CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide

Omar Santos is a cybersecurity thought leader with a passion for driving industry-wide initiatives to enhance the security of critical infrastructures. Omar is the lead of the DEF CON Red Team Village, the chair of the Common Security Advisory Framework (CSAF) technical committee, and board member of the OASIS Open standards organization. Omar's collaborative efforts extend to numerous organizations, including the Forum of Incident Response and Security Teams (FIRST) and the Industry Consortium for Advancement of Security on the Internet (ICASI).  Omar is a renowned expert in ethical hacking, vulnerability research, incident response, and AI security. He employs his deep understanding of these disciplines to help organizations stay ahead of emerging threats. His dedication to cybersecurity has made a significant impact on businesses, academic institutions, law enforcement agencies, and other entities striving to bolster their security measures. Omar is currently leading several Artificial Intelligence (AI) security research efforts at the Cisco Security and Trust Organization (STO).  With over twenty books, video courses, white papers, and technical articles under his belt, Omar's expertise is widely recognized and respected. As a principal engineer at Cisco's Product Security Incident Response Team (PSIRT), Omar not only leads engineers and incident managers in investigating and resolving cybersecurity vulnerabilities, but also actively mentors the next generation of security professionals. You can follow Omar on Twitter @santosomar.

• Introduction xxxiChapter 1 Cybersecurity Fundamentals 2“Do I Know This Already?” Quiz 3Foundation Topics 6Introduction to Cybersecurity 6Defining What Are Threats, Vulnerabilities, and Exploits 8Common Software and Hardware Vulnerabilities 31Confidentiality, Integrity, and Availability 43Cloud Security Threats 50IoT Security Threats 54An Introduction to Digital Forensics and Incident Response 58Summary 76Exam Preparation Tasks 76Review All Key Topics 76Define Key Terms 78Review Questions 78Chapter 2 Cryptography 80“Do I Know This Already?” Quiz 80Foundation Topics 82Introduction to Cryptography 82Fundamentals of PKI 97Exam Preparation Tasks 106Review All Key Topics 106Define Key Terms 107Review Questions 107Chapter 3 Software-Defined Networking Security and Network Programmability 110“Do I Know This Already?” Quiz 110Foundation Topics 112Software-Defined Networking (SDN) and SDN Security 112Introduction to Network Programmability 136Exam Preparation Tasks 151Review All Key Topics 151Define Key Terms 152Review Questions 152Chapter 4 Authentication, Authorization, Accounting (AAA) and Identity Management 156“Do I Know This Already?” Quiz 157Foundation Topics 160Introduction to Authentication, Authorization, and Accounting 160Authentication 162Authorization 177Accounting 179Infrastructure Access Controls 179AAA Protocols 182Cisco Identity Services Engine (ISE) 192Configuring TACACS+ Access 207Configuring RADIUS Authentication 213Additional Cisco ISE Design Tips 222Exam Preparation Tasks 225Review All Key Topics 225Define Key Terms 226Review Questions 227Chapter 5 Network Visibility and Segmentation 232“Do I Know This Already?” Quiz 233Foundation Topics 236Introduction to Network Visibility 236NetFlow 237IP Flow Information Export (IPFIX) 249NetFlow Deployment Scenarios 255Cisco Secure Network Analytics and Cisco Secure Cloud Analytics 263Cisco Cognitive Intelligence and Cisco Encrypted Traffic Analytics (ETA) 274NetFlow Collection Considerations and Best Practices 279Configuring NetFlow in Cisco IOS and Cisco IOS-XE 280Configuring NetFlow in NX-OS 295Introduction to Network Segmentation 296Micro-Segmentation with Cisco ACI 301Segmentation with Cisco ISE 302Exam Preparation Tasks 312Review All Key Topics 312Define Key Terms 313Review Questions 314Chapter 6 Infrastructure Security 316“Do I Know This Already?” Quiz 317Foundation Topics 320Securing Layer 2 Technologies 320VLAN and Trunking Fundamentals 320Common Layer 2 Threats and How to Mitigate Them 333Network Foundation Protection 343Understanding and Securing the Management Plane 345Understanding the Control Plane 347Understanding and Securing the Data Plane 348Securing Management Traffic 350Implementing Logging Features 378Configuring NTP 379Securing the Network Infrastructure Device Image and Configuration Files 380Securing the Data Plane in IPv6 381Securing Routing Protocols and the Control Plane 395Exam Preparation Tasks 404Review All Key Topics 404Define Key Terms 405Review Questions 405Chapter 7 Cisco Secure Firewall 410“Do I Know This Already?” Quiz 410Foundation Topics 413Introduction to Cisco Secure Firewall 413Comparing Network Security Solutions That Provide Firewall Capabilities 435Deployment Modes of Network Security Solutions and Architectures That Provide Firewall Capabilities 437High Availability and Clustering 448Implementing Access Control 452Cisco Firepower Intrusion Policies 472Cisco Secure Malware Defense 478Security Intelligence, Security Updates, and Keeping Firepower Software Up to Date 483Exam Preparation Tasks 484Review All Key Topics 485Define Key Terms 486Review Questions 486Chapter 8 Virtual Private Networks (VPNs) 490“Do I Know This Already?” Quiz 490Foundation Topics 494Virtual Private Network (VPN) Fundamentals 494Deploying and Configuring Site-to-Site VPNs in Cisco Routers 506Configuring Site-to-Site VPNs in Cisco ASA Firewalls 528Configuring Remote-Access VPNs in the Cisco ASA 537Configuring Clientless Remote Access SSL VPNs in the Cisco ASA 540Configuring Client-Based Remote-Access SSL VPNs in the Cisco ASA 551Configuring Remote-Access VPNs in Cisco Secure Firewall 556Configuring Site-to-Site VPNs in the Cisco Secure Firewall 567Cisco SD-WAN 569Exam Preparation Tasks 573Review All Key Topics 573Define Key Terms 574Review Questions 575Chapter 9 Securing the Cloud 578“Do I Know This Already?” Quiz 579Foundation Topics 581What Is Cloud and What Are the Cloud Service Models? 581DevOps, Continuous Integration (CI), Continuous Delivery (CD), andDescribing the Customer vs. Provider Security Responsibility for the Different Cloud Service Models 605Cisco Umbrella 608Cisco Secure Email Threat Defense 614Cisco Attack Surface Management (Formerly Cisco Secure Cloud Insights) 616Cisco Secure Cloud Analytics 618AppDynamics Cloud Monitoring 619Cisco Secure Workload 622Cisco XDR 627Exam Preparation Tasks 632Review All Key Topics 633Define Key Terms 634Review Questions 634Chapter 10 Content Security 638“Do I Know This Already?” Quiz 638Foundation Topics 641Content Security Fundamentals 641Cisco Secure Web Appliance 642Cisco Secure Email 658Cisco Content Security Management Appliance (SMA) 662Exam Preparation Tasks 667Review All Key Topics 668Define Key Terms 668Review Questions 669Chapter 11 Endpoint Protection and Detection 672“Do I Know This Already?” Quiz 672Foundation Topics 674Introduction to Endpoint Protection and Detection 674Cisco Secure Endpoint 676Cisco Threat Response 693Exam Preparation Tasks 693Review All Key Topics 693Define Key Terms 694Review Questions 694Chapter 12 Final Preparation 696Hands-on Activities 696Suggested Plan for Final Review and Study 696Summary 697Chapter 13 CCNP and CCIE Security Core SCOR (350-701) Exam Updates 698The Purpose of This Chapter 698News about the Next Exam Release 700Updated Technical Content 700Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&AGlossary 714  Online ElementAppendix B Study Planner9780138221263, TOC, 10/2/23