实施思科威胁控制解决方案考试要点

1、第 第 页实施思科威胁控制解决方案考试要点E*am Description:The first paragraph is the e*am description that is followed by a second paragraph with standard copy that appears on all e*am topics.The following topics are general guidelines for the content likely to be included on the e*am. However, other related topics may

2、 also appear on any specific delivery of the e*am. In order to better reflect the contents of the e*am and for clarity purposes, the guidelines below may change at any time without notice.1.0 Content Security1.1 Implement Cisco C*1.1.a Describe features and functionality1.1.b Implement Web usage con

3、trol1.1.c Implement AVC1.1.d Implement decryption policies1.1.e Describe traffic redirection and capture methods1.2 Implement Cisco Cloud Web Security1.2.a Describe features and functionality1.2.b Implement IOS and ASA connectors1.2.c Implement AnyConnect web security module1.2.d Describe Web usage

4、control1.2.e Describe AVC1.2.f Describe Anti-malware1.2.g Describe decryption policies1.3 Implement Cisco WSA1.3.a Implement data security1.3.b Describe traffic redirection and capture methods1.4 Implement Cisco ESA1.4.a Describe features and functionality1.4.b Implement Email Encryption1.4.c Implem

5、ent AntiSpam policies1.4.d Implement Virus outbreak filter1.4.e Implement DLP policies1.4.f Implement anti-malware1.4.g Implement inbound and outbound mail policies and authentication1.4.h Describe traffic redirection and capture methods2.0 Threat Defense2.1 Implement Network IPS2.1.a Describe traff

6、ic redirection and capture methods2.1.b Configure network IPS2.1.c Describe signatures2.1.d Implement event actions2.1.e Configure event action overrides2.1.f Implement risk ratings2.1.g Describe router-based IPS2.2 Configure Device Hardening per Best Practices2.2.a IPS2.2.b Content Security applian

7、ces2.3 Implement Network IPS2.3.a Describe signatures2.3.b Configure blocking2.3.c Implement anomaly detection3.0 Devices GUIs and Secured CLI3.1 Implement Content Security4.0 Troubleshooting, Monitoring and Reporting Tools4.1 Configure IME and IP logging for IPS4.2 Monitor Content Security4.3 Monitor Cisco Security IntelliShield5.0 Threat Defense Architectures5.1 Design IPS solution6.0 Content Security Arc