CCNP Security Bundle

Exam information

Cisco Certified network professional security or CCNP security certification is designed specifically for cisco network security engineers responsible for security in routers, switches, networking devices and appliances. This certification track awards an engineer's skills in choosing, deploying, supporting and troubleshooting firewalls, VPNS, and IDS/IPS solutions in an enterprise-networking environment.

There are four required exams to pass CCNP Security track. You can choose between SECURE or SISAS exam; IPS v7.0 or SITCS exam; FIREWALL or SENSS exam; VPN Exam or SIMOS exam. You have to choose one exam in each category. However, SECURE, FIREWALL, and VPN exams are expiring on April 21, 2014. From April 22, 2014 onwards, you will be required to pass SISAS, IPS v7.0 or SITCS, SENSS and SIMOS exam. We are going to covers these five exams in this article.

300-208 - Implementing Cisco Secure Access Solutions (SISAS) validates network security engineer's knowledge of components and architecture of secure access by utilizing 802.1X and Cisco TrustSec. You will also be tested for Cisco Identity Services Engine (ISE) architecture, solution, and components as an overall network threat mitigation and endpoint control solutions. It also contains the fundamental concepts of bring your own device (BYOD) using posture and profiling services of ISE.

This exam covers following major topics:

1. Identity Management/Secure Access
2. Threat Defense
3. Troubleshooting, Monitoring and Reporting Tools
4. Threat Defense Architectures
5. Identity Management Architectures

This exam contains 65-75 questions to be completed in 90 minutes. Multiple-choice, multiple-option, drag and drop, mix and match and other type of questions will be asked during the exam. The passing score is 825 out of 1000.

642-627 - Implementing Cisco Intrusion prevention system v7.0 (IPS v7.0) exam is a requirement for CCSP, CCNP Security and Cisco IPS Specialist certifications. This exam validates your knowledge and skills in deploying Cisco IPS based security solutions. You should be able to reduce risk to the IT infrastructure and applications using Cisco IPS functions and provide detailed operations support for the Cisco IPS.

This exam covers the following major topics:

1. Pre-Production Design
2. Complex Support Operations
3. Advanced Troubleshooting

This exam contains 60-70 questions to be completed in 90 minutes. Multiple-choice, multiple-option, drag and drop, mix and match and other type of questions will be asked during the exam. The passing score is 825 out of 1000.

You can either attempt 642-627 or 300-207 SITCS exam.

300-207 - Implementing Cisco Threat Control Solutions (SITCS) tests a network security engineer's knowledge of advanced firewall architecture and configuration with the Cisco next-generation firewall, employing access and identity policies. It includes integration of intrusion prevention system (IPs) and context-aware firewall components along with web and email security solutions.

This exam covers the following major topics:

1. Content Security
2. Threat Defense
3. Devices GUIs and Secured CLI
4. Troubleshooting, Monitoring and Reporting Tools
5. Threat Defense Architectures
6. Content Security Architectures

This exam contains 65-75 questions to be completed in 90 minutes. Multiple-choice, multiple-option, drag and drop, mix and match and other type of questions will be asked during the exam. The passing score is 825 out of 1000.

300-206 - Implementing Cisco Edge Network Security Solutions (SENSS) exam tests your knowledge and skills to configure and implement security on Cisco network perimeter edge devices such as Cisco switch, router and ASA firewall. IT focuses on technologies used to reinforce security of a network perimeter such as Network address translation (NAT), ASA policy and application inspect and a zone-based firewall on cisco routers.

This exam covers the following major topics:

1. Threat Defense
2. Cisco Security Devices GUIs and Secured CLI Management
3. Management Services on Cisco Devices
4. Troubleshooting, Monitoring and Reporting Tools
5. Threat Defense Architectures
6. Security Components and Considerations

This exam contains 65-75 questions to be completed in 90 minutes. Multiple-choice, multiple-option, drag and drop, mix and match and other type of questions will be asked during the exam. The passing score is 825 out of 1000.

300-029 - Implementing Cisco Secure Mobility Solutions (SIMOS) exam tests a network security professional on the variety of Virtual Private Network (VPN) solutions that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms. This exam endorses an security professional's knowledge to properly implement highly secure remote communications through VPN technology, such as remote access SSL VPN and site-to-site VPN (DMVPN, FlexVPN).

This exam covers the following major topics:

1. Secure Communications
2. Troubleshooting, Monitoring and Reporting Tools
3. Secure Communications Architectures

This exam contains 65-75 questions to be completed in 90 minutes. Multiple-choice, multiple-option, drag and drop, mix and match and other type of questions will be asked during the exam. The passing score is 825 out of 1000.

CCNA Security certification or any CCIE certification acts as a prerequisite for CCNP Security.

CCNP security is a prestigious certification among all CCNP tracks. It is related to security and along with CSSP, it is considered the required exams for a security job. You will be able to thwart cyber attacks and understand the mechanisms of viruses, malwares, spywares and other malicious codes. Even U.S government regularly hires security professionals. The salary package is better than other CCNP tracks because security is a sensitive issue and it related to confidentiality and privacy.

Expert review

When I did CCNP Security, I never knew I'd get a job so early. I applied for a post of security engineer at a local IT company and got an interview call the next day. They hired me because I was a CCNP Security certified professional.

Lara Pulvar - Security Engineer - Entice Technologies Inc.