Lesson 2: Compare common security vulnerabilities such as software bugs, weak and/or hardcoded passwords, SQL injection, missing encryption, buffer overflow, path traversal, cross-site scripting/forgery

Lesson 3: Describe functions of the cryptography components such as hashing, encryption, PKI, SSL, IPsec, NAT-T IPv4 for IPsec, pre-shared key and certificate based authorization

Lesson 4: Compare site-to-site VPN and remote access VPN deployment types such as sVTI, IPsec, Cryptomap, DMVPN, FLEXVPN including high availability considerations, and AnyConnect

Lesson 5: Describe security intelligence authoring, sharing, and consumption

Lesson 6: Explain the role of the endpoint in protecting humans from phishing and social engineering attacks

Lesson 7: Explain North Bound and South Bound APIs in the SDN architecture

Lesson 8: Explain DNAC APIs for network provisioning, optimization, monitoring, and troubleshooting

Lesson 9: Interpret basic Python scripts used to call Cisco Security appliances APIs

Lesson 1: Compare network security solutions that provide intrusion prevention and firewall capabilities

Lesson 2: Describe deployment models of network security solutions and architectures that provide intrusion prevention and firewall capabilities

Lesson 3: Describe the components, capabilities, and benefits of NetFlow and Flexible NetFlow records

Lesson 4: Configure and verify network infrastructure security methods (router, switch, wireless)

Lesson 5: Implement segmentation, access control policies, AVC, URL filtering, and malware protection

Lesson 6: Implement management options for network security solutions such as intrusion prevention and perimeter security (Single vs. multidevice manager, in-band vs. out-of-band, CDP, DNS, SCP, SFTP, and DHCP security and risks)

Lesson 7: Configure AAA for device and network access (authentication and authorization, TACACS , RADIUS and RADIUS flows, accounting, and dACL)

Lesson 8: Configure secure network management of perimeter security and infrastructure devices (secure device management, SNMPv3, views, groups, users, authentication, and encryption, secure logging, and NTP with authentication)

Lesson 9: Configure and verify site-to-site VPN and remote access VPN

Lesson 1: Identify security solutions for cloud environments

Lesson 2: Compare the customer vs. provider security responsibility for the different cloud service models

Lesson 3: Describe the concept of DevSecOps (CI/CD pipeline, container orchestration, and security

Lesson 4: Implement application and data security in cloud environments

Lesson 5: Identify security capabilities, deployment models, and policy management to secure the cloud

Lesson 6: Configure cloud logging and monitoring methodologies

Lesson 7: Describe application and workload security concepts

Lesson 1: Implement traffic redirection and capture methods

Lesson 2: Describe web proxy identity and authentication including transparent user identification

Lesson 3: Compare the components, capabilities, and benefits of local and cloud-based email and web solutions (ESA, CES, WSA)

Lesson 4: Configure and verify web and email security deployment methods to protect on-premises and remote users (inbound and outbound controls and policy management)

Lesson 5: Configure and verify email security features such as SPAM filtering, antimalware filtering, DLP, blacklisting, and email encryption

Lesson 6: Configure and verify secure internet gateway and web security features such as blacklisting, URL filtering, malware scanning, URL categorization, web application filtering, and TLS decryption

Lesson 7: Describe the components, capabilities, and benefits of Cisco Umbrella

Lesson 8: Configure and verify web security controls on Cisco Umbrella (identities, URL content settings, destination lists, and reporting)

Lesson 1: Compare Endpoint Protection Platforms (EPP) and Endpoint Detection

Lesson 2: Explain antimalware, retrospective security, Indication of Compromise (IOC), antivirus, dynamic file analysis, and endpoint-sourced telemetry

Lesson 3: Configure and verify outbreak control and quarantines to limit infection

Lesson 4: Describe justifications for endpoint-based security

Lesson 5: Describe the value of endpoint device management and asset inventory such as MDM

Lesson 6: Describe the uses and importance of a multifactor authentication (MFA) strategy

Lesson 7: Describe endpoint posture assessment solutions to ensure endpoint security

Lesson 8: Explain the importance of an endpoint patching strategy

Lesson 1: Describe identity management and secure network access concepts such as guest services, profiling, posture assessment and BYOD

Lesson 2: Configure and verify network access device functionality such as 802.1X, MAB, WebAuth

Lesson 3: Describe network access with CoA

Lesson 4: Describe the benefits of device compliance and application control

Lesson 5: Explain exfiltration techniques (DNS tunneling, HTTPS, email, FTP/SSH/SCP/SFTP, ICMP, Messenger, IRC, NTP)

Lesson 6: Describe the benefits of network telemetry

Lesson 7: Describe the components, capabilities, and benefits of these security products and solutions

Exam: Security Concepts

Exam: Network Security

Exam: Securing the Cloud

Exam: Content Security

Exam: Endpoint protection and detection

Exam: Secure network access, visibility and enforcement

CCIE and CCNP SCOR Exam Cert Study Guide eBook PDF Download (232 pages)