课程详情

Are you ready to prepare for the Cisco CCNP Security Core 350-701 (SCOR) exam ?Get Verified Questions and Answers Practice tests 2025Cyberthreats are ever-evolving, which means our response must evolve too. When you earn your CCNP Security certification, you prove that you can step into the cybersecurity environment and protect the networks and data that clients rely on. Implementing and Operating Cisco Security Core Technologies (SCOR 350-701) is a 120-minute exam associated with the CCNP and CCIE Security Certifications. This exam tests a candidate's knowledge of implementing and operating core security technologies including network security, cloud security, content security, endpoint protection and detection, secure network access, visibility, and enforcements. The course, Implementing and Operating Cisco Security Core Technologies, helps candidates to prepare for this exam.Cisco 350-701 (SCOR) Exam Topics:1.0 Security ConceptsExplain common threats against on-premises, hybrid, and cloud environmentsCompare common security vulnerabilities such as software bugs, weak and/or hardcoded passwords, OWASP top ten, missing encryption ciphers, buffer overflow, path traversal, cross-site scripting/forgeryDescribe functions of the cryptography components such as hashing, encryption, PKI, SSL, IPsec, NAT-T IPv4 for IPsec, preshared key, and certificate-based authorizationCompare site-to-site and remote access VPN deployment types and components such as virtual tunnel interfaces, standards-based IPsec, DMVPN, FlexVPN, and Cisco Secure Client including high availability considerationsDescribe security intelligence authoring, sharing, and consumptionDescribe the controls used to protect against phishing and social engineering attacksExplain North Bound and South Bound APIs in the SDN architectureExplain Cisco DNA Center APIs for network provisioning, optimization, monitoring, and troubleshootingInterpret basic Python scripts used to call Cisco Security appliances APIs2.0 Network SecurityCompare network security solutions that provide intrusion prevention and firewall capabilitiesDescribe deployment models of network security solutions and architectures that provide intrusion prevention and firewall capabilitiesDescribe the components, capabilities, and benefits of NetFlow and Flexible NetFlow recordsConfigure and verify network infrastructure security methodsImplement segmentation, access control policies, AVC, URL filtering, malware protection, and intrusion policiesImplement management options for network security solutions (single vs. multidevice manager, in-band vs. out-of-band, cloud vs. on-premises)Configure AAA for device and network access such as TACACS+ and RADIUSConfigure secure network management of perimeter security and infrastructure devices such as SNMPv3, NetConf, RestConf, APIs, secure syslog, and NTP with authenticationConfigure and verify site-to-site and remote access VPN3.0 Securing the CloudIdentify security solutions for cloud environmentsCompare security responsibility for the different cloud service modelsDescribe the concept of DevSecOps (CI/CD pipeline, container orchestration, and secure software development)Implement application and data security in cloud environmentsIdentify security capabilities, deployment models, and policy management to secure the cloudConfigure cloud logging and monitoring methodologiesDescribe application and workload security concepts4.0 Content SecurityImplement traffic redirection and capture methods for web proxyDescribe web proxy identity and authentication including transparent user identificationCompare the components, capabilities, and benefits of on-premises, hybrid, and cloudbased email and web solutions (Cisco Secure Email Gateway, Cisco Secure Email Cloud Gateway, and Cisco Secure Web Appliance)Configure and verify web and email security deployment methods to protect onpremises, hybrid, and remote usersConfigure and verify email security features such as SPAM filtering, antimalware filtering, DLP, blocklisting, and email encryptionConfigure and verify Cisco Umbrella Secure Internet Gateway and web security features such as blocklisting, URL filtering, malware scanning, URL categorization, web application filtering, and TLS decryptionDescribe the components, capabilities, and benefits of Cisco UmbrellaConfigure and verify web security controls on Cisco Umbrella (identities, URL content settings, destination lists, and reporting)5.0 Endpoint Protection and DetectionCompare Endpoint Protection Platforms (EPP) and Endpoint Detection & Response (EDR) solutionsConfigure endpoint antimalware protection using Cisco Secure EndpointConfigure and verify outbreak control and quarantines to limit infectionDescribe justifications for endpoint-based securityDescribe the value of endpoint device management and asset inventory systems such as MDMDescribe the uses and importance of a multifactor authentication (MFA) strategyDescribe endpoint posture assessment solutions to ensure endpoint securityExplain the importance of an endpoint patching strategy6.0 Secure Network Access, Visibility, and EnforcementDescribe identity management and secure network access concepts such as guest services, profiling, posture assessment and BYODConfigure and verify network access control mechanisms such as 802.1X, MAB, WebAuthDescribe network access with CoADescribe the benefits of device compliance and application controlExplain exfiltration techniques (DNS tunneling, HTTPS, email, FTP/SSH/SCP/SFTP, ICMP, Messenger, IRC, NTP)Describe the benefits of network telemetryDescribe the components, capabilities, and benefits of these security products and solutions

课程标签

0人关注该课程

主题相关的课程