EC-Council CSA v2: Exam Format, Eligibility and 8 Modules

The Certified SOC Analyst (CSA v2) from EC-Council is built for people who work, or want to work, as Tier I and Tier II analysts in a security operations center. These details come from EC-Council's CSA page, read on November 5, 2026. EC-Council changes its rules and fees, so confirm current terms before you register.

Exam Format

• Exam code: 312-39.
• Questions: 100, multiple choice.
• Duration: 3 hours, about 1 minute 48 seconds per question.
• Passing score: 70%.

The course has 8 modules, 50 labs and 120 tools, and EC-Council says it includes more than 350 SIEM use cases.

Who Can Take It

EC-Council asks for one year of work experience in network administration or security, which it validates through its application process. Candidates who attend official training do not need to prove that experience. Freshers usually start with CND or a hands-on SOC course first.

The 8 Modules

• 1. Security Operations and Management
• 2. Understanding Cyber Threats, IoCs, and Attack Methodology
• 3. Log Management
• 4. Incident Detection and Triage
• 5. Proactive Threat Detection
• 6. Incident Response
• 7. Forensic Investigation and Malware Analysis
• 8. SOC for Cloud Environments

How It Compares with CND

CND is the broader network defense foundation; CSA is the SOC-specific step. Our CND vs CSA guide helps you choose.

Cost and What We Offer

Our CSA v2 fee is ₹34,000 + 18% GST (₹40,120 in total). Each EC-Council certification fee includes one exam attempt. The full table is on the CSA certification page. A certificate alone does not get you a SOC job; employers also test whether you can search logs and explain what happened. That practice is the core of our SOC, Splunk, Wazuh and DFIR course.