| Topic | Details |
| Topic 1 | - SAFE Key Structure: This section of the exam measures skills of Network Security Designers and focuses on the SAFE framework's key structural elements. It includes understanding ¡®Places in the Network¡¯¡ªthe different network zones¡ªand defining ¡®Secure Domains¡¯ to organize security policy implementation effectively.
|
| Topic 2 | - Application and Data Security This section of the exam measures skills of Cloud Security Analysts and explores how to defend applications and data from cyber threats. It introduces the MITRE ATT&CK framework, explains cloud attack patterns, and discusses mitigation strategies. Additionally, it covers web application firewall functions, lateral movement prevention, microsegmentation, and creating policies for secure application connectivity in multicloud environments.
|
| Topic 3 | - Industry Security Frameworks: This section of the exam measures the skills of Cybersecurity Governance Professionals and introduces major industry frameworks such as NIST, CISA, and DISA. These frameworks guide best practices and compliance in designing secure systems and managing cloud environments responsibly.
|
| Topic 4 | - Network and Cloud Security:This section of the exam measures skills of Network Security Engineers and covers policy design for secure access to cloud and SaaS applications. It outlines techniques like URL filtering, app control, blocking specific protocols, and using firewalls and reverse proxies. The section also addresses security controls for remote users, including VPN-based and application-based access methods, as well as policy enforcement at the network edge.
|
| Topic 5 | - Threat Response: This section of the exam measures skills of Incident Response Engineers and focuses on responding to threats through automation and data analysis. It covers how to act based on telemetry and audit reports, manage user or application compromises, and implement response steps such as containment, reporting, remediation, and reinstating services securely.
|
| Topic 6 | - Integrated Architecture Use Cases: This section of the exam measures the skills of Cloud Solution Architects and covers key capabilities within an integrated cloud security architecture. It focuses on ensuring common identity across platforms, setting multicloud policies, integrating secure access service edge (SASE), and implementing zero-trust network access models for more resilient cloud environments.
|
| Topic 7 | - User and Device Security: This section of the exam measures skills of Identity and Access Management Engineers and deals with authentication and access control for users and devices. It covers how to use identity certificates, enforce multifactor authentication, define endpoint posture policies, and configure single sign-on (SSO) and OIDC protocols. The section also includes the use of SAML to establish trust between devices and applications.
|
| Topic 8 | - SAFE Architectural Framework: This section of the exam measures skills of Security Architects and explains the Cisco SAFE framework, a structured model for building secure networks. It emphasizes the importance of aligning business goals with architectural decisions to enhance protection across the enterprise.
|
