Omschrijving
The Securing Cloud Deployments with Cisco Technologies (SECCLD) v1.0 course shows you how to implement Cisco® cloud security solutions to secure access to the cloud, workloads in the cloud, and software as a service (SaaS) user accounts, applications, and data.
Through expert instruction and hands-on labs, you’ll learn a comprehensive set of skills and technologies including: how to use key Cisco cloud security solutions; detect suspicious traffic flows, policy violations, and compromised devices; implement security controls for cloud environments; and implement cloud security management.
This course covers usage of Cisco Cloudlock, Cisco Umbrella™, Cisco Cloud Email Security, Cisco Advanced Malware Protection (AMP) for Endpoints, Cisco Stealthwatch® Cloud and Enterprise, Cisco Firepower® NGFW (next-generation firewall), and more.
Who should attend?
This course is open to engineers, administrators, and security-minded users of public, private, and hybrid cloud infrastructures responsible for implementing security in cloud environments:
- Security architects
- Cloud architects
- Security engineers
- Cloud engineers
- System engineers
- Cisco integrators and partners
Prerequisites
To fully benefit from this course, you should have completed the following course or obtained the equivalent knowledge and skills:
- Knowledge of cloud computing and virtualization software basics
- Ability to perform basic UNIX-like OS commands
- Cisco CCNP® security knowledge or understanding of the following topic areas:
- Cisco Adaptive Security Appliance (ASA) and Adaptive Security Virtual Appliance (ASAv) deployment
- Cisco IOS Flexible NetFlow operations
- Cisco NGFW (Cisco Firepower Threat Defense [FTD]), Cisco Firepower, and Cisco Firepower Management Center (FMC) deployment
- Cisco Content Security operations including Cisco Web Security Appliance (WSA)/ Cisco Email Security Appliance (ESA)/ Cisco Cloud Web Security (CWS)
- Cisco AMP for network and endpoints deployment
- Cisco ISE operations and Cisco TrustSec architecture
- VPN operation
Course Outline
Introducing the Cloud and Cloud Security
- Describe the Evolution of Cloud Computing
- Explain the Cloud Service Models
- Explore the Security Responsibilities Within the Infrastructure as a Service (IaaS) Service Model
- Explore the Security Responsibilities Within the Platform as a Service (PaaS) Service Model
- Explore the Security Responsibilities Within the SaaS Service Model
- Describe Cloud Deployment Models
- Describe Cloud Security Basics
Implementing the CiscSecurity Solution for SaaS Access Control
- Explore Security Challenges for Customers Using SaaS
- Describe User and Entity Behavior Analytics, Data Loss Prevention (DLP), and Apps Firewall
- Describe Cloud Access Security Broker (CASB)
- Describe CiscCloudLock as the CASB
- Describe OAuth and OAuth Attacks
Deploying CiscCloud-Based Security Solutions for Endpoints and Content Security
- Describe CiscCloud Security Solutions for Endpoints
- Describe AMP for Endpoints Architecture
- Describe CiscUmbrella
- Describe CiscCloud Email Security
- Design Comprehensive Endpoint Security
Introducing CiscSecurity Solutions for Cloud Protection and Visibility
- Describe Network Function Virtualization (NFV)
- Describe CiscSecure Architectures for Enterprises (CiscSAFE)
- Describe CiscNGFWv/CiscFirepower Management Center Virtual (FMCv)/CiscAMP for Networks
- Describe CiscASAv
- Describe CiscServices Router 1000V (CSR1Kv)
- Describe CiscStealthwatch Cloud
- Describe CiscTetration Cloud Zero-Trust Model
Describing the Network as the Sensor and Enforcer
- Describe CiscStealthwatch Enterprise
- Describe CiscISE Functions and Personas
- Describe CiscTrustSec
- Describe CiscStealthwatch and CiscISE Integration
- Describe CiscEncrypted Traffic Analytics (ETA)
Implementing CiscSecurity Solutions in AWS
- Explain AWS Security Offerings
- Describe AWS Elastic Compute Cloud (EC2) and Virtual Private Cloud (VPC)
- Discover CiscSecurity Solutions in AWS
- Explain CiscStealthwatch Cloud in AWS
- Describing Cloud Security Management
- Describe Cloud Management and APIs
- Explain API Protection
- Illustrate an API Example: Integrate tISE Using pxGrid
- Identify SecDevOps Best Practices
- Illustrate a CiscCloud Security Management Tool Example: CiscDefense Orchestrator
- Illustrate a CiscCloud Security Management Tool Example: CiscCloudCenter™
- Describe CiscApplication Centric Infrastructure (ACI)
- Describe AWS Reporting Tools
