Implementing and Operating Cisco Security Core Technologies

This course provides skills and knowledge to implement core Cisco security solutions. It prepares learners to protect against advanced cybersecurity threats and supports readiness for senior-level security roles. The course also prepares delegates for the 350-701 SCOR v1.1 exam, which leads to Cisco Certified Specialist - Security Core certification and satisfies requirements for CCNP Security and CCIE Security certifications.

Prerequisites

• Familiarity with Ethernet and TCP/IP networking
• Working knowledge of the Windows operating system
• Working knowledge of Cisco IOS networking and concepts
• Familiarity with basics of networking security concepts

Target audience

• Security engineers
• Network engineers
• Network designers
• Network administrators
• Systems engineers
• Consulting systems engineers
• Technical solutions architects
• Cisco integrators and partners
• Network managers
• Program managers
• Project managers

By the end of this course delegates will be able to:

• Describe information security concepts and strategies within the network
• Describe security flaws in TCP/IP and how they can be used to attack networks and hosts
• Describe network application-based attacks
• Describe how various network security technologies work together to guard against attacks
• Implement access control on Cisco Secure Firewall ASA
• Deploy Cisco Secure Firewall Threat Defense basic configurations, IPS, malware, and file policies
• Deploy Cisco Secure Email Gateway basic and policy configurations
• Describe and implement basic web content security features and functions provided by Cisco Secure Web Appliance
• Describe various attack techniques against endpoints
• Describe Cisco Umbrella security capabilities, deployment models, policy management, and Investigate console
• Provide basic understanding of endpoint security and common endpoint security technologies
• Describe Cisco Secure Endpoint architecture and basic features
• Describe Cisco Secure Network Access solutions
• Describe 802.1X and extensible authentication protocol (EAP) authentication
• Configure devices for 802.1X operations
• Introduce VPNs and describe cryptography solutions and algorithms
• Describe Cisco secure site-to-site connectivity solutions
• Deploy Cisco IOS VTI-based point-to-point IPsec VPNs
• Configure point-to-point IPsec VPNs on Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense
• Describe Cisco secure remote access connectivity solutions
• Deploy Cisco secure remote access connectivity solutions
• Provide an overview of network infrastructure protection controls
• Examine various defences on Cisco devices that protect the control plane
• Configure and verify Cisco IOS software layer 2 data plane controls
• Configure and verify Cisco IOS software and Cisco ASA layer 3 data plane controls
• Examine various defences on Cisco devices that protect the management plane
• Describe the baseline forms of telemetry recommended for network infrastructure and security devices
• Describe deploying Cisco Secure Network Analytics
• Describe basics of cloud computing and common cloud attacks
• Describe how to secure cloud environments
• Describe the deployment of Cisco Secure Cloud Analytics
• Describe basics of software-defined networks and network programmability

Network security technologies

• Cisco Secure Firewall ASA deployment
• Cisco Secure Firewall Threat Defense basics
• Cisco Secure Firewall Threat Defense IPS, malware, and file policies
• Cisco Secure Email Gateway basics
• Cisco Secure Email policy configuration
• Cisco Secure Web Appliance deployment

VPN technologies and cryptography concepts

• Cisco Secure site-to-site VPN solutions
• Cisco IOS VTI-based point-to-point IPsec VPNs
• Point-to-point IPsec VPNs on Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense
• Cisco Secure remote-access VPN solutions
• Remote-access SSL VPNs on Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense

Information security concepts and attacks

• Describing information security concepts
• Describe common TCP/IP attacks
• Describe common network application attacks
• Common endpoint attacks

Endpoint security technologies

• Cisco Umbrella deployment
• Endpoint security technologies
• Cisco Secure Endpoint

Network access and authentication

• Cisco Secure Network Access solutions
• 802.1X authentication
• 802.1X authentication configuration

Network infrastructure protection

• Control plane security solutions
• Layer 2 data plane security controls
• Layer 3 data plane security controls
• Management plane security controls
• Traffic telemetry methods
• Cisco Secure Network Analytics deployment

Cloud computing and security

• Cloud computing and cloud security
• Cloud security
• Cisco Secure Cloud Analytics deployment

Software-defined networking

• Software-defined networking

Exams and assessments

The course prepares learners for the 350-701 SCOR v1.1 exam, which is a 120-minute exam associated with Cisco Certified Specialist - Security Core certification.

Hands-on learning

Learners gain hands-on experience implementing core security technologies and best practices using Cisco security solutions. Extended lab hours are available after the course for additional self-study lab exercises.