|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/cisco-certified-network-professional-security-exam-prep/
课程评论：没有评论
课程名称：思科认证网络专业安全考试准备 概述：本课程为您提供全面准备，帮助您应对实施和操作思科安全核心技术 v1.1（350-701 SCOR）考试，这是 CCNP 和 CCIE 安全认证的重要考试。涵盖广泛的主题，这项培训对于掌握基本安全技术的实施和操作至关重要。以下为每个考试主题的详细说明，帮助您有效理解和准备。 详细主题及描述： 1. 安全概念（25%） - 常见威胁：了解适用于本地、混合和云环境的威胁范围，包括钓鱼和恶意软件攻击的性质及机制。 - 安全漏洞：学习识别和缓解典型安全漏洞的方法，如弱密码和软件漏洞，以保护系统安全。 - 加密组件：探讨加密和哈希等关键加密机制，这对于安全通信和数据保护至关重要。 - VPN部署类型：比较各种VPN技术及其组件，理解它们在保障远程和点对点连接中的作用。 - 安全情报：了解如何创建和利用安全情报，从而增强组织的安全态势。 - 钓鱼和社会工程学控制：研究防范旨在窃取机密信息的欺骗性攻击的方法和控制措施。 - SDN架构API：了解API在SDN架构中提升网络管理和运营效率的作用。 - Cisco DNA Center API：深入了解Cisco DNA Center如何利用API实现高效的网络配置和故障排除。 - Python脚本用于安全设备：学习解读和使用与思科安全设备交互的Python脚本，用于自动化任务和响应。 2. 网络安全（20%） - 入侵防御和防火墙能力：评估不同的网络安全解决方案及其在阻止未经授权的访问和威胁方面的有效性。 - NetFlow记录：了解如何利用NetFlow监控网络流量，关键工具用于识别异常和潜在威胁。 - 网络基础设施安全方法：实施和验证VLAN和DHCP嗅探等方法，以增强网络基础设施的安全性。 - 网络安全解决方案管理：探讨网络安全的各种管理选项，包括有带和无带管理之间的区别。 - 站点到站点和远程访问VPN：配置和排除VPN故障，理解它们在网络间安全通信中的重要角色。 3. 云安全（15%） - 云环境的安全解决方案：识别和应用适当于不同类型云部署的安全解决方案，加强各服务模型的保护。 - 云服务模型中的安全责任：区分云服务中的安全责任，以有效管理与SaaS、PaaS和IaaS相关的风险。 - DevSecOps：将安全集成入DevOps流程，强调持续集成和交付管道中安全的重要性。 - 云安全配置：在云环境中实施和管理安全措施，重点关注应用程序和数据安全。 - 云日志记录和监控：建立有效的日志记录和监控方法，帮助在云环境中检测和响应事件。 4. 内容安全（15%） - 网络代理流量重定向：实施通过代理重定向网络流量的方法，以监控和控制互联网访问。 - 电子邮件和网络安全部署：配置和管理电子邮件和网络服务的安全功能，以防范垃圾邮件和恶意软件等威胁。 - Cisco Umbrella：了解Cisco Umbrella在通过全面的安全能力扩展保护传统边界之外的作用。 5. 终端保护与检测（10%） - 终端保护平台（EPP）和终端检测与响应（EDR）：比较这些关键的终端安全解决方案，理解其独特的角色和优势。 - 终端安全管理：配置Cisco Secure Endpoint等工具，以防范和应对恶意软件感染和爆发。 6. 安全网络访问、可见性与执行（15%） - 身份管理与安全网络访问：研究802.1X和BYOD等概念和技术，管理网络资源的访问。 - 网络遥测：探讨网络遥测在提供网络行为见解和改善安全响应中的好处。 - Cisco安全产品：了解各种思科安全产品的功能和优势，如思科安全网络分析和思科加密流量分析，旨在增强网络可见性并执行安全措施。
This course thoroughly prepares you for the Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR), a pivotal exam for the CCNP and CCIE Security Certifications. Covering a wide array of topics, this training is crucial for mastering the implementation and operation of essential security technologies. Below you will find detailed explanations for each topic covered in the exam to help you understand and prepare effectively.Detailed Topics with Descriptions:1.0 Security Concepts (25%)Common threats: Understand the range of threats applicable to on-premises, hybrid, and cloud environments, including the nature and mechanics of attacks like phishing and malware.Security vulnerabilities: Learn to identify and mitigate typical security vulnerabilities, including weak passwords and software bugs, crucial for safeguarding systems.Cryptography components: Explore key cryptography mechanisms such as encryption and hashing, which are fundamental for secure communications and data protection.VPN deployment types: Compare various VPN technologies and their components to understand their roles in securing remote and site-to-site connectivity.Security intelligence: Gain insights into creating and utilizing security intelligence to enhance organizational security postures.Phishing and social engineering controls: Study the methods and controls for defending against deceptive attacks aimed at stealing confidential information.SDN architecture APIs: Understand the role of APIs in SDN architectures for enhancing network management and operational efficiency.Cisco DNA Center APIs: Delve into how Cisco DNA Center uses APIs for efficient network provisioning and troubleshooting.Python scripts for security appliances: Learn to interpret and utilize Python scripts that interact with Cisco Security appliances for automated tasks and responses.2.0 Network Security (20%)Intrusion prevention and firewall capabilities: Evaluate different network security solutions and their effectiveness in blocking unauthorized access and threats.NetFlow records: Understand how to use NetFlow for monitoring network traffic, a key tool for identifying anomalies and potential threats.Network infrastructure security methods: Implement and verify methods such as VLANs and DHCP snooping to enhance the security of network infrastructure.Management of network security solutions: Explore various management options for network security, including differences between in-band and out-of-band management.Site-to-site and remote access VPNs: Configure and troubleshoot VPNs, understanding their crucial role in secure communications across networks.3.0 Securing the Cloud (15%)Security solutions for cloud environments: Identify and apply security solutions appropriate for different types of cloud deployments, enhancing protection across all service models.Security responsibilities in cloud service models: Differentiate security responsibilities in cloud services to effectively manage risks associated with SaaS, PaaS, and IaaS.DevSecOps: Integrate security into DevOps processes, emphasizing the importance of security in continuous integration and delivery pipelines.Cloud security configurations: Implement and manage security measures in cloud environments, focusing on application and data security.Cloud logging and monitoring: Set up methodologies for effective logging and monitoring that help detect and respond to incidents in cloud environments.4.0 Content Security (15%)Web proxy traffic redirection: Implement methods for redirecting web traffic through proxies to monitor and control internet access.Email and web security deployment: Configure and manage security features for email and web services to protect against threats like spam and malware.Cisco Umbrella: Learn about Cisco Umbrella's role in extending security beyond traditional boundaries through its comprehensive security capabilities.5.0 Endpoint Protection and Detection (10%)Endpoint Protection Platforms (EPP) and Endpoint Detection & Response (EDR): Compare these critical solutions for endpoint security, understanding their unique roles and benefits.Endpoint security management: Configure tools like Cisco Secure Endpoint to protect against and respond to malware infections and outbreaks.6.0 Secure Network Access, Visibility, and Enforcement (15%)Identity management and secure network access: Study concepts and technologies like 802.1X and BYOD that are essential for managing access to network resources.Network telemetry: Explore the benefits of network telemetry in providing insights into network behavior and improving security response.Cisco security products: Learn the functions and advantages of various Cisco security products, such as Cisco Secure Network Analytics and Cisco Encrypted Traffic Analytics, which are designed to enhance visibility and enforce security across the network.
