Silver Learning

WELL TRAINED PEOPLEBETTER SERVED CUSTOMERS

CCIE SECURITY V5.0

01

CCIE SECURITY V5.0

02

(overview)TThe Cisco Certified Internetwork Expert Security (CCIE Security) program recognizes security experts

who have the knowledge and skills to architect, engineer, implement, troubleshoot, and support the full

suite of Cisco security technologies and solutions using the latest industry best practices to secure

systems and environments against modern security risks, threats, vulnerabilities, and requirements.

03

CCIE training is designed and delivered in different patterns according to candidate’s requirements,

knowledge and professional experience.

Entry to Expert Level (CCNA to CCIE)

Lab Preparation Workshop

One to One Instructor Led Training

Professional to Expert level (CCNP to CCIE)

10 Days Bootcamp

04

(DESCRIPTION)Designed specifically to prepare students to pass the CCIE Security V5 Lab Exam.

CCIE Security Certified Instructor guided CCIE Labs.

50% hands-on and 50% lecture.

Unlimited CCIE Security Rack access till the time you pass your Lab exam.

Choice of on-site instructor-led training at any of location UAE.

CCIE Security Lab bootcamp will have a maximum of 8 students.

Dedicated instructor mentoring to ensure all concepts are completely understood..

Sanisoft workbook is updated to reflect the current content of the CCIE Security v5 Lab Exam.

Student receives dedicated instructor mentoring to ensure all concepts are completely understood.

Each student has their own rack. The CCIE Lab Exam is not a team effort, so your preparation

should not be either!.

Courseware and rack hardware have been updated to reflect the current content of the

CCIE Security Lab Exam Version 5.0.

10 Days Advanced Technology Boot Camp Available.

One-on-one instruction as your trainer walks you through various CCIE lab scenarios.

All our content is based on the most current actual lab.

05

06

HOW TO OBTAIN THE CERTIFICATION?Certification is obtained by passing two exams.

1. Step One: CCIE Security Written Exam

The Cisco CCIE Security Written Exam (400-251) version 5.0 is a two-hour test with 90–110 questions

that validate professionals who have the expertise to describe, design, implement, operate, and

troubleshoot complex security technologies and solutions. Candidates must understand the requirements

of network security, how different components interoperate, and translate it into the device configurations.

The exam is closed book and no outside reference materials are allowed.

2. Step Two: CCIE Security Lab Exam

The Cisco CCIE Security Lab Exam version 5.0 is an eight-hour, hands-on exam that requires a candidate

to plan, design, implement, operate, and troubleshoot complex security scenarios for a given specification.

Knowledge of troubleshooting is an important skill and candidates are expected to diagnose and solve

issues as part of the CCIE lab exam.

The web-based delivery infrastructure supporting the v5.0 lab exam is very similar to v4.0. The format of

the lab exam itself, however, has changed significantly. The v5.0 lab exam now comprises three modules:

07

Web-Based Delivery

Troubleshooting Optional +30 Minutes

Optional +30 Minutes

Diagnostic2 Hours 1 Hours

Virtual Devices No Devices

Configuration5 Hours

Virtual Physical Devices

08

The total sum of all of modules must equal at least the minimum overall cut score.The sum for each individual module must equal at least the minimum cut score for the module.

Passing Criteria

To Pass

8 Hours

Minimum Score

Troubleshooting120 Minutes (2 Hours)Optional + 30 Minutes.

Independent Incidents.Device Console Access.Troubleshooting Specific Topology.

Minimum Score Minimum Score+ +

(Troubleshooting)+Min (Diagnostic) + Min (Configuration) & Overall Cut-Score

Skills TestedTimely Fixing and verify Network Security Issues.

Diagnostic60 Minutes (1 Hours)No Optional Time.

Independent Tickets.No Device Access.Multiple Information Sources(Diagaram,Emails,Logs,Traffic Capture)

Skills TestedPerceive Network issues.Analyze Symptoms.Identify and Describe Root Cause.Correlate Information from Different Sources.Apply Troubleshotings Methodologies.

Configuration300 Minutes (5 Hours)Deduction of 30 Minutes. If Optional Extra timeUsed in Troubleshooting Module.Dependent Items.Device Console Access.Configuration Speific Topology.

Skills TestedSecurity Solution Design.Security Solution Optimization.Ability to Understand Requirements & TranslateThem to a Working Configuration.Understand Traffic Flows & Their Dependencies.Understand Technology Architecure.

Use of Troubleshooting Tools for the Specific Technology and Product.

Apply Troubleshooting Methodologies.

09

LAB EQUIPMENT AND IOS SOFTWAREThe Lab exam tests features that can be configured on the equipment and the software versions indicated in the document

below. The software versions listed below will be in the lab setup. However, the list may be updated to a more recent release

during the life cycle of v5.0 exam topics to maintain an updated lab environment.

Passing the lab exam requires a depth of understanding difficult to obtain without hands-on experience. Early in your

preparation candidates should arrange access to equipment similar to that used on the exam.

Security Appliances

Cisco Identity Services Engine (ISE): 2.1.0

Cisco Secure Access Control System (ACS): 5.8.0.32

Cisco Web Security Appliance (WSA): 9.2.0

Cisco Email Security Appliance (ESA): 9.7.1

Cisco Wireless Controller (WLC): 8.0.133

Cisco Firepower Management Center Virtual Appliance: 6.0.1 and/or 6.1

Cisco Firepower NGIPSv: 6.0.1

Cisco Firepower Threat Defense: 6.0.1

10

Core Devices

IOSv L2: 15.2

IOSv L3: 15.5(2)T

Cisco CSR 1000V Series Cloud Services Router: 3.16.02.S

Cisco Adaptive Security Virtual Appliance (ASAv): 9.6.1

Others

Test PC: Microsoft Windows 7

Active Directory: Microsoft Windows Server 2008

Cisco Application Policy Infrastructure Controller Enterprise Module : 1.2

Cisco Unified Communications Manager: 8.6.(1)

AnyConnect 4.2

1602E: 15.3.3-JC

Cisco Unified IP Phone

7965: 9.2(3

Cisco Aironet

Physical Devices

Cisco Catalyst Switch

C3850-12S: 16.2.1

Cisco Adaptive Security Appliance

5512-X: 9.6.1

Cisco 2504 Wireless Controller

2504: 8.0.133.0

11

PASSING CRITERIATo pass the lab exam, the candidate must meet these two conditions:

The total sum of all of modules must equal at least the minimum overall cut score.

The sum for each individual module must equal at least the minimum cut score for the module.

To Pass

8 Hours

Minimum Score

Troubleshooting120 Minutes (2 Hours)Optional + 30 Minutes.

Independent Incidents.Device Console Access.Troubleshooting Specific Topology.

Minimum Score Minimum Score+ +

(Troubleshooting)+Min (Diagnostic) + Min (Configuration) & Overall Cut-Score

Skills TestedTimely Fixing and verify Network Security Issues.

Diagnostic60 Minutes (1 Hours)No Optional Time.

Independent Tickets.No Device Access.Multiple Information Sources(Diagaram,Emails,Logs,Traffic Capture)

Skills TestedPerceive Network issues.Analyze Symptoms.Identify and Describe Root Cause.Correlate Information from Different Sources.Apply Troubleshotings Methodologies.

Configuration300 Minutes (5 Hours)Deduction of 30 Minutes. If Optional Extra timeUsed in Troubleshooting Module.Dependent Items.Device Console Access.Configuration Speific Topology.

Skills TestedSecurity Solution Design.Security Solution Optimization.Ability to Understand Requirements & TranslateThem to a Working Configuration.Understand Traffic Flows & Their Dependencies.Understand Technology Architecure.

Use of Troubleshooting Tools for the Specific Technology and Product.

Apply Troubleshooting Methodologies.

12

Core Devices

IOSv L2: 15.2

IOSv L3: 15.5(2)T

Cisco CSR 1000V Series Cloud Services Router: 3.16.02.S

Cisco Adaptive Security Virtual Appliance (ASAv): 9.6.1

Others

Test PC: Microsoft Windows 7

Active Directory: Microsoft Windows Server 2008

Cisco Application Policy Infrastructure Controller Enterprise Module : 1.2

Cisco Unified Communications Manager: 8.6.(1)

AnyConnect 4.2

1602E: 15.3.3-JC

Cisco Unified IP Phone

7965: 9.2(3

Cisco Aironet

Physical Devices

Cisco Catalyst Switch

C3850-12S: 16.2.1

Cisco Adaptive Security Appliance

5512-X: 9.6.1

Cisco 2504 Wireless Controller

2504: 8.0.133.0

Silver Learning

Office #410, Al-Dana Center, Al Maktoum Road, Deira, Dubai, United Arab Emirates Tel: 04-2238786, Mob:050 7546618, Email:info@sanisoft-it.com, Web: www.sanisoft-it.com