实施思科安全威胁控制解决方案考试要点.docx

实施思科安全威胁控制解决方案考试要点实施思科安全威胁控制解决方案(SITCS)主要检验考生作为网络安全工程师是否能够利用访问和身份策略，掌握高级防护墙架构以及配置思科下一代防火墙。一些旧的技术已被删除，包括CiscoFirepowerNGIPS以及CiscoAMP(高级恶意软件防护)。该考试涵盖入侵防御系统(IPS)、事件感知的防火墙组件以及Web(云)和电子邮件安全解决方案。ExamDescriptionTheImplementingCiscoThreatControlSolutions(SITCS)exam(300-210)ispartoftheCCNPSecuritycertification.IttestsanetworksecurityengineeronadvancedfirewallarchitectureandconfigurationwiththeCisconext-generationfirewall,utilizingaccessandidentitypolicies.ThisnewrevisionoftheSITCSexamreplaces300-207,removessomeoldertechnologies,andaddscoverageforbothCiscoFirepowerNGIPSandCiscoAMP(AdvancedMalwareProtection).This90-minuteexamconsistsof65–75questionsandcoversintegrationofIntrusionPreventionSystem(IPS)andcontext-awarefirewallcomponents,aswellasWeb(Cloud)andEmailSecuritysolutions.CandidatescanprepareforthisexambytakingtheImplementingCiscoThreatControlSolutions(SITCS)course.Thefollowingtopicsaregeneralguidelinesforthecontentlikelytobeincludedontheexam.However,otherrelatedtopicsmayalsoappearonanyspecificdeliveryoftheexam.Inordertobetterreflectthecontentsoftheexamandforclaritypurposes,theguidelinesbelowmaychangeatanytimewithoutnotice.DownloadCompleteListofTopicsinPDFformat1.0ContentSecurity27%HideDetails1.1CiscoCloudWebSecurity(CWS)1.1.aDescribethefeaturesandfunctionality1.1.bImplementtheIOSandASAconnectors1.1.cImplementtheCiscoAnyConnectwebsecuritymodule1.1.dImplementwebusagecontrol1.1.eImplementAVC1.1.fImplementantimalware1.1.gImplementdecryptionpolicies1.2CiscoWebSecurityAppliance(WSA)1.2.aDescribethefeaturesandfunctionality1.2.bImplementdatasecurity1.2.cImplementWSAidentityandauthentication,includingtransparentuseridentification1.2.dImplementwebusagecontrol1.2.eImplementAVC1.2.fImplementantimalwareandAMP1.2.gImplementdecryptionpolicies1.2.hImplementtrafficredirectionandcapturemethods(explicitproxyvs.transparentproxy)1.3CiscoEmailSecurityAppliance1.3.aDescribethefeaturesandfunctionality1.3.bImplementemailencryption1.3.cImplementantispampolicies1.3.dImplementvirusoutbreakfi