book

CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition

Name: CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition
Author: Omar Santos
ISBN: 9780138221287

by Omar Santos

December 2023

Intermediate to advanced

832 pages

25h 46m

English

Cisco Press

Read now

Unlock full access

Cover Page
About This eBook
Title Page
Copyright Page
Credits
About the Author
About the Technical Reviewer
Dedication
Acknowledgments
Contents at a Glance

Contents
Introduction
The CCNP Security CertificationThe CCIE Security CertificationThe Exam Objectives (Domains)Steps to Pass the SCOR ExamFacts About the ExamThe Companion Website for Online Content Review
Chapter 1. Cybersecurity Fundamentals
“Do I Know This Already?” QuizFoundation TopicsIntroduction to CybersecurityDefining What Are Threats, Vulnerabilities, and ExploitsCommon Software and Hardware VulnerabilitiesConfidentiality, Integrity, and AvailabilityCloud Security ThreatsIoT Security ThreatsAn Introduction to Digital Forensics and Incident ResponseSummaryExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 2. Cryptography
“Do I Know This Already?” QuizFoundation TopicsIntroduction to CryptographyFundamentals of PKIExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 3. Software-Defined Networking Security and Network Programmability
“Do I Know This Already?” QuizFoundation TopicsSoftware-Defined Networking (SDN) and SDN SecurityIntroduction to Network ProgrammabilityExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 4. Authentication, Authorization, Accounting (AAA) and Identity Management
“Do I Know This Already?” QuizFoundation TopicsIntroduction to Authentication, Authorization, and AccountingAuthenticationAuthorizationAccountingInfrastructure Access ControlsAAA ProtocolsCisco Identity Services Engine (ISE)Configuring TACACS+ AccessConfiguring RADIUS AuthenticationAdditional Cisco ISE Design TipsExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 5. Network Visibility and Segmentation
“Do I Know This Already?” QuizFoundation TopicsIntroduction to Network VisibilityNetFlowIP Flow Information Export (IPFIX)NetFlow Deployment ScenariosCisco Secure Network Analytics and Cisco Secure Cloud AnalyticsCisco Cognitive Intelligence and Cisco Encrypted Traffic Analytics (ETA)NetFlow Collection Considerations and Best PracticesConfiguring NetFlow in Cisco IOS and Cisco IOS-XEConfiguring NetFlow in NX-OSIntroduction to Network SegmentationMicro-Segmentation with Cisco ACISegmentation with Cisco ISEExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 6. Infrastructure Security
“Do I Know This Already?” QuizFoundation TopicsSecuring Layer 2 TechnologiesCommon Layer 2 Threats and How to Mitigate ThemNetwork Foundation ProtectionUnderstanding and Securing the Management PlaneUnderstanding the Control PlaneUnderstanding and Securing the Data PlaneSecuring Management TrafficImplementing Logging FeaturesConfiguring NTPSecuring the Network Infrastructure Device Image and Configuration FilesSecuring the Data Plane in IPv6Securing Routing Protocols and the Control PlaneExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 7. Cisco Secure Firewall
“Do I Know This Already?” QuizFoundation TopicsIntroduction to Cisco Secure FirewallComparing Network Security Solutions That Provide Firewall CapabilitiesDeployment Modes of Network Security Solutions and Architectures That Provide Firewall CapabilitiesHigh Availability and ClusteringImplementing Access ControlCisco Firepower Intrusion PoliciesCisco Secure Malware DefenseSecurity Intelligence, Security Updates, and Keeping Firepower Software Up to DateExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 8. Virtual Private Networks (VPNs)
“Do I Know This Already?” QuizFoundation TopicsVirtual Private Network (VPN) FundamentalsDeploying and Configuring Site-to-Site VPNs in Cisco RoutersConfiguring Site-to-Site VPNs in Cisco ASA FirewallsConfiguring Remote-Access VPNs in the Cisco ASAConfiguring Clientless Remote-Access SSL VPNs in the Cisco ASAConfiguring Client-Based Remote-Access SSL VPNs in the Cisco ASAConfiguring Remote-Access VPNs in Cisco Secure FirewallConfiguring Site-to-Site VPNs in the Cisco Secure FirewallCisco SD-WANExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 9. Securing the Cloud
“Do I Know This Already?” QuizFoundation TopicsWhat Is Cloud and What Are the Cloud Service Models?DevOps, Continuous Integration (CI), Continuous Delivery (CD), and DevSecOpsDescribing the Customer vs. Provider Security Responsibility for the Different Cloud Service ModelsCisco UmbrellaCisco Secure Email Threat DefenseCisco Attack Surface Management (Formerly Cisco Secure Cloud Insights)Cisco Secure Cloud AnalyticsAppDynamics Cloud MonitoringCisco Secure WorkloadCisco XDRExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 10. Content Security
“Do I Know This Already?” QuizFoundation TopicsContent Security FundamentalsCisco Secure Web ApplianceCisco Secure EmailCisco Content Security Management Appliance (SMA)Exam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 11. Endpoint Protection and Detection
“Do I Know This Already?” QuizFoundation TopicsIntroduction to Endpoint Protection and DetectionCisco Secure EndpointCisco Threat ResponseExam Preparation TasksReview All Key TopicsDefine Key TermsReview Questions
Chapter 12. Final Preparation
Hands-on ActivitiesSuggested Plan for Final Review and StudySummary
Chapter 13. CCNP and CCIE Security Core SCOR (350-701) Exam Updates
The Purpose of This ChapterNews about the Next Exam ReleaseUpdated Technical Content
Appendix A. Answers to the “Do I Know This Already?” Quizzes and Q&A Sections
Answers to the “Do I Know This Already?” QuizzesAnswers to the Q&A Sections
Glossary
Index
Appendix B. Study Planner
Where are the companion content files? - Register
Code Snippets

Content preview from CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition

Index

Symbols

3DES (Triple Digital Encryption Standard), 84, 86, 93, 496
5–9s, 46
6LoWPAN (Low Power Wireless Personal Area Networks), 56
100-500 status code messages, 139
802.1X, 198, 334
- 802.1AB, 338–339
- 802.1D, 328–332
- 802.1Q, 323–326
- 802.1w, 332
- configuration, 213–222
- monitor mode, 306
- RADIUS, 213
- roles in, 188–190

A

AAA (authentication, authorization, and accounting), 104, 346
- 802.1X. See 802.1X
- AAA method lists, 358, 364–369
- access control. See access control
- accounting, 104, 179
- authentication. See authentication
- authorization. See authorization
- Cisco Identity Services Engine. See Cisco ISE (Identity Services Engine)
- Cisco pxGrid (Platform Exchange Grid), 193–195
- Cisco TrustSec, 201–203, 306, 310–312
- Diameter, 186–188
- firewalls. ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide, 2nd Edition

Publisher Resources

ISBN: 9780138221287

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition

by Omar Santos