| トピック | 出題範囲 |
| トピック 1 | - Threat Response: This section of the exam measures skills of Incident Response Engineers and focuses on responding to threats through automation and data analysis. It covers how to act based on telemetry and audit reports, manage user or application compromises, and implement response steps such as containment, reporting, remediation, and reinstating services securely.
|
| トピック 2 | - Cloud Security Architecture: This section of the exam measures the skills of Cloud Security Architects and covers the fundamental components of the Cisco Security Reference Architecture. It introduces the role of threat intelligence in identifying and mitigating risks, the use of security operations tools for monitoring and response, and the mechanisms of user and device protection. It also includes strategies for securing cloud and on-premise networks, as well as safeguarding applications, workloads, and data across environments.
|
| トピック 3 | - Industry Security Frameworks: This section of the exam measures the skills of Cybersecurity Governance Professionals and introduces major industry frameworks such as NIST, CISA, and DISA. These frameworks guide best practices and compliance in designing secure systems and managing cloud environments responsibly.
|
| トピック 4 | - Application and Data Security This section of the exam measures skills of Cloud Security Analysts and explores how to defend applications and data from cyber threats. It introduces the MITRE ATT&CK framework, explains cloud attack patterns, and discusses mitigation strategies. Additionally, it covers web application firewall functions, lateral movement prevention, microsegmentation, and creating policies for secure application connectivity in multicloud environments.
|
| トピック 5 | - User and Device Security: This section of the exam measures skills of Identity and Access Management Engineers and deals with authentication and access control for users and devices. It covers how to use identity certificates, enforce multifactor authentication, define endpoint posture policies, and configure single sign-on (SSO) and OIDC protocols. The section also includes the use of SAML to establish trust between devices and applications.
|
| トピック 6 | - Visibility and Assurance: This section of the exam measures skills of Security Operations Center (SOC) Analysts and focuses on monitoring, diagnostics, and compliance. It explains the Cisco XDR solution, discusses visibility automation, and describes tools for traffic analysis and log management. The section also involves diagnosing application access issues, validating telemetry for behavior analysis, and verifying user access with tools like firewall logs, Duo, and Cisco Secure Workload.
|
| トピック 7 | - Network and Cloud Security:This section of the exam measures skills of Network Security Engineers and covers policy design for secure access to cloud and SaaS applications. It outlines techniques like URL filtering, app control, blocking specific protocols, and using firewalls and reverse proxies. The section also addresses security controls for remote users, including VPN-based and application-based access methods, as well as policy enforcement at the network edge.
|
