Overview
The Cisco CCIE Security certification trains security professionals to manage and develop end-to-end secure networks by teaching them how to architect, engineer, implement, troubleshoot, and maintain the whole Cisco security technology and solution suite.
The programme will teach professionals how to defend systems and environments against modern security risks, vulnerabilities, and requirements by utilizing best industry practices.
To obtain the CCIE Security certification, a candidate must pass the following exam(s):
- 400-251 CCIE Security Written Exam
- CCIE Security Lab Exam Version 5.0
Overview of the Exam
Cisco network security products, solutions, and technologies such as next-generation intrusion prevention, next-generation firewalls, identity services, policy management, device hardening, and malware protection, as well as network functionality and security ideas and best practices, are discussed.
The unified test topics are used in the written exam, which encompass upcoming technologies such as cloud computing, network programmability (SDN), and the Internet of Things (IoT).
The first step is to take the written CCIE Security exam.
Before scheduling the lab exam, you must first complete a two-hour written qualifying exam covering network security concepts and some equipment instructions.
Step two is to take the CCIE Security exam.
The lab exam lasts eight hours and examines your ability to build up a secure network in a timed test scenario. The CCIE lab test must be taken for the first time within 18 months of passing the CCIE written exam. In order for their written exam to be legitimate, candidates who do not pass the lab exam must retake it within 12 months after their last successful try. If you fail the lab exam after passing the writing exam within three years, you must retake the written exam before attempting the lab exam again.
| Exam Name | CCIE Security Written Exam |
| Exam Code | 400-251 CCIE S |
| Exam Cost | $450 USD |
| Duration | 120 minutes |
| Total Questions | 90-110 |
| Passing Marks | Variable (750-850 / 1000 Approx.) |
| Exam Registration | PEARSON VUE |
CCIE Security certified professionals can work in positions such as,
- NETWORK ENGINEER
- NETWORK ENGINEER
- NETWORK ADMINISTRATOR
- NETWORK SECURITY ENGINEER
- NETWORK SECURITY ADMINISTRATOR
- NETWORK SECURITY SPECIALIST
For three years, the CCIE Security certification is valid.
Choose Your Preferred Learning Mode
1-TO-1 TRAINING
Customized schedule Learn at your dedicated hour Instant clarification of doubt Guaranteed to run
ONLINE TRAINING
Flexibility, Convenience & Time Saving More Effective Learning Cost Savings
CORPORATE TRAINING
Anytime – Across The Globe Hire A Trainer At Your Own Pace Customized Corporate Training
OUTLINE OF THE COURSE
- Describe, install, and troubleshoot the HA features on Cisco ASA and Cisco FirePOWER Threat Defense (FTD).
- Describe, implement, and troubleshoot the clustering and routing protocols on Cisco ASA and Cisco FTD.
- Describe, implement, and troubleshoot Cisco Firepower Management Center (FMC) and Cisco FTD deployment features.
- Define, Implement, and Troubleshoot Correlation and Remediation Rules on Cisco FMC
- Describe, install, and troubleshoot features of Next Generation Firewalls (NGFW).
- Defining, identifying, and mitigating common types of assaults
- Different AMP solutions are reviewed and contrasted, including public and private cloud deployment approaches.
- Detection, analysis, and mitigation of malware
- Describe the benefits of AMP Threat GRID threat intelligence.
- Capture and analyze packets with Wireshark, tcpdump, SPAN, and RSPAN.
- Explain, install, and debug web filtering, user identification, and Application Visibility and Control (AVC)
- Description, installation, and troubleshooting of ESA mail rules, DLP, email quarantines, and SenderBase.
- SMTP Authentication: Defining, Putting in Place, and Troubleshooting
- Describe the security benefits of using the OpenDNS solution.
- SMA for centralized content security management: Define, Implement, and Troubleshoot
- Explain the security benefits of utilizing Lancope.
- A comparison of cryptography and hash algorithms • A comparison and contrast of security protocols
- A description, implementation, and troubleshooting of clientless SSL VPN technologies on Cisco ASA and Cisco FTD utilizing DAP and smart tunnels
- Description, Implementation, and Troubleshooting of Site-to-Site VPN
- Description, implementation, and debugging of uplink and downlink MACsec (802.1AE)
- Describe, construct, and debug VPN high availability setups using Cisco ASA VPN clustering and dual-hub DMVPNs.
- Explaining the functioning of cryptographic protocols and the security implications of these protocols
- Explain how Cisco VSG is used to protect virtual environments.
- Describe the security benefits of data center segmentation utilizing ACI, EVPN, VXLAN, and NVGRE.
- Define, implement, and troubleshoot different ISE identities in a multi-node implementation.
- Describe, implement, validate, and debug guest life cycle management using ISE and Cisco network architecture.
- Define, execute, validate, and debug BYOD onboarding and network access flows in collaboration with an internal or external CA.
- Explain, implement, test, and debug AnyConnect provisioning with ISE and ASA.
- Using ISE to define, develop, test, and troubleshoot posture assessment
- Explain, implement, test, and debug endpoint profiling using ISE and Cisco network infrastructure, including device sensors.
- Explain, implement, test, and troubleshoot MDM-ISE integration
- Using ISE to specify, construct, validate, and troubleshoot certificate-based authentication systems
- pxGrid description, installation, and troubleshooting of security devices such as WSA, ISE, and Cisco FMC
- Identify and mitigate common attacks including Smurf, VLAN hopping, and SYNful knock.
- Defining, implementing, and debugging approaches for device hardening and control plane protection.
- Methods for specifying, implementing, and debugging data plane security.
- IPv4/v6 routing protocol security: explanation, implementation, and troubleshooting
- Description, implementation, and troubleshooting of Layer 2 security techniques
- Description, implementation, and troubleshooting of wireless security technologies
- Establishing ACI’s security principles
- Specifying the northbound and southbound APIs of SDN controllers such as APIC-EM
- Defining and recognizing important risks across several network locations.
- Verify network security architecture for conformance with Cisco SAFE principles.
- Explain the fundamentals and components of Cisco Digital Network Architecture (DNA).
- The Cloud
- Programmability of Networks (SDN)
- Internet of Things (IoT)
Get In TOUCH
Frequently Asked Questions
The 400-251 CCIE Security written exam validates experts who can architect, engineer, implement, troubleshoot, and support the full suite of Cisco security technologies and solutions while adhering to the most recent industry best practices to secure systems and environments against modern security risks, threats, vulnerabilities, and requirements.
Network functionality and security concepts and best practices are covered, as well as Cisco network security products, solutions, and technologies in areas such as next generation intrusion prevention, next generation firewalls, identity services, policy management, device hardening, and malware protection.
Recertification requirements must be met prior to the expiration date of the certification. Individuals with expired certification(s) must retake the entire examination process in order to regain active status. Recertification can take place at any time during the active period by progressing to the next level of certification, earning continuing education credits, or a combination of the two.