CCNP Security Core SCOR (350-701) — Implementing and Operating Cisco Security Core Technologies

Cisco SCOR (Implementing and Operating Cisco Security Core Technologies, 350-701) ist Core-Exam für CCNP Security Track UND CCIE Security qualifying Exam. Themen: 1. Security Concepts (25%) — Common Threats (Malware-Typen, Phishing, DDoS, Supply Chain Attacks, Insider Threats), Common Vulnerabilities (OWASP Top 10 für Web, CVE/CVSS-Bewertung), Security Methodologies (Defense-in-Depth, Zero Trust nach NIST SP 800-207), Cryptography Concepts (Symmetric/Asymmetric, Hashing, PKI, TLS/SSL, IPsec). Cisco SAFE Architecture-Modell, IETF Security-RFCs. 2. Network Security (20%) — Cisco ASA Firewall (Klassische Cisco-Firewall, NAT, ACLs, Routing), Cisco Firepower NGFW Next-Gen Firewall (basiert auf Sourcefire, mit Snort-Engine für IDS/IPS, Application Visibility and Control AVC, URL-Filtering, SSL-Inspection mit Decryption, Advanced Malware Protection AMP, FlexConfig für Custom Configs). Cisco FMC Firepower Management Center vs. FDM Firepower Device Manager. Cisco Secure Firewall (rebranded Firepower seit 2021). Network Visibility mit NetFlow, Cisco Stealthwatch (Secure Network Analytics für Network Behavior Analysis und Encrypted Traffic Analytics ETA). 3. Securing the Cloud (15%) — Cisco Cloud Security Solutions (Cisco Umbrella als DNS-Layer Security, Cisco Secure Access als SASE-Lösung mit ZTNA Zero Trust Network Access ehemals Cisco Cloudlock und Duo), Cisco Cloudlock für CASB, Cisco AppDynamics für Application Performance Monitoring mit Security-Context. AWS/Azure/GCP Cloud-Security-Best-Practices, Cisco-Lösungen für Cloud (Cisco Secure Firewall in Cloud, Cisco Multicloud Defense). 4. Content Security (10%) — Cisco Email Security (Cisco Secure Email Appliance ehemals ESA, Cisco Secure Email Cloud Gateway), Anti-Spam, Anti-Phishing, Outbreak Filters, DLP für E-Mail. Cisco Web Security (Cisco Secure Web Appliance ehemals WSA, Cisco Umbrella für DNS-Layer und Secure Web Gateway). 5. Endpoint Protection (15%) — Cisco Secure Endpoint (ehemals AMP for Endpoints, EDR Endpoint Detection and Response mit File Reputation, File Trajectory, Retrospective Security), Cisco Secure Endpoint vs. Cisco AnyConnect Secure Mobility Client für Posture und VPN, Cisco Identity Services Engine ISE für Network Access Control (NAC) und 802.1X. Mobile Device Management MDM mit Cisco Meraki Systems Manager. 6. Secure Network Access, Visibility, and Enforcement (15%) — Cisco ISE für 802.1X-basiertes Wired/Wireless NAC, Profiling, Posture, Guest Access, BYOD-Provisioning. Cisco TrustSec für SGT Security Group Tags und SGACL Security Group Access Control Lists. Cisco Pxgrid für Cross-Product-Integration. Examen 350-701: 120 Min, ~110 Fragen, Pass ~825/1000.