CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide Premium Edition eBook and Practice Test

Description

CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, Premium Edition eBook and Practice Test

The exciting new CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson IT Certification Practice Test. The Premium Edition eBook and Practice Test contains the following items:

• The CCNP and CCIE Security Core SCOR 350-701 Premium Edition Practice Test, including four full practice exams and enhanced practice test features
• PDF and EPUB formats of the CCNP and CCIE Security Official Cert Guide from Cisco Press, which are accessible via your PC, tablet, and Smartphone

About the Premium Edition Practice Test

This Premium Edition contains an enhanced version of the Pearson IT Certification Practice Test (PCPT) software with four full practice exams. In addition, it contains all the chapter-opening assessment questions from the book. This integrated learning package:

• Allows you to focus on individual topic areas or take complete, timed exams
• Includes direct links from each question to detailed tutorials to help you understand the concepts behind the questions
• Provides unique sets of exam-realistic practice questions
• Tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most

Pearson IT Certification Practice Test minimum system requirements:

Windows 10, Windows 8.1, Windows 7, or Vista (SP2), Microsoft .NET Framework 4.5 Client; Pentium-class 1 GHz processor (or equivalent); 512 MB RAM; 650 MB disk space plus 50 MB for each downloaded practice exam; access to the Internet to register and download exam databases

About the Premium Edition eBook

CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, focuses specifically on the objectives for the Cisco CCNP and CCIE Security SCOR exam. Best-selling author and leading security engineer Omar Santos shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. “Do I Know This Already” quizzes open each chapter and allow you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

Well regarded for its level of detail, assessment features, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will allow you to succeed on the exam the first time.

This official study guide helps you master all the topics on the CCNP and CCIE Security SCOR 350-701 exam, including

• Cybersecurity fundamentals
• Cryptography
• Software-Defined Networking security and network programmability
• Authentication, Authorization, Accounting (AAA) and Identity Management
• Network visibility and segmentation
• Infrastructure security
• Cisco next-generation firewalls and intrusion prevention systems
• Virtual Private Networks (VPNs)
• Securing the cloud
• Content security
• Endpoint protection and detection

Sample Content

Sample Pages

Download the sample pages (includes Chapter 3)

Table of Contents

Introduction xxv
Chapter 1 Cybersecurity Fundamentals 2
    “Do I Know This Already?” Quiz 3
    Foundation Topics 6
    Introduction to Cybersecurity 6
    Defining What Are Threats, Vulnerabilities, and Exploits 8
    Common Software and Hardware Vulnerabilities 30
    Confidentiality, Integrity, and Availability 40
    Cloud Security Threats 47
    IoT Security Threats 51
    An Introduction to Digital Forensics and Incident Response 55
    Summary 74
    Exam Preparation Tasks 74
    Review All Key Topics 74
    Define Key Terms 76
    Review Questions 76
Chapter 2 Cryptography 78
    “Do I Know This Already?” Quiz 78
    Foundation Topics 80
    Introduction to Cryptography 80
    Fundamentals of PKI 93
    Exam Preparation Tasks 102
    Review All Key Topics 102
    Define Key Terms 103
    Review Questions 103
Chapter 3 Software-Defined Networking Security and Network Programmability 106
    “Do I Know This Already?” Quiz 106
    Foundation Topics 108
    Introduction to Software-Defined Networking 108
    Introduction to Network Programmability 132
    Exam Preparation Tasks 146
    Review All Key Topics 146
    Define Key Terms 147
    Review Questions 147
Chapter 4 Authentication, Authorization, Accounting (AAA) and Identity Management 150
    “Do I Know This Already?” Quiz 151
    Foundation Topics 154
    Introduction to Authentication, Authorization, and Accounting 154
    Authentication 155
    Authorization 167
    Accounting 169
    Infrastructure Access Controls 170
    AAA Protocols 172
    Cisco Identity Services Engine (ISE) 181
    Configuring TACACS+ Access 196
    Configuring RADIUS Authentication 202
    Additional Cisco ISE Design Tips 211
    Exam Preparation Tasks 214
    Review All Key Topics 214
    Define Key Terms 216
    Review Questions 216
Chapter 5 Network Visibility and Segmentation 220
    “Do I Know This Already?” Quiz 221
    Foundation Topics 224
    Introduction to Network Visibility 224
    NetFlow 225
    IP Flow Information Export (IPFIX) 237
    NetFlow Deployment Scenarios 242
    Cisco Stealthwatch 250
    Cisco Cognitive Threat Analytics (CTA) and Encrypted Traffic Analytics (ETA) 262
    NetFlow Collection Considerations and Best Practices 268
    Configuring NetFlow in Cisco IOS and Cisco IOS-XE 269
    Configuring NetFlow in NX-OS 283
    Introduction to Network Segmentation 285
    Micro-Segmentation with Cisco ACI 289
    Segmentation with Cisco ISE 290
    Exam Preparation Tasks 301
    Review All Key Topics 301
    Define Key Terms 302
    Review Questions 302
Chapter 6 Infrastructure Security 306
    “Do I Know This Already?” Quiz 307
    Foundation Topics 310
    Securing Layer 2 Technologies 310
    Common Layer 2 Threats and How to Mitigate Them 322
    Network Foundation Protection 332
    Understanding and Securing the Management Plane 334
    Understanding the Control Plane 336
    Understanding and Securing the Data Plane 337
    Securing Management Traffic 338
    Implementing Logging Features 362
    Configuring NTP 363
    Securing the Network Infrastructure Device Image and Configuration Files 364
    Securing the Data Plane in IPv6 365
    Securing Routing Protocols and the Control Plane 379
    Exam Preparation Tasks 387
    Review All Key Topics 387
    Define Key Terms 389
    Review Questions 389
Chapter 7 Cisco Next-Generation Firewalls and Cisco Next-Generation Intrusion Prevention Systems 392
    “Do I Know This Already?” Quiz 392
    Foundation Topics 395
    Introduction to Cisco Next-Generation Firewalls (NGFW) and
    Comparing Network Security Solutions That Provide Firewall Capabilities 411
    Deployment Modes of Network Security Solutions and Architectures That
    High Availability and Clustering 423
    Implementing Access Control 427
    Cisco Firepower Intrusion Policies 446
    Variables 449
    Platform Settings Policy 450
    Cisco NGIPS Preprocessors 450
    Cisco Advanced Malware Protection (AMP) 452
    Security Intelligence, Security Updates, and Keeping Firepower Software Up to Date 457
    Exam Preparation Tasks 458
    Review All Key Topics 458
    Define Key Terms 460
    Review Questions 460
Chapter 8 Virtual Private Networks (VPNs) 464
    “Do I Know This Already?” Quiz 464
    Foundation Topics 467
    Virtual Private Network (VPN) Fundamentals 467
    Deploying and Configuring Site-to-Site VPNs in Cisco Routers 479
    Configuring Site-to-Site VPNs in Cisco ASA Firewalls 502
    Configuring Remote Access VPNs in the Cisco ASA 511
    Configuring Clientless Remote Access SSL VPNs in the Cisco ASA 514
    Configuring Client-Based Remote-Access SSL VPNs in the Cisco ASA 525
    Configuring Remote Access VPNs in FTD 530
    Configuring Site-to-Site VPNs in FTD 541
    Exam Preparation Tasks 543
    Review All Key Topics 543
    Define Key Terms 544
    Review Questions 544
Chapter 9 Securing the Cloud 548
    “Do I Know This Already?” Quiz 549
    Foundation Topics 551
    What Is Cloud and What Are the Cloud Service Models? 551
    DevOps, Continuous Integration (CI), Continuous Delivery (CD), and
    Describing the Customer vs. Provider Security Responsibility for the Different Cloud Service Models 573
    Cisco Umbrella 577
    Cisco Email Security in the Cloud 582
    Cisco Cloudlock 584
    Stealthwatch Cloud 590
    AppDynamics Cloud Monitoring 590
    Cisco Tetration 593
    Exam Preparation Tasks 596
    Review All Key Topics 596
    Define Key Terms 597
    Review Questions 598
Chapter 10 Content Security 600
    “Do I Know This Already?” Quiz 600
    Foundation Topics 603
    Content Security Fundamentals 603
    Cisco WSA 604
    Cisco ESA 619
    Cisco Content Security Management Appliance (SMA) 624
    Exam Preparation Tasks 629
    Review All Key Topics 629
    Define Key Terms 630
    Review Questions 630
Chapter 11 Endpoint Protection and Detection 634
    “Do I Know This Already?” Quiz 634
    Foundation Topics 636
    Introduction to Endpoint Protection and Detection 636
    Cisco AMP for Endpoints 638
    Cisco Threat Response 654
    Exam Preparation Tasks 655
    Review All Key Topics 655
    Define Key Terms 655
    Review Questions 656
Chapter 12 Final Preparation 658
    Hands-on Activities 658
    Suggested Plan for Final Review and Study 658
    Summary 659
Glossary of Key Terms 660
Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&A Sections 678
Appendix B CCNP Security Core SCOR (350-701) Exam Updates 686

Online Element
Appendix C Study Planner

9780135971970, TOC, 3/18/2020

Updates

Errata

We've made every effort to ensure the accuracy of this book and its companion content. Any errors that have been confirmed since this book was published can be downloaded below.

Download the errata (54 KB .doc)

Submit Errata