CCNP Security Cisco Secure Firewall and Intrusion Prevention System

✍ Scribed by Nazmul Rajib

• Publisher: Cisco Press
• Year: 2022
• Tongue: English
• Leaves: 1222
• Category: Library

✦ Synopsis

Trust the best-selling Official Cert Guide series from Cisco Press to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam, and to excel in your day-to-day security work.

• Master the topics on the CCNP Security concentration exam that focuses on the Cisco Secure Firewall and IPS (formerly known as Cisco Firepower)
• Assess your knowledge with chapter-opening quizzes
• Review key concepts with exam preparation tasks

CCNP Security Cisco Secure Firewall and Intrusion Prevention System Official Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

CCNP Security Cisco Secure Firewall and Intrusion Prevention System Official Cert Guide specifically covers the objectives for the CCNP Security concentration exam that focuses on the Cisco Secure Firewall and IPS (formerly known as Cisco Firepower). Long-time Cisco security insider Nazmul Rajib shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

Well regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time. This official study guide helps you master the topics on the CCNP Security concentration exam that focuses on the Cisco Secure Firewall and IPS (formerly known as Cisco Firepower). Use it to deepen your knowledge of

• Configurations
• Integrations
• Deployments
• Management
• Troubleshooting, and more

✦ Table of Contents

Title Page
Copyright Page
Pearson’s Commitment to Diversity, Equity, and Inclusion
About the Author
About the Technical Reviewers
Dedications
Acknowledgments
Contents at a Glance
Reader Services
Contents
Command Syntax Conventions
Introduction
How This Book Is Organized
Learning Objectives of the Chapters
Figure Credits
Goals and Methods
Who Should Read This Book?
Strategies for Exam Preparation
The Companion Website for Online Content Review
How to Access the Pearson Test Prep (PTP) App
Part I: General Deployment
Chapter 1. Introduction to Cisco Secure Firewall and IPS
“Do I Know This Already?” Quiz
Foundation Topics
Evolution of Next-Generation Firewall
Cisco Secure Firewall Solutions
Product Evolution and Lifecycle
Software and Hardware Architecture
Scalability and Resiliency
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 2. Deployment of Secure Firewall Virtual
“Do I Know This Already?” Quiz
Foundation Topics
Cisco Secure Firewall on a Virtual Platform
Best Practices
Configuration
System Initialization and Validation
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 3. Licensing and Registration
Do I Know This Already?
Foundation Topics
Cisco Licensing Architecture
Cisco Secure Firewall Licenses
Validation of Licensing
Device Registration
Validation of Registration
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 4. Firewall Deployment in Routed Mode
“Do I Know This Already?” Quiz
Foundation Topics
Routed Mode Essentials
Best Practices for Routed Mode Configuration
Fulfilling Prerequisites
Configuration of the Routed Interface
Validation of Interface Configuration
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 5. Firewall Deployment in Transparent Mode
“Do I Know This Already?” Quiz
Foundation Topics
Transparent Mode Essentials
Best Practices for Transparent Mode Configuration
Fulfilling Prerequisites
Configuring Transparent Mode in a Layer 2 Network
Deploying a Threat Defense Between Layer 3 Networks
Integrated Routing and Bridging (IRB)
Summary
Exam Preparation Tasks
Review All Key Topics
Memory Tables and Lists
Define Key Terms
Chapter 6. IPS-Only Deployment in Inline Mode
“Do I Know This Already?” Quiz
Foundation Topics
Inline Mode Essentials
Best Practices for Inline Mode
Inline Mode Configuration
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Memory Tables and Lists
Define Key Terms
Chapter 7. Deployment in Detection-Only Mode
“Do I Know This Already?” Quiz
Foundation Topics
Detection-Only Mode Essentials
Best Practices for Detection-Only Deployment
Inline Tap Mode
Passive Interface Mode
Event Analysis in Detection-Only Mode
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Part II: Basic Security Operations
Chapter 8. Capturing Traffic for Advanced Analysis
“Do I Know This Already?” Quiz
Foundation Topics
Packet Capture Essentials
Best Practices for Capturing Traffic
Capturing of Packets Using Secure Firewall
Summary
Exam Preparation Tasks
Review All Key Topics
Memory Tables and Lists
Define Key Terms
Chapter 9. Network Discovery Policy
“Do I Know This Already?” Quiz
Foundation Topics
Network Discovery Essentials
Best Practices for Network Discovery
Fulfilling Prerequisites
Configurations
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 10. Access Control Policy
“Do I Know This Already?” Quiz
Foundation Topics
Access Control Policy Essentials
Best Practices for Access Control Policy
Access Control Policy Configuration
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 11. Prefilter Policy
“Do I Know This Already?” Quiz
Foundation Topics
Prefilter Policy Essentials
Best Practices for a Prefilter Policy
Enabling Bypass Through a Prefilter Policy
Establishing Trust Through an Access Control Policy
Verification
Managing Encapsulated Traffic Inspection
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 12. Security Intelligence
“Do I Know This Already?” Quiz
Foundation Topics
Security Intelligence Essentials
Best Practices for Security Intelligence
Fulfilling Prerequisites
Automatic Blocking Using Cisco Intelligence Feed
Instant Blocking Using Context Menu
Manual Blocking Using Custom List
Threat Intelligence Director
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 13. Domain Name System (DNS) Policy
“Do I Know This Already?” Quiz
Foundation Topics
DNS Policy Essentials
Best Practices for Blocking DNS Queries
Fulfilling Prerequisites
Configuring DNS Policy
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 14. URL Filtering
“Do I Know This Already?” Quiz
Foundation Topics
URL Filtering Essentials
Fulfilling Prerequisites
Best Practices for URL Filtering Configuration
Enabling URL Filtering
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memorye
Define Key Terms
Part III: Advanced Configurations
Chapter 15. Network Analysis and Intrusion Policies
“Do I Know This Already?” Quiz
Foundation Topics
Intrusion Prevention System Essentials
Best Practices for Intrusion Policy Deployment
Configuring a Network Analysis Policy
Configuring an Intrusion Policy
Policy Deployment
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 16. Malware and File Policy
“Do I Know This Already?” Quiz
Foundation Topics
File Policy Essentials
Best Practices for File Policy Configuration
Fulfilling Prerequisites
Configuring a File Policy
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 17. Network Address Translation (NAT)
“Do I Know This Already?” Quiz
Foundation Topics
NAT Essentials
Best Practices for NAT Deployment
Fulfilling Prerequisites
Configuring NAT
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 18. Traffic Decryption Policy
“Do I Know This Already?” Quiz
Foundation Topics
Traffic Decryption Essentials
Best Practices for Traffic Decryption
Configuring a Decryption Policy
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 19. Virtual Private Network (VPN)
“Do I Know This Already?” Quiz
Foundation Topics
VPN Essentials
IPsec Essentials
Site-to-Site VPN Deployment
Remote Access VPN Deployment
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 20. Quality of Service (QoS)
“Do I Know This Already?” Quiz
Foundation Topics
Quality of Service Essentials
Best Practices for Enabling QoS
Fulfilling Prerequisites
Configuring QoS Policy
Verification
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Chapter 21. System Logging (Syslog)
“Do I Know This Already?” Quiz
Foundation Topics
Secure Firewall Logging Essentials
Best Practices for Logging
Prerequisites
Sending Syslog from Threat Defense
Sending Syslog from Management Center
Troubleshooting Logs
Summary
Exam Preparation Tasks
Review All Key Topics
Complete Tables and Lists from Memory
Define Key Terms
Part IV: Conclusion
Chapter 22. Final Preparation
Getting Ready for the Exam
Exam Day
Practice Tests
Chapter-Ending Review Tools
Summary
Part V: Appendixes
Appendix A. Answers to the “Do I Know This Already?” Questions
Appendix B. CCNP Security Cisco Secure Firewall and Intrusion Prevention System Official Cert Guide Updates
Always Get the Latest at the Book’s Product Page
Technical Content
Glossary
Index
Appendix C. Memory Tables
Appendix D. Memory Tables Answer Key
Appendix E. Study Planner
Where are the companion content files? - Register
Inside Front Cover
Inside Back Cover
Code Snippets