Silver Learning
WELL TRAINED PEOPLEBETTER SERVED CUSTOMERS
CCIE SECURITY V5.0
01
CCIE SECURITY V5.0
02
(overview)TThe Cisco Certified Internetwork Expert Security (CCIE Security) program recognizes security experts
who have the knowledge and skills to architect, engineer, implement, troubleshoot, and support the full
suite of Cisco security technologies and solutions using the latest industry best practices to secure
systems and environments against modern security risks, threats, vulnerabilities, and requirements.
03
CCIE training is designed and delivered in different patterns according to candidate’s requirements,
knowledge and professional experience.
Entry to Expert Level (CCNA to CCIE)
Lab Preparation Workshop
One to One Instructor Led Training
Professional to Expert level (CCNP to CCIE)
10 Days Bootcamp
04
(DESCRIPTION)Designed specifically to prepare students to pass the CCIE Security V5 Lab Exam.
CCIE Security Certified Instructor guided CCIE Labs.
50% hands-on and 50% lecture.
Unlimited CCIE Security Rack access till the time you pass your Lab exam.
Choice of on-site instructor-led training at any of location UAE.
CCIE Security Lab bootcamp will have a maximum of 8 students.
Dedicated instructor mentoring to ensure all concepts are completely understood..
Sanisoft workbook is updated to reflect the current content of the CCIE Security v5 Lab Exam.
Student receives dedicated instructor mentoring to ensure all concepts are completely understood.
Each student has their own rack. The CCIE Lab Exam is not a team effort, so your preparation
should not be either!.
Courseware and rack hardware have been updated to reflect the current content of the
CCIE Security Lab Exam Version 5.0.
10 Days Advanced Technology Boot Camp Available.
One-on-one instruction as your trainer walks you through various CCIE lab scenarios.
All our content is based on the most current actual lab.
05
06
HOW TO OBTAIN THE CERTIFICATION?Certification is obtained by passing two exams.
1. Step One: CCIE Security Written Exam
The Cisco CCIE Security Written Exam (400-251) version 5.0 is a two-hour test with 90–110 questions
that validate professionals who have the expertise to describe, design, implement, operate, and
troubleshoot complex security technologies and solutions. Candidates must understand the requirements
of network security, how different components interoperate, and translate it into the device configurations.
The exam is closed book and no outside reference materials are allowed.
2. Step Two: CCIE Security Lab Exam
The Cisco CCIE Security Lab Exam version 5.0 is an eight-hour, hands-on exam that requires a candidate
to plan, design, implement, operate, and troubleshoot complex security scenarios for a given specification.
Knowledge of troubleshooting is an important skill and candidates are expected to diagnose and solve
issues as part of the CCIE lab exam.
The web-based delivery infrastructure supporting the v5.0 lab exam is very similar to v4.0. The format of
the lab exam itself, however, has changed significantly. The v5.0 lab exam now comprises three modules:
07
Web-Based Delivery
Troubleshooting Optional +30 Minutes
Optional +30 Minutes
Diagnostic2 Hours 1 Hours
Virtual Devices No Devices
Configuration5 Hours
Virtual Physical Devices
08
The total sum of all of modules must equal at least the minimum overall cut score.The sum for each individual module must equal at least the minimum cut score for the module.
Passing Criteria
To Pass
8 Hours
Minimum Score
Troubleshooting120 Minutes (2 Hours)Optional + 30 Minutes.
Independent Incidents.Device Console Access.Troubleshooting Specific Topology.
Minimum Score Minimum Score+ +
(Troubleshooting)+Min (Diagnostic) + Min (Configuration) & Overall Cut-Score
Skills TestedTimely Fixing and verify Network Security Issues.
Diagnostic60 Minutes (1 Hours)No Optional Time.
Independent Tickets.No Device Access.Multiple Information Sources(Diagaram,Emails,Logs,Traffic Capture)
Skills TestedPerceive Network issues.Analyze Symptoms.Identify and Describe Root Cause.Correlate Information from Different Sources.Apply Troubleshotings Methodologies.
Configuration300 Minutes (5 Hours)Deduction of 30 Minutes. If Optional Extra timeUsed in Troubleshooting Module.Dependent Items.Device Console Access.Configuration Speific Topology.
Skills TestedSecurity Solution Design.Security Solution Optimization.Ability to Understand Requirements & TranslateThem to a Working Configuration.Understand Traffic Flows & Their Dependencies.Understand Technology Architecure.
Use of Troubleshooting Tools for the Specific Technology and Product.
Apply Troubleshooting Methodologies.
09
LAB EQUIPMENT AND IOS SOFTWAREThe Lab exam tests features that can be configured on the equipment and the software versions indicated in the document
below. The software versions listed below will be in the lab setup. However, the list may be updated to a more recent release
during the life cycle of v5.0 exam topics to maintain an updated lab environment.
Passing the lab exam requires a depth of understanding difficult to obtain without hands-on experience. Early in your
preparation candidates should arrange access to equipment similar to that used on the exam.
Security Appliances
Cisco Identity Services Engine (ISE): 2.1.0
Cisco Secure Access Control System (ACS): 5.8.0.32
Cisco Web Security Appliance (WSA): 9.2.0
Cisco Email Security Appliance (ESA): 9.7.1
Cisco Wireless Controller (WLC): 8.0.133
Cisco Firepower Management Center Virtual Appliance: 6.0.1 and/or 6.1
Cisco Firepower NGIPSv: 6.0.1
Cisco Firepower Threat Defense: 6.0.1
10
Core Devices
IOSv L2: 15.2
IOSv L3: 15.5(2)T
Cisco CSR 1000V Series Cloud Services Router: 3.16.02.S
Cisco Adaptive Security Virtual Appliance (ASAv): 9.6.1
Others
Test PC: Microsoft Windows 7
Active Directory: Microsoft Windows Server 2008
Cisco Application Policy Infrastructure Controller Enterprise Module : 1.2
Cisco Unified Communications Manager: 8.6.(1)
AnyConnect 4.2
1602E: 15.3.3-JC
Cisco Unified IP Phone
7965: 9.2(3
Cisco Aironet
Physical Devices
Cisco Catalyst Switch
C3850-12S: 16.2.1
Cisco Adaptive Security Appliance
5512-X: 9.6.1
Cisco 2504 Wireless Controller
2504: 8.0.133.0
11
PASSING CRITERIATo pass the lab exam, the candidate must meet these two conditions:
The total sum of all of modules must equal at least the minimum overall cut score.
The sum for each individual module must equal at least the minimum cut score for the module.
To Pass
8 Hours
Minimum Score
Troubleshooting120 Minutes (2 Hours)Optional + 30 Minutes.
Independent Incidents.Device Console Access.Troubleshooting Specific Topology.
Minimum Score Minimum Score+ +
(Troubleshooting)+Min (Diagnostic) + Min (Configuration) & Overall Cut-Score
Skills TestedTimely Fixing and verify Network Security Issues.
Diagnostic60 Minutes (1 Hours)No Optional Time.
Independent Tickets.No Device Access.Multiple Information Sources(Diagaram,Emails,Logs,Traffic Capture)
Skills TestedPerceive Network issues.Analyze Symptoms.Identify and Describe Root Cause.Correlate Information from Different Sources.Apply Troubleshotings Methodologies.
Configuration300 Minutes (5 Hours)Deduction of 30 Minutes. If Optional Extra timeUsed in Troubleshooting Module.Dependent Items.Device Console Access.Configuration Speific Topology.
Skills TestedSecurity Solution Design.Security Solution Optimization.Ability to Understand Requirements & TranslateThem to a Working Configuration.Understand Traffic Flows & Their Dependencies.Understand Technology Architecure.
Use of Troubleshooting Tools for the Specific Technology and Product.
Apply Troubleshooting Methodologies.
12
Core Devices
IOSv L2: 15.2
IOSv L3: 15.5(2)T
Cisco CSR 1000V Series Cloud Services Router: 3.16.02.S
Cisco Adaptive Security Virtual Appliance (ASAv): 9.6.1
Others
Test PC: Microsoft Windows 7
Active Directory: Microsoft Windows Server 2008
Cisco Application Policy Infrastructure Controller Enterprise Module : 1.2
Cisco Unified Communications Manager: 8.6.(1)
AnyConnect 4.2
1602E: 15.3.3-JC
Cisco Unified IP Phone
7965: 9.2(3
Cisco Aironet
Physical Devices
Cisco Catalyst Switch
C3850-12S: 16.2.1
Cisco Adaptive Security Appliance
5512-X: 9.6.1
Cisco 2504 Wireless Controller
2504: 8.0.133.0
Silver Learning
Office #410, Al-Dana Center, Al Maktoum Road, Deira, Dubai, United Arab Emirates Tel: 04-2238786, Mob:050 7546618, Email:[email protected], Web: www.sanisoft-it.com