CCNP Security - Concentration: SDSI 300- 745

Select the security approaches to protect against threats

• Endpoint and client devices (on-network, off-network, and remote)
• Identity such as MFA, passwordless, continuous trust, and identity intelligence
• Email (phishing, ransomware, business email compromise, malware, and spoofing)

Modify the security architecture to address technical requirements

• Hybrid workers
• IoT
• SaaS
• Applications across data center and multi-cloud
• Select a VPN and tunneling solution such as SD-WAN, IPsec, MPLS, GRE, DMVPN, and public cloud tunnel options based on business and technical requirements
• Select the approach to secure the infrastructure management and control planes
• Select the firewall feature or architecture such as traditional firewall, Nextgen firewall,Web Application Firewall, IPS/IDS, distributed firewall, eBPF, and host-based firewallgiven business and technical requirements

• Select the security solution such as firewalls, SSL offloading, SSL decryption, DLP, and endpoint based on application and flow data, to protect an application
• Select the design for cloud-native applications, microservices, containers, and serverless architectures to ensure segmentation/microsegmentation
• Describe the design policies to address the impacts of emerging technologies such as generative AI, machine learning, and quantum computing

• Describe how the SOC leverages incident handling and incident response tools
• Modify a design to mitigate risk 2024 Cisco Systems, Inc. This document is Cisco Public. Page 2 Cisco Confidential
• Modify a security design following an incident
• Describe the use of frameworks such as MITRE CAPEC, NIST SP 800-37, and SAFE in the lifecycle of a security design
• Match the regulatory and industry compliance document to a given business or technical scenario

• Describe the functions, uses, and role of AI in securing network infrastructure
• Select the feature or element required to support automated security
• architecture/infrastructure such as API tooling, Infrastructure as Code, monitoring,container scanning, security telemetry, alerting, and SOAR
• Select the next step in workflows and pipelines to be implemented by DevSecOps engineers to minimize risk from automated deployments