Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Cisco's latest CCNP security updates

Anthony Sequeira | July 8, 2014
Cisco has given us a big makeover for one of their premier Professional Level Certifications - the Cisco Certified Network Professional Security (CCNP Security) Certification. The 2014 updates retire some devices and technologies from coverage, and replace these with some of the latest and greatest in Cisco's security portfolio. It does seem that in the area of security, Cisco makes the most sweeping changes, retiring products with no warning. The ever-changing network security landscape certainly helps to make this a reality.

300-208 SISAS - the Implementing Cisco Secure Access Solutions (SISAS) (300-208) exam challenges your knowledge of the components and architecture of secure access utilizing 802.1X and Cisco TrustSec. This exam is 90 minutes and consists of 65-75 questions. The main sections you need to be ready for are: 

  • Identity Management and Secure Access - 33% of your exam is in this area. Topics are TACACS+, RADIUS, Native AD, LDAP, identity management, 802.1X, MAB, network authorization enforcement, Central Web Authentication, profiling, guest services, posture services, and BYOD access. 
  • Threat Defense - 10% of your exam is in this area. The topic is the TrustSec architecture. 
  • Troubleshooting, Monitoring and Reporting Tools - 7% of your exam is in this area. The topic is troubleshooting the ISE and AAA solutions. 
  • Threat Defense Architectures - 17% of your exam is in this area. The topic is designing a highly secure wireless solution with ISE. 
  • Design Identity Management Architectures - 33% of your exam is in this area. Topics are device administration, identity management, profiling, guest services, posturing services, and BYOD access. 

300-209 SIMOS - the Implementing Cisco Secure Mobility Solutions (SIMOS) (300-209) exam challenges you on the variety of Virtual Private Network (VPN) solutions that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms. The exam is 90 minutes and consists of 65-75 questions. The topics are:

  • Secure Communications - 32% of your exam is in this area. The topics are site-to-site VPNs and remote access VPNs. 
  • Troubleshooting, Monitoring and Reporting Tools - 38% of your exam is in this area. The topic is the troubleshooting of all of the VPN variants.
  • Secure Communications Architectures - 30% of your exam is in this area. The topics are designing site-to-site and remote access VPN solutions, and encryption, hashing, and Next Generation Encryption (NGE). 

300-207 SITCS - the Implementing Cisco Threat Control Solutions (SITCS) (300-207) exam seeks to challenge you on advanced firewall architecture and configuration with the Cisco next-generation firewall, utilizing access and identity policies. The exam is 90 minutes and consists of 65-75 questions. Topics include:

  • Content Security - 22% of your exam is in this area. The topics are  the Cisco ASA 5500-X NGFW Security Services, Cisco Cloud Web Security, Cisco WSA, and Cisco ESA. 
  • Threat Defense - 23% of your exam is in this area. The topic is the configuration of Cisco IPS. 
  • Devices GUIs and Secured CLI - 16% of your exam is in this area. The topic is content security. 
  • Troubleshooting, Monitoring and Reporting Tools - 19% of your exam is in this area. Topics are IME and IP logging for IPS, content security, and Cisco Security IntelliShield. 
  • Threat Defense Architectures - 8% of your exam is in this area. The topic is the design of an IPS solution. 
  • Content Security Architectures - 12% of your exam is in this area. Topics are the design of Web, email, and application security solutions. 

 

Previous Page  1  2  3  Next Page 

Sign up for CIO Asia eNewsletters.