**CCSP FAQ** - Please read before posting.

mikej412

CCSP FAQ

Information about the Cisco Certified Security Professional (CCSP) -- the required exams and prerequisites -- can be found on the Cisco website.
Cisco Career Certifications & Paths - CCSP

Following are some of the most common questions in our CCSP Forum. If you have the same or similar questions, please read these topics first. If you cannot find the answer your are looking for, or want to know more, don't hesitate to post a reply to one of the following or start a new thread. In case of the latter, please use a clear descriptive title (i.e. more than just "I need help") so others can find answers in our forums more easily.

: What Books would you recommend for the CCSP?
Cisco Press 642-503
Books for self study
New CCSP books...
Should i buy this 3 Ciscopress books for 642-552 ??
DMVPN
CCSP newbie

For the Cisco CCSP Exams, the Cisco Press books are the best, and in most cases, the only books you can find for the exams.
Cisco Press CCSP Books

The official Cisco Course materials and/or Cisco Partner eLearning is an option for those with access.

The Cisco Documentation is another source for studying -- and one candidates for the Cisco Professional Level Certifications should become familiar with.

: I don’t have any equipment should I buy a Simulator?
dynagen plus real gear
Great news for emu lovers! (PIX)
Cisco IDS/IPS box
How realistic is this Security Lab plan?

There is a mixed opinion on this and in the end you will have to decide for yourself. Simulators and real labs both have their merits. It's advisable to buy at least some equipment if you plan to put your certs to work and don't have hands-on work experience with Cisco routers and switches. You just can't simulate feeling and connecting cables and connectors.

: I want to setup my own home CCSP lab what should I buy and how do I set it up?
CCSP equipment
I want to buy hardware for CCSP please give recommendations.
Cisco Pix 515E restricted license
Pix verses the ASA for studying
ASA 5510s
CCSP without the Equipment
IPS Rack time

Just another one trying to get the CCIE Security
asa 5505 for CCIE security lab
CCIE Security Study group in Chicago area

For equipment try www.ciscokits.com and www.ebay.com

Rather than purchasing the expensive equipment, rack rental is an option -- see the IPS RacK time link above. The newest equipment tested in the CCSP may not yet be tested in the CCIE Security Lab Exam and may not yet be available in the CCIE Rental Racks -- so plan accordingly.

: CCSP or CCNP?
ccsp & ccnp
Studying for CCNP and/or CCSP
CCSP vs. CCNP
CCNP vs. CCSP
Steps to a CCSP
CCSP or CCNP
ccnp or ccsp?


Suggested Cisco Documentation Links
Cisco IOS Feature Navigator

: 642-552 Securing Cisco Network Devices (SND)
: 642-502 Securing Networks with Cisco Routers and Switches (SNRS)
Cisco IOS Security Configuration Guide, Release 12.4
Cisco IOS Classic Firewall and Intrusion Prevention System Denial-of-Service Protection
Cisco IOS Firewall - Configuring IP Access Lists

: 642-523 Securing Networks with PIX and ASA (SNPA)
Cisco ASA 5500 Series Quick Start Guide, Version 7.0
Cisco PIX Firewall Software Configuration Guides
Cisco ASA 5500 Series Adaptive Security Appliances Configuration Guides
Cisco Security Appliance Command Line Configuration Guide, Version 7.2
Cisco Security Appliance Command Line Configuration Guide, Version 8.0
ASDM 5.2 User Guide
ASDM 6.0 User Guide
Content Security and Control SSM Administrator Guide Version 6.2
PIX/ASA 7.x: Allow Local LAN Access for VPN Clients Configuration Example
PIX/ASA 7.x: Enable FTP/TFTP Services Configuration Example

: 642-533 Implementing Cisco Intrusion Prevention System
Cisco Secure Intrusion Detection System
Installing Cisco Intrusion Prevention System Appliances and Modules 5.0
Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface 5.0
Installing and Using Cisco Intrusion Prevention System Device Manager 5.1
Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface 5.1
Installing and Using Cisco Intrusion Prevention System Device Manager 6.0
Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface 6.0
IPS 5.x: Inline VLAN Pair Mode Configuration Example
ASA: Send Network Traffic from the ASA to the AIP SSM Configuration Example

: 642-591 Implementing Cisco NAC Appliance (CANAC)
Cisco NAC Appliance Configuration Quick Start Guide, Release 4.1
Cisco NAC Appliance - Clean Access Server Installation and Configuration Guide, Release 4.1(3)
Network Admission Control: Technical Overview (PDF)
Network Admission Control Overview Demo (Flash)
Network Admission Control Documentation Reference Guide
Network Admission Control (NAC) FAQ (PDF)
Network Admission Control (NAC) Framework Configuration Guide (PDF)
Network Admission Control (NAC) Framework Deployment Guide (PDF)
Network Admission Control Software Configuration Guide
Cisco IOS Security Configuration Guide, Release 12.4 - Network Admission Control
Cisco Security Appliance Command Line Configuration Guide, Version 7.2 - Configuring Network Admission Control
Cisco Security Appliance Command Line Configuration Guide, Version 8.0 - Configuring Network Admission Control
Cisco NAC Appliance (Clean Access) Design Guides
Supported Hardware and System Requirements for Cisco NAC Appliance (Cisco Clean Access)
Getting Started with Cisco NAC Network Modules in Cisco Access Routers

: 642-544 Implementing Cisco Security Monitoring, Analysis and Response System (MARS)
Quick Start for Cisco Security Monitoring, Analysis, and Response System
Install and Setup Guide for Cisco Security MARS, Release 5.3.x
Top Issues for the Cisco Security Monitoring, Analysis, and Response System
User Guide for Cisco Security MARS Global Controller, Release 5.3.x
User Guide for Cisco Security MARS Local Controller, Release 5.3.x


Other Cisco Resources
Certification Exam Tutorial
Cisco Learning Connection - Security and VPN
Cisco Learning Connection - Routers
Cisco Learning Connection - Switches
Cisco on Cisco Technology Tutorials
Using the Technical Support and Documentation Website
Cisco Security Introduction
Cisco Security Center
Design Zone for Security
Network Security Policy: Best Practices White Paper
Cisco Guide to Harden Cisco IOS Devices

Other Security Resources
NSA Security Configuration Guides
The 60 Minute Network Security Guide (First Steps Towards a Secure Network Environment) PDF
Search for Cisco on the NSA page and you find several links, including
Cisco Router Security Configuration Guide
Cisco IOS Switch Security Configuration Guide



NDA and Forum rules

If you have any more questions feel free to reply to this topic. Do not ask about or mention the topics of the SIM(s) or discuss any required steps for specific SIM(s). Everything related to the CCSP objectives that cover something that can be configured, implemented, verified, troubleshot, etc, is a possible topic for the CCSP exam. You need to know them all, not just the ones Cisco happens to have currently in their exams, or someone else got last week.

Ten9t6 wrote:

All,

First I want to say welcome to the Cisco section of TechExams. Let me know if you have any questions during your visit. We have some very knowledgeable members that are more than willing to help you out.

BUT...

We do have some rules. It is ok to talk about areas that are good to focus, (like the blueprint for the test) but it is not ok to state what questions or sims you had (To be more clear....do not say I had two on OSPF and one on Underwater Basket Weaving..Yes, I know that is not getting specifics...but you should not be mentioning these at all. It is not my NDA or TechExams NDA...it is what you signed w/ Cisco.) If you can't face the question or the sim, without a heads up, your not ready for the exam.

Again, welcome to the forum. Learn as much as you can. Help when you can help. And please watch what you post.

Thanks...
Ten9t6

mikej412 wrote:

Cisco Candidate Conduct Policy

No candidate will take any action that will compromise the integrity or confidentiality of a Cisco Certification examination or otherwise compromise the integrity of the Cisco Certification program. Such actions include but are not limited to:
• Disseminating actual exam content via web postings, discussion groups, chat rooms, study guides, etc.

Cisco Career Certifications and Confidentiality Agreement

The main guts of the Cisco NDA is "contents of the exam are confidential."

You agree that the contents of the exam are confidential and that the disclosure of that information could compromise the integrity of the Program and of Certifications. Cisco makes exams available to you solely to test your knowledge of the exam subject matter for which you seek Certification. You are expressly prohibited from disclosing, publishing, reproducing, or transmitting any exam and any related information including, without limitation, questions, answers, worksheets, computations, drawings, diagrams, length or number of exam segments or questions, or any communication, including oral communication regarding or related to the exam (known collectively as “Proprietary Information”), in whole or in part, in any form or by any means, oral or written, electronic or mechanical, for any purpose, without the prior express written permission of Cisco.

From Cisco Online Certification Support

As a matter of policy Cisco Systems, Inc. does not disclose the content of our certification exams. This includes exam pass marks, the exact number of questions on each exam, as well as the number of each type of question a candidate will see during their exam.

instant000

Any chance at updating the guide, with regards to CCNP:Security?

mikej412

It's on the to-do list -- unfortunately it comes behind work, feeding the cats (and cleaning their litter boxes), and preparing for the CCIE R&S Lab. And I haven't had much time for Lab prep (and one of the Cats has been complaining that I haven't been attending to their litter box promptly).

maharaliel

A long list I think it should help even if I didn't manage to pass through it.