Choose Cisco SCOR 350-701 Course in Malaysia

Overview of Threats in On-Premises and Cloud Settings

• On-Premises Threats: These include viruses, trojans, denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks, phishing schemes, rootkits, man-in-the-middle attacks, SQL injection, cross-site scripting, and various types of malware.

• Cloud Threats: Key concerns involve data breaches, insecure APIs, DoS/DDoS attacks, and compromised user credentials.

Common Security Vulnerabilities

• Examine vulnerabilities like software bugs, weak or hardcoded passwords, SQL injection, lack of encryption, buffer overflows, path traversal issues, and cross-site scripting or forgery.

Functions of Cryptographic Components

• Discuss cryptographic elements such as hashing, encryption, Public Key Infrastructure (PKI), Secure Sockets Layer (SSL), Internet Protocol Security (IPsec), NAT Traversal for IPv4 in IPsec, and both pre-shared key and certificate-based authentication.

VPN Deployment Types

• Compare site-to-site and remote access VPNs, including options like Virtual Tunnel Interface (sVTI), IPsec, Cryptomap, Dynamic Multipoint VPN (DMVPN), and Flexible VPN (FLEXVPN), along with high availability considerations and Cisco AnyConnect.

Security Intelligence Management

• Describe the processes of authoring, sharing, and utilizing security intelligence.

Endpoint Protection Against Phishing and Social Engineering

• Discuss how endpoints play a crucial role in safeguarding users from phishing and social engineering attacks.

SDN Architecture APIs

• Explain the functions of North Bound and South Bound APIs in Software-Defined Networking (SDN).

DNAC APIs Utilization

• Clarify how DNAC APIs facilitate network provisioning, optimization, monitoring, and troubleshooting.

Python Scripting for API Calls

• Interpret basic Python scripts used to interact with Cisco security appliance APIs.

Intrusion Prevention and Firewall Solutions

• Compare various network security solutions that offer intrusion prevention and firewall capabilities.

Deployment Models for Network Security

• Describe different deployment architectures for network security solutions that incorporate intrusion prevention and firewall functionalities.

NetFlow and Flexible NetFlow

• Outline the components, features, and advantages of NetFlow and Flexible NetFlow records.

Configuring Network Infrastructure Security

• Implement and verify security methods for routers, switches, and wireless networks, covering Layer 2 techniques like VLAN segmentation, port security, DHCP snooping, Dynamic ARP inspection, storm control, Private VLANs, and defenses against various attacks (e.g., MAC, ARP, VLAN hopping).

Device Hardening Techniques

• Focus on securing network infrastructure devices across the control plane, data plane, management plane, and routing protocol security.

Policy Implementation for Security

• Set up segmentation, access control policies, Application Visibility and Control (AVC), URL filtering, and malware defenses.

Management Options for Security Solutions

• Discuss management options for intrusion prevention and perimeter security, addressing single vs. multi-device management, in-band vs. out-of-band configurations, and associated security risks.

Authentication, Authorization, and Accounting (AAA)

• Configure AAA for device and network access, including TACACS+, RADIUS, accounting, and dynamic ACLs.

Secure Network Management Configuration

• Establish secure management protocols for perimeter security and infrastructure devices, using SNMPv3, authentication, encryption, and secure logging.

VPN Configuration and Verification

• Set up and verify both site-to-site and remote access VPNs, using Cisco routers and the AnyConnect client, including debug commands for IPsec tunnel monitoring and troubleshooting.

Cloud Environment Security Solutions

• Identify security solutions suitable for different cloud models: public, private, hybrid, and community clouds, and cloud service types (SaaS, PaaS, IaaS as defined in NIST 800-145).

Shared Security Responsibilities

• Compare the security responsibilities of customers and providers across various cloud service models, including aspects like patch management and security assessments.

DevSecOps Concept

• Describe the DevSecOps framework, focusing on CI/CD pipelines, container orchestration, and security measures.

Application and Data Security in the Cloud

• Implement strategies for securing applications and data within cloud environments.

Security Capabilities and Policy Management

• Identify the necessary security capabilities, deployment models, and policy management techniques for cloud security.

Cloud Logging and Monitoring

• Configure methodologies for effective logging and monitoring in cloud environments.

Application and Workload Security

• Discuss key concepts surrounding the security of applications and workloads in the cloud.

Traffic Redirection and Capture

• Implement techniques for redirecting and capturing traffic.

Web Proxy Authentication

• Explain the role of web proxies in user identity authentication, including transparent identification methods.

Comparative Analysis of Email and Web Security Solutions

• Compare local and cloud-based solutions for email and web security (e.g., ESA, CES, WSA) in terms of features and benefits.

Email and Web Security Deployment

• Configure and validate deployment strategies for email and web security to protect both on-premises and remote users.

Email Security Features Configuration

• Implement security features for email, including spam filtering, anti-malware protection, data loss prevention (DLP), blacklisting, and email encryption.

Internet Gateway Security

• Set up and verify secure internet gateway features such as URL filtering, malware scanning, and TLS decryption.

Cisco Umbrella Overview

• Describe the components and advantages of Cisco Umbrella in content security.

Web Security Controls on Cisco Umbrella

• Configure and verify web security settings on Cisco Umbrella, including identity management and reporting functionalities.

Comparison of EPP and EDR Solutions

• Contrast Endpoint Protection Platforms (EPP) with Endpoint Detection and Response (EDR) solutions.

Understanding Antimalware and Security Measures

• Explain concepts such as antimalware, retrospective security, Indications of Compromise (IOC), antivirus solutions, dynamic file analysis, and endpoint telemetry.

Outbreak Control Measures

• Configure and validate outbreak control procedures and quarantines to minimize infections.

Justifying Endpoint Security

• Discuss the rationale for implementing endpoint-based security measures.

Value of Endpoint Device Management

• Highlight the importance of endpoint management and asset inventory, such as Mobile Device Management (MDM).

Multifactor Authentication (MFA)

• Describe the significance of a multifactor authentication strategy for enhancing security.

Endpoint Posture Assessment Solutions

• Explain the role of endpoint posture assessment in maintaining security.

Importance of Endpoint Patching

• Discuss the necessity of a strategic approach to endpoint patching.

Identity Management and Secure Access

• Describe concepts related to identity management, including guest services, profiling, posture assessment, and Bring Your Own Device (BYOD) policies.

Network Access Device Configuration

• Configure and validate functionality for network access devices such as 802.1X, MAC Authentication Bypass (MAB), and Web Authentication.

Change of Authorization (CoA)

• Explain the concept and benefits of Change of Authorization in network access.

Device Compliance and Application Control

• Discuss the advantages of maintaining device compliance and controlling application access.

Exfiltration Techniques

• Describe methods used for data exfiltration, such as DNS tunneling and various protocol exploitations.

Benefits of Network Telemetry

• Outline the benefits associated with implementing network telemetry solutions.

Cisco Security Products Overview

• Describe the components and advantages of various Cisco security products, including:

  • Cisco Stealthwatch

  • Cisco Stealthwatch Cloud

  • Cisco pxGrid

  • Cisco Umbrella Investigate

  • Cisco Cognitive Threat Analytics

  • Cisco Encrypted Traffic Analytics

  • Cisco AnyConnect Network Visibility Module (NVM)