CCNP Security SCOR 350-701 – CS-SCOR
CCNP Security SCOR 350-701
Course Code: CS-SCOR
This course covers core security technologies, including cybersecurity fundamentals, network security, cloud security, identity management, secure network access, endpoint protection and detection, and visibility and enforcement
- Duration: 5 Day
- Level: Professional
- Technology: Cisco Security
- Delivery Method: ILT / VILT
- Training Credits: NA
This course is primarily intended for:
– Cisco partners and integrators, Network engineers, Technical solutions architect
– Individuals preparing for the CCNP Security Certification
There are no formal prerequisites for CCNP Security. In other words, you do not have to pass the CCNA Security or any other certifications in order to take CCNP-level exams. On the other hand, CCNP candidates often have three to five years of experience in IT and cybersecurity.
The ideal knowledge and skills that a learner should have before attending this course are as follows:
– Knowledge of implementing and operating core security technologies
– Understanding of cloud security
– Hands-on experience with next-generation firewalls, intrusion prevention systems (IPSs), and other network infrastructure devices
– Understanding of content security, endpoint protection and detection, and secure network access, visibility, and enforcement
– Understanding of cybersecurity concepts with hands-on experience in implementing security controls
The Implementing and Operating Cisco Security Core Technologies (SCOR 350-701) exam is the required “core” exam for the CCNP Security and CCIE Security certifications. If you pass the SCOR 350-701 exam, you will also obtain the Cisco Certified Specialist – Security Core Certification.
Modules
– Introduction to Cybersecurity
– Defining What Are Threats, Vulnerabilities, and Exploits
– Common Software and Hardware Vulnerabilities
– Confidentiality, Integrity, and Availability
– Cloud Security Threats
– IoT Security Threats
– An Introduction to Digital Forensics and Incident Response
– Introduction to Cryptography
– Fundamentals of PKI
– Introduction to Software-Defined Networking
– Introduction to Network Programmability 132
– Introduction to Authentication, Authorization, and Accounting
– Authentication
– Authorization
– Accounting
– Infrastructure Access Controls
– AAA Protocols
– Cisco Identity Services Engine (ISE)
– Configuring TACACS+ Access
– Configuring RADIUS Authentication
– Sizing a Cisco ISE Distributed Deployment
– Introduction to Network Visibility
– NetFlow
– IP Flow Information Export (IPFIX)
– NetFlow Deployment Scenarios
– Cisco Stealthwatch
– Cisco Cognitive Threat Analytics (CTA) and Encrypted Traffic Analytics (ETA)
– NetFlow Collection Considerations and Best Practices
– Configuring NetFlow in Cisco IOS and Cisco IOS-XE
– Configuring NetFlow in NX-OS
– Introduction to Network Segmentation
– Micro-Segmentation with Cisco ACI
– Segmentation with Cisco ISE
– Securing Layer 2 Technologies
– Common Layer 2 Threats and How to Mitigate Them
– Network Foundation Protection
– Understanding and Securing the Management Plane
– Understanding the Control Plane
– Understanding and Securing the Data Plane
– Securing Management Traffic
– Implementing Logging Features
– Configuring NTP
– Securing the Network Infrastructure Device Image and Configuration Files
– Securing the Data Plane in IPv6
– Securing Routing Protocols and the Control Plane
– Introduction to NGFW and NGIPS
– Comparing Network Security Solutions that Provide Firewall Capabilities
– Deployment Modes of Network Security Solutions and Architectures That
– Provide Firewall Capabilities
– High Availability and Clustering
– Implementing Access Control
– Cisco Firepower Intrusion Policies
– Cisco Advanced Malware Protection (AMP)
– Security Intelligence, Security Updates, and Keeping Firepower Software up to Date
– Virtual Private Network (VPN) Fundamentals
– Deploying and Configuring Site-to-Site VPNs in Cisco Routers
– Configuring Site-to-Site VPNs in Cisco ASA Firewalls
– Configuring Remote Access VPNs in the Cisco ASA
– Configuring Clientless Remote Access SSL VPNs in the Cisco ASA
– Configuring Client-Based Remote-Access SSL VPNs in the Cisco ASA
– Configuring Remote Access VPNs in FTD
– Configuring Site-to-Site VPNs in FTD
– What Is Cloud and What Are the Cloud Service Models?
– DevOps, Continuous Integration (CI), Continuous Delivery (CD), and DevSecOps
– Describing the Customer vs. Provider Security Responsibility for the Different Cloud Service Models
– Cisco Umbrella
– Cisco Email Security in the Cloud
– Cisco Cloudlock
– Stealthwatch Cloud
– AppDynamics Cloud Monitoring
– Cisco Tetration
– Content Security Fundamentals
– Cisco WSA
– Cisco ESA
– Cisco Content Security Management Appliance (SMA)
– Introduction to Endpoint Protection and Detection
– Cisco AMP for Endpoints
– Cisco Threat Response
