

Tier 1 SOC analyst
Junior incident detection and response analyst
Security monitoring technician or operator at an MSSP
Security support engineer in an offshoring centre
Stepping stone to Tier 2 SOC analyst or threat hunter

Frequently asked questions

How much does CCNA Cybersecurity training cost in Morocco and what is included?

The course starts at 10,900 MAD. This covers 5 instructor-led days (40 hours), course materials, access to analysis labs, practice exams and the voucher for the official Cisco 200-201 exam. Corporate quotes are available for SOC teams.

Which payment methods do you accept?

You can pay by bank transfer or by card. Individuals can pay in 3 interest-free monthly instalments, with the exam voucher issued after the second instalment. Companies pay against an invoice once the quote is approved.

Is the course held in class or online?

Sessions run in class in Casablanca and Rabat, or as a live virtual classroom, with the same syllabus and labs. The online format lets you attend from anywhere in Morocco.

Where and how do I take the 200-201 exam?

The exam is delivered by Pearson VUE. You can take it online with remote proctoring (OnVUE) from home or the office, or at an authorised Pearson VUE test centre. It lasts about 120 minutes; Cisco does not publish the exact number of questions. The 200-201 exam code is unchanged since the certification, formerly "CyberOps Associate", was renamed CCNA Cybersecurity, and it is valid for 3 years.

Should I take the CCNA (200-301) or Security+ first? What about CySA+?

There are no mandatory prerequisites, but solid networking basics are essential: if you are starting out, the networking CCNA (200-301) is an excellent first step. Security+ covers security more broadly, while CCNA Cybersecurity is more focused on SOC analyst work. CompTIA CySA+ is a later, more advanced step to consider after a few years of experience.

From

10,900 MAD

Price per participant, training + official exam voucher. Corporate quotes on request.

Enroll Ask on WhatsApp

Included in the price

Training with a certified instructor
Official exam voucher
Hands-on lab access
Practice exams with explanations
Certificate of attendance

Our offers

−10%Early bird10% off when you register and pay at least 4 weeks before the session starts.
−15%Group rate15% off from 3 participants from the same company in the same session.
−15%Students & recent graduates15% off with a valid student card or a diploma obtained less than 12 months ago.
3×Pay in 3 interest-free instalmentsFor individuals: pay in 3 monthly instalments at no extra cost. The exam voucher is issued after the 2nd instalment.

Discounts cannot be combined. Full terms are stated on the quote.

Classroom Casablanca & Rabat · Live online · On-site

Beginner

Security+

The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.

5 days · 35 h✓ Voucher included

From10,900 MAD

Intermediate

CySA+

Detect, analyse and respond to threats: the certification for SOC analysts and blue teams.

5 days · 35 h✓ Voucher included

From12,900 MAD

Intermediate

CND v3

Protect, detect, respond, predict: the certification that turns a network administrator into a real defender.

5 days · 40 h✓ Voucher included

From15,900 MAD

Adult learners with laptops seated around a long table in a bright training room

Certifications

13 October 2026 · 9 min read

Best Cybersecurity Training Centers in Morocco (2026 Guide)

The best cybersecurity training center in Morocco in 2026 is not the one that calls itself number one, but the one whose vendor authorisation you can verify, that includes the official exam voucher, trains you in hands-on labs and publishes its prices in dirhams. Here are the criteria, the certifications (CEH, Security+, CISSP, Cisco) and the questions to ask before you enrol.

Read the article

Calculator resting on financial documents next to a laptop on an office desk