CCNP and CCIE Security Core SCOR 350-701 Exam Cram

Joseph Mlodzianowski is a CCIE, CISSP, information security aficionado, and adventurer; he started multiple events and villages at RSA Conference, DEF CON, and Black Hat, among others, including founding the Red Team Village. He has been in the information technology security field for more than 25 years working in cybersecurity, infrastructure, networking, systems, design, offense, and defense. Joseph is currently a cybersecurity architect for Cisco Managed and Intelligence Services. He spent more than 12 years at the Department of Defense as an operator, principal cyber engineer, and SME designing and deploying complex technologies in support of missions around the world. He has consulted, investigated, and provided support for multiple federal agencies during the past 15 years. Joseph continues to contribute to content, reviews, and editing in the certification testing and curriculum process. Joseph spent almost 15 years in the energy sector, supporting refineries, pipelines, and chemical plants, specializing in ICS/SCADA industrial control networks, and building data centers. Joseph holds a broad range of certifications, including the Cisco CCIE, CNE, CSNA, CNSS-4012, CISSP, ITILv4, MCSE, NSA IAM and IEM, OIAC1180, FEMA IS-00317, Aruba ACMA, First Responder, Hazmat Certified, Member of Bexar County Sheriff’s Office CERT, and Certified Hacking Investigator. He also is a founding contributor to the CyManII (Cybersecurity Manufacturing Innovation Institute) Supply Chain. He is a member of Messaging Malware Mobile Anti-Abuse Working Group (M3aawg) and founder of the Texas Cyber Summit, a nonprofit. He believes in giving back to the community and supporting nonprofits. More information on Joseph and his training classes can be found at CyberLearningPath.org.  Eduardo (Eddie) Mendonca is a 23-year Cisco veteran whose current role is cybersecurity technical solutions architect in the Cisco security channel team. Before joining the security channel team, Eddie served as a technical leader on the Cisco Identity Services Engine (ISE) infrastructure development team. Eddie authored several infrastructure features in ISE, including the installation framework, upgrade and patching framework, OS layer IPv6 support, NIC Bonding, Secure Boot, and RootPatch kit. Eddie holds various technical certifications, including CISSP and Cisco DevNet. He also holds U.S. Patent US8250630: Detecting Unauthorized Computer Access. Eddie holds a bachelor’s degree in computer science from Fresno State University and is based out of Clovis, California.  Nicholas Kelly has worked for more than 25 years in the cybersecurity industry. He has worked in the private sector, in diplomatic security for the U.S. Department of State, and in volunteer capacity. He currently leads a team of Security Architects at Cisco, whose mission is to provide technical enablement to partners and customers. He is the author of the Leon “Catwalk” Caliber cyberpunk noir series of novelsand comics and hosts several podcasts. Nick works alongside the Innocent Lives Foundation, a non-profit, non-vigilante organization that identifies child predators and helps to bring them to justice. He resides in Virginia with his wife, son, and rotating roster of rescued fur babies.

• Introduction. . . . . . . . . . . . xviiiCHAPTER 1: Security Concepts.. . . . . . . . . . . 1Explain Common Threats Against On-Premises and Cloud Environments.. . . . . . . . . 3Compare Common Security Vulnerabilities.. . . . . 19Describe Functions of the Cryptography Components. . . . 25Compare Site-to-Site VPN and Remote Access VPN Deployment Types.. . . . . . . . . 31Describe Security Intelligence Authoring, Sharing, and Consumption.. 38Explain the Role of the Endpoint in Protecting Humans from Phishing and Social Engineering Attacks.. . . . . . 41Explain Northbound and Southbound APIs in the SDN Architecture.. 44Explain DNAC APIs for Network Provisioning, Optimization, Monitoring, and Troubleshooting.. . . . . . . 48Interpret Basic Python Scripts Used to Call Cisco Security Appliance APIs.. . . . . . . . . . 51What Next?.. . . . . . . . . . . 56CHAPTER 2: Network Security.. . . . . . . . . . . 57Compare Network Security Solutions and Provide Intrusion Prevention and Firewall Capabilities.. . . . . . 60Describe Deployment Models of Network Security Solutions and Architectures That ProvideIntrusion Prevention and Firewall Capabilities.. . . . . . . . . 65Describe the Components, Capabilities, and Benefits of NetFlow and Flexible NetFlow Records.. . . . . . . . 70Traditional NetFlow vs. Flexible NetFlow.. . . . . 74Configure and Verify Network Infrastructure Security Methods (Router, Switch, and Wireless).. . . . . . . 77Implement Segmentation, Access Control Policies, AVC, URL  Filtering, and Malware Protection. . . . . . . 89Implement Management Options for Network Security Solutions.. . 93Configure AAA for Device and Network Access.. . . . . 97Configure Secure Network Management of Perimeter Security an Infrastructure Devices.. . . . . . . . . 101Configure and Verify Site-to-Site VPN and Remote Access VPN.. . 106What Next?.. . . . . . . . . . . 119CHAPTER 3: Securing the Cloud.. . . . . . . . . . 121Identify Security Solutions for Cloud Environments.. . . . 122Compare Security Responsibilities for the Different Cloud Service Models.. . . . . . . . . . 129Describe the Concepts of DevSecOps (CI/CD Pipeline), Container Orchestration, and SecureSoftware Development.. . . . 132Implementing Application Security.. . . . . . . 136Identify Security Capabilities, Deployment Models, and Policy Management to Secure the Cloud.. . . . . . . 142Configure Cloud Logging and Monitoring. . . . . . 144Application Security Concepts.. . . . . . . . 146What Next?.. . . . . . . . . . . 150CHAPTER 4: Content Security.. . . . . . . . . . . 151Web Proxy Fundamentals. . . . . . . . . 158Web Proxy Identity and Authentication.. . . . . . 167Cisco Secure Web Appliance Identification and Authentication. 167Content Security Overview.. . . . . . . . 171Deploying Cisco Secure Web Appliance and Secure Email Gateway.. 184Secure Email Gateway Configuration.. . . . . . 190Cisco Secure Web Appliance Configuration.. . . . . 202Cisco Umbrella Overview.. . . . . . . . 209Cisco Umbrella Configuration.. . . . . . . . 216What Next?.. . . . . . . . . . . 222CHAPTER 5: Endpoint Protection and Detection.. . . . . . . . 223Endpoint Protection and Endpoint Detection and Response. . . 225Cisco Secure Endpoint.. . . . . . . . . 227Outbreak Control and Quarantines.. . . . . . . 230Justifications for Endpoint Security.. . . . . . . 239Endpoint Management and Asset Inventory Tools.. . . . 241Uses and Importance of a Multifactor Authentication Strategy.. . 246Endpoint Posture Assessments to Ensure Endpoint Security. . . 252Endpoint Patching Strategy.. . . . . . . . 254What Next?.. . . . . . . . . . . 256CHAPTER 6: Secure Network Access, Visibility, and Enforcement.. . . . 257Identity Management Concepts.. . . . . . . 262AAA Configuration.. . . . . . . . . . 275RADIUS Change of Authorization.. . . . . . . 292RADIUS CoA Use Cases. . . . . . . . 292Application Visibility and Control.. . . . . . . 297Data Exfiltration. . . . . . . . . . 300Network Telemetry.. . . . . . . . . . 305Cisco Security Solutions.. . . . . . . . . 308What Next?.. . . . . . . . . . . 319Cram Sheet. . . . . . . . . . . . 321  Online Element:Glossary  9780137282517, TOC, 2/19/24