What is the Practical SOC Analyst Associate Certification?
The Practical SOC Analyst Associate (PSAA) certification is an associate-level security operations and incident response exam experience. The exam will assess a student’s ability to use analysis tools, interpret artifacts, and apply investigation methodologies to evaluate security incidents and retrace attacks. Students will have two (2) full days to complete the assessment and an additional two (2) days to write a professional report.
By earning the PSAA certification, you’ll demonstrate to employers that you’re ready to succeed within a security team and have the practical skills needed to advance your career.
The Practical SOC Analyst Associate certification was formerly known as the Practical Junior Security Analyst. As of November 2024, we have updated the names of our certifications to better align with job postings and hiring manager preferences. The exam itself has not changed, only the name! Read more on our blog.
How to Pass the PSAA Exam
In order to receive the certification, a student must:
Apply a wide array of investigation methodologies and leverage analysis tools to identify, analyze, and respond to a number of realistic attacks and incidents.
Submit a detailed and well-organized exam report that documents findings, investigation steps, IOCs, and recommended actions.
TCM Security exam vouchers come with 12 months of access to the training materials the exam is based on. Access begins on the day the voucher is purchased. We highly recommend preparing before attempting the exam. If you don’t initially succeed, don’t worry! We never want to profit on failure and include one free retake with every exam voucher.
Practical SOC Analyst Associate Exam Format
Like all TCM Security certifications, the PSAA exam was designed to teach students how to apply their skills in a real-world situation. This is not a CTF. Our exams provide an experience that is similar to what you will be asked to do in a professional environment.
You’ll be dropped right into the heart of a Security Operations Center (SOC) and briefed on a number of security scenarios based on user reports, alerts, or system and network artifacts. You will need to investigate, identify indicators of compromise, and analyze activity across multiple systems and endpoints—all based on real-world attacks and campaigns.
There are no flags to capture.
There are no multiple choice questions.
What is Included
30+ Hours of On-Demand Training (12 Months Access)
Hands-On Local Labs, Exercises, and Challenges
1 Exam Attempt + 1 Free Retake (Lifetime)
2 Days to Complete
2 Days to Write Report
24/7/365 Course Support (Lifetime)
Prerequisites
Beginner IT Knowledge
Device Capable of Running Multiple Virtual Machines
Comfort in the Linux and Windows Command Line
$249
Veterans, Active Military, First Responders, Students, and Educators can save 20% on all certifications! Email support@tcm-sec.com with proof to get a custom discount code.
Who Should Take the Practical SOC Analyst Associate Exam?
The PSAA is an associate-level introduction to the world of security operations, covering areas such as phishing analysis, network traffic analysis, security monitoring, endpoint security, threat intelligence, SIEM, digital forensics, and incident response. While students should have some experience with networking and operating systems, previous SOC experience is not required to succeed in the SOC 101 course and prepare for the exam. The PSAA is suitable for:
- Aspiring Security or SOC Analysts
- Tier 1 or Tier 2 SOC Analysts
- Threat Intelligence Analysts
- Digital Forensic Analysts
- Incident Responders
- Malware Analysts
- Threat Hunters
- Detection Engineers
What Our Students Are Saying: PSAA Reviews
Academy Students
Certifications Awarded
Discord Members
How to Prepare for the PSAA Exam
In addition to the lifetime voucher and exam attempt, students who enroll in the Practical SOC Analyst Associate certification will receive 12 months of access to the Security Operations (SOC) 101 course from TCM Security Academy. If you are looking for a different learning format, check out our small group online live training sessions.
Security Operations (SOC) 101
Students will receive 12 months of access to over 30 hours of training materials in the Security Operations (SOC) 101 course on TCM Security Academy. The PSAA exam was built from the information and resources that you will find delivered in this course material, including:
- Security Operations Fundamentals
- Phishing Analysis
- Network Security Monitoring
- Network Traffic Analysis
- Endpoint Security Monitoring
- Endpoint Detection and Response
- Log Analysis and Management
- Security Information and Event Management (SIEM)
- Threat Intelligence
- Digital Forensics
- Incident Response
SOC Level 1 Live Training
When: January 21-24, 2025
Andrew Prince leads this four day live training focused on teaching students the fundamental skills needed to succeed in Tier 1 and Tier 2 SOC roles. By the end of the training, students will be well-prepared to excel as a SOC analyst and ace the Practical SOC Analyst Associate (PSAA) exam.
The training includes:
- 4 days of live instruction
- Lifetime access to the class recordings and SOC 101 course
- Access to a private Discord cohort for instructor and classmate discussions
- 50 hours of online lab access post-class
- CEU credits
-
All TCM Security Certifications Include:
Lifetime Training
Receive 12 months of access to video-led training that was developed to provide a hands-on learning experience.
Realistic Exams
Our certification exams are designed to provide the student with a real-world experience that simulates working as a SOC analyst.
Free Retake
Industry Recognized
Non-Invasive Experience
Stable Environments
Get unlimited access to our stable student exam environments. Hosted safely for you in the cloud.
Unbeatable Support
We proudly offer 24/7/365 customer support with the additional benefit of access to our community Discord with over 60,000+ students.
Discounts
Frequently Asked Questions
PSAA Exam FAQ
Who can take the PSAA?
Any individual from any country is eligible to sit for the PSAA exam. Individuals under the age of 18 years old must submit a Parental Consent Form prior to purchasing the exam voucher.
What happened to the PJSA?
The Practical SOC Analyst Associate certification was formerly known as the Practical Junior Security Analyst. As of November 2024, we have updated the names of our certifications to better align with job postings and hiring manager preferences. The exam itself has not changed, only the name! Read more on our blog.
How is this exam and training different from others?
The PSAA certification distinguishes itself by focusing on practical, hands-on experience and dropping you into a simulated Security Operations Center (SOC) environment. Unlike theoretical exams, the PSAA was based on real-world scenarios and attacks, requiring you to apply the skills and methodology you’ve built upon to investigate and understand realistic security incidents.
Do I need to set up a SOC lab ahead of time to take this exam?
No, the exam environment includes a pre-built lab network that you can access through the exam VPN. All you need is the exam VPN file and a web browser.
How long is the exam?
The exam environment permits two days (48 hours). You will have an additional two days (48 hours) to write a professional report and submit for grading.
How difficult is the exam?
Everyone is different. However, we believe that:
If you are a beginner, this exam will give you a challenge and we strongly advise you to take your time and complete the Security Operations (SOC) 101 course that is included with this exam and get as much hands-on practice as you can.
If you are an experienced SOC Analyst or have a strong grasp on the covered material, the exam will be of low to moderate difficulty.
What tools can I use on the exam?
There are no tool limitations on the exam. Everything you need will be included on the provided system and the provided Exam Guide will contain more information on available tools.
General FAQ
Does the certification expire?
No, the Practical SOC Analyst Associate certification does NOT expire.
Does my exam voucher expire?
No, exam vouchers do not expire.
Does my training expire?
All certifications come with 12 months of training access starting from the purchase date.
Will I receive a digital certification?
Yes! You can view an example of those here.
Do you offer any other discounts?
Yes! We are veteran-owned and want to thank you for your service.
We offer a 20% discount to current and former military as well as first responders (Police, EMTs, Firefighters, Nurses, Doctors, etc.), regardless of country. We also extend this discount to students and educators.
Please email support@tcm-sec.com with proof of first responder status, such as a discharge form, ID, etc. and we will issue you a coupon code to use on purchase. If you are a student or educator, please email us from a valid educational address or provide proof of current enrollment.
Is the exam proctored?
No. We do monitor network traffic in the exam environment and have detection mechanisms in place for cheating in the environment and the exam, but there will be no proctor or intrusive software to install on your machine.
Do you offer printed certifications?
In efforts to stay green, we do not offer printed certifications. However, our certifications come in a high quality printable format and you’re welcome to have them printed on your own accord.
