Exam: 300-208

Exam Description

This exam is conducted to make sure that the security engineers have the knowledge of the security components and architecture with the help of 802.1X and Cisco TrustSec. This exam certifies the candidate’s familiarity and knowledge of ISE Architecture (Identity Services Engine Architecture), implementation, and all other components like network security threat alleviation and endpoint control solutions. The course includes the fundamental concepts of BYOD (Bring Your Own Device) with the help of ISE’s posture and profiling services. SISAS (Cisco Secure Access Solutions) course can be taken by the candidate for preparing this exam

Our Course Features

IP Specialist courses are ideally crafted courses that will guide you through the process of developing concrete skills required to pass the exam and build a successful career in networking field. These Workbooks have been created in order to cover the previous exam patterns and official exam blueprint. Our technology workbooks practically explain all the concepts with the help of real-life case-study based labs. The content covered in our technology workbooks consists of individually focused technology topics presented in easy-to-follow, clear, precis, and step-by-step manner considering the individual needs. In our technology workbooks, technology breakdown and methodical verification helps you understand the scenario and related concepts with ease. We extensively used mind maps in our workbooks to visually explain the technology. Our workbooks have become a widely used tool to learn and remember the information effectively.

• Covers complete Blueprint of CCNP Security SISAS
• Summarized content
• Case Study based approach
• Ready to practice labs on VM
• 100% passinginging guarantee
• Mind maps
• Contains Quick Reference Guide (CHEAT SHEET) which helps to revise exams

Chapter 1: Identity Management/Secure Access
AAA Concepts
AAA Components
Device Administration
Network Access
Options for implementing AAA
TACACS+
RADIUS
Active Directory (AD)
Lightweight Directory Access Protocol (LDAP)
Identity Management
Identity Stores:
Implement Accounting:
Wired/Wireless 802.1x
802.1x Port-Based Authenticaiton
Attribute-Value (AV) Pairs
Extensible authentication protocol (EAP)
Lab 1.1: Configuring Dot1x Port-based Authentication Using Cisco ISE
802.1x Phasing
MAC Authentication Bypass
Lab 1.2: MAC Authentication Bypass (MAB)
Network Authorization Enforcement
Downlaodable Access Control List (dACL)
Dynamic VLAN
Security Group Access (SGA)
Change of Authorization (CoA)
Central Web Authorization
Creating Authorization Profile for Central Web Authorization
Profiling
Guest Services
Configuring Sponsor Group Policy
Lab 1.3: Implementing Registered and Self Registered Guest Services using Central Web Authentication over Cisco ISE
Posturing
Components of Posture Service
Licensing and Deployment:
Enabling Posture Session Service
Run the Posture Assessment Report
Simple Posture Conditions
Compound Posture Conditions
Configuring Cisco ISE for Posture Services:
Bring Your Own Device (BYOD) Access
Introduction:
Bring your Own Devices
Elements of BYOD Policy:
Device Registering:
Personal Device Portals
My Device Portal
Supplicant Provisioning:

Chapter 2: Threat Defence
TrustSec
Enforcement:
Security Group Exchange Protocol
IEEE 802.1 AE (MACsec)
Downlink MACSec
Uplink MACSec

Chapter 3: Troubleshooting, Monitoring and Reporting Tools
Technology Brief
Network Privilege Framework (NPF)
Monitoring:
Troubleshooting

Chapter 4: Threat Defence Architectures
Highly Secure Wireless Solution
Secure Wireless Solution
Identity Management
IEEE 802.1x Port-Based Authentication
MAC Authentication Bypass (MAB)
Network Authorization Enforcement
Central Web Authentication
Profiling
Guest Services
Posturing

Chapter 5: Identity Management Architectures
Cisco ISE Nodes
Policy Service Node (PSN)
Policy Administration Node (PAN)
Monitoring and Troubleshooting Node (MnT)
pxGrid Controller
Cisco ISE deployment Modes
Designing Security Solutions
AAA Security Solution
Profiling Security Solution
Posturing Security Solution
BYOD Security Solution
Guest Services Security Solution
References
About Our Products

Cisco Certifications

Cisco Systems, Inc. specializes in networking and communication products and services. A leader in global technology, the company is best known for its business routing and switching products that direct data, voice, and video traffic across networks worldwide.

Cisco also offers one of the most comprehensive vendor-specific certification programs in the world, the Cisco Career Certification Program. The program has six (6) levels, which begins at the Entry level and then advances to Associate, Professional, and Expert levels. For some certifications, the program closes at the Architect level.

Cisco Certification Tracks

How does Cisco certifications help?

Cisco certifications are a de facto standard in networking industry, which helps you boost your career in the following ways:

1. Gets your foot in the door by launching your IT career
2. Boosts your confidence level
3. Proves knowledge, which helps improve employment opportunities

As for companies, Cisco certifications are a way to:

1. Screen job applicants
2. Validate the technical skills of the candidate
3. Ensure quality, competency, and relevancy
4. Improve organization credibility and customer’s loyalty
5. Meet the requirement in maintaining organization partnership level with OEMs
6. Help in job retention and promotion