Choose Cisco SCOR 350-701 Course in Malaysia

Module 1: Security Fundamentals

• Overview of Threats in On-Premises and Cloud Settings

  • On-Premises Threats: These include viruses, trojans, denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks, phishing schemes, rootkits, man-in-the-middle attacks, SQL injection, cross-site scripting, and various types of malware.

  • Cloud Threats: Key concerns involve data breaches, insecure APIs, DoS/DDoS attacks, and compromised user credentials.

• Common Security Vulnerabilities

  • Examine vulnerabilities like software bugs, weak or hardcoded passwords, SQL injection, lack of encryption, buffer overflows, path traversal issues, and cross-site scripting or forgery.

• Functions of Cryptographic Components

  • Discuss cryptographic elements such as hashing, encryption, Public Key Infrastructure (PKI), Secure Sockets Layer (SSL), Internet Protocol Security (IPsec), NAT Traversal for IPv4 in IPsec, and both pre-shared key and certificate-based authentication.

• VPN Deployment Types

  • Compare site-to-site and remote access VPNs, including options like Virtual Tunnel Interface (sVTI), IPsec, Cryptomap, Dynamic Multipoint VPN (DMVPN), and Flexible VPN (FLEXVPN), along with high availability considerations and Cisco AnyConnect.

• Security Intelligence Management

  • Describe the processes of authoring, sharing, and utilizing security intelligence.

• Endpoint Protection Against Phishing and Social Engineering

  • Discuss how endpoints play a crucial role in safeguarding users from phishing and social engineering attacks.

• SDN Architecture APIs

  • Explain the functions of North Bound and South Bound APIs in Software-Defined Networking (SDN).

• DNAC APIs Utilization

  • Clarify how DNAC APIs facilitate network provisioning, optimization, monitoring, and troubleshooting.

• Python Scripting for API Calls

  • Interpret basic Python scripts used to interact with Cisco security appliance APIs.

 

Module 2: Network Security Strategies

• Intrusion Prevention and Firewall Solutions

  • Compare various network security solutions that offer intrusion prevention and firewall capabilities.

• Deployment Models for Network Security

  • Describe different deployment architectures for network security solutions that incorporate intrusion prevention and firewall functionalities.

• NetFlow and Flexible NetFlow

  • Outline the components, features, and advantages of NetFlow and Flexible NetFlow records.

• Configuring Network Infrastructure Security

  • Implement and verify security methods for routers, switches, and wireless networks, covering Layer 2 techniques like VLAN segmentation, port security, DHCP snooping, Dynamic ARP inspection, storm control, Private VLANs, and defenses against various attacks (e.g., MAC, ARP, VLAN hopping).

• Device Hardening Techniques

  • Focus on securing network infrastructure devices across the control plane, data plane, management plane, and routing protocol security.

• Policy Implementation for Security

  • Set up segmentation, access control policies, Application Visibility and Control (AVC), URL filtering, and malware defenses.

• Management Options for Security Solutions

  • Discuss management options for intrusion prevention and perimeter security, addressing single vs. multi-device management, in-band vs. out-of-band configurations, and associated security risks.

• Authentication, Authorization, and Accounting (AAA)

  • Configure AAA for device and network access, including TACACS+, RADIUS, accounting, and dynamic ACLs.

• Secure Network Management Configuration

  • Establish secure management protocols for perimeter security and infrastructure devices, using SNMPv3, authentication, encryption, and secure logging.

• VPN Configuration and Verification

  • Set up and verify both site-to-site and remote access VPNs, using Cisco routers and the AnyConnect client, including debug commands for IPsec tunnel monitoring and troubleshooting.

 

Module 3: Cloud Security Measures

• Cloud Environment Security Solutions

  • Identify security solutions suitable for different cloud models: public, private, hybrid, and community clouds, and cloud service types (SaaS, PaaS, IaaS as defined in NIST 800-145).

• Shared Security Responsibilities

  • Compare the security responsibilities of customers and providers across various cloud service models, including aspects like patch management and security assessments.

• DevSecOps Concept

  • Describe the DevSecOps framework, focusing on CI/CD pipelines, container orchestration, and security measures.

• Application and Data Security in the Cloud

  • Implement strategies for securing applications and data within cloud environments.

• Security Capabilities and Policy Management

  • Identify the necessary security capabilities, deployment models, and policy management techniques for cloud security.

• Cloud Logging and Monitoring

  • Configure methodologies for effective logging and monitoring in cloud environments.

• Application and Workload Security

  • Discuss key concepts surrounding the security of applications and workloads in the cloud.

 

Module 4: Content Security Strategies

• Traffic Redirection and Capture

  • Implement techniques for redirecting and capturing traffic.

• Web Proxy Authentication

  • Explain the role of web proxies in user identity authentication, including transparent identification methods.

• Comparative Analysis of Email and Web Security Solutions

  • Compare local and cloud-based solutions for email and web security (e.g., ESA, CES, WSA) in terms of features and benefits.

• Email and Web Security Deployment

  • Configure and validate deployment strategies for email and web security to protect both on-premises and remote users.

• Email Security Features Configuration

  • Implement security features for email, including spam filtering, anti-malware protection, data loss prevention (DLP), blacklisting, and email encryption.

• Internet Gateway Security

  • Set up and verify secure internet gateway features such as URL filtering, malware scanning, and TLS decryption.

• Cisco Umbrella Overview

  • Describe the components and advantages of Cisco Umbrella in content security.

• Web Security Controls on Cisco Umbrella

  • Configure and verify web security settings on Cisco Umbrella, including identity management and reporting functionalities.

 

Module 5: Endpoint Protection and Detection

• Comparison of EPP and EDR Solutions

  • Contrast Endpoint Protection Platforms (EPP) with Endpoint Detection and Response (EDR) solutions.

• Understanding Antimalware and Security Measures

  • Explain concepts such as antimalware, retrospective security, Indications of Compromise (IOC), antivirus solutions, dynamic file analysis, and endpoint telemetry.

• Outbreak Control Measures

  • Configure and validate outbreak control procedures and quarantines to minimize infections.

• Justifying Endpoint Security

  • Discuss the rationale for implementing endpoint-based security measures.

• Value of Endpoint Device Management

  • Highlight the importance of endpoint management and asset inventory, such as Mobile Device Management (MDM).

• Multifactor Authentication (MFA)

  • Describe the significance of a multifactor authentication strategy for enhancing security.

• Endpoint Posture Assessment Solutions

  • Explain the role of endpoint posture assessment in maintaining security.

• Importance of Endpoint Patching

  • Discuss the necessity of a strategic approach to endpoint patching.

 

Module 6: Secure Network Access and Enforcement

• Identity Management and Secure Access

  • Describe concepts related to identity management, including guest services, profiling, posture assessment, and Bring Your Own Device (BYOD) policies.

• Network Access Device Configuration

  • Configure and validate functionality for network access devices such as 802.1X, MAC Authentication Bypass (MAB), and Web Authentication.

• Change of Authorization (CoA)

  • Explain the concept and benefits of Change of Authorization in network access.

• Device Compliance and Application Control

  • Discuss the advantages of maintaining device compliance and controlling application access.

• Exfiltration Techniques

  • Describe methods used for data exfiltration, such as DNS tunneling and various protocol exploitations.

• Benefits of Network Telemetry

  • Outline the benefits associated with implementing network telemetry solutions.

• Cisco Security Products Overview

  • Describe the components and advantages of various Cisco security products, including:

    • Cisco Stealthwatch

    • Cisco Stealthwatch Cloud

    • Cisco pxGrid

    • Cisco Umbrella Investigate

    • Cisco Cognitive Threat Analytics

    • Cisco Encrypted Traffic Analytics

    • Cisco AnyConnect Network Visibility Module (NVM)