OpenExamsFREE PRACTICE — ANY EXAM

Designing and Implementing Secure Cloud Access for Users and Endpoints — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Designing and Implementing Secure Cloud Access for Users and Endpoints

Format
Performance-based questions, multiple choice, and drag-and-drop
Time limit
90 minutes
Exam fee
$US300, or use Cisco Learning Credits
Examination outline
  • Concepts (10%)
    • Describe industry cloud security frameworks such as NIST SP 800-207 and CISA Zero Trust Maturity Model v2.0
    • Select mitigation methods to defend against attacker, tactics, and techniques using the MITRE ATT&CK cloud frameworks (identity providers [IDPs], SaaS, and IaaS)
    • Describe security requirements for public cloud platforms such as AWS, Azure, and Google Cloud (GCP)
    • Describe operational requirements for public cloud platforms such as AWS, Azure, and Google Cloud (GCP)
    • Describe private cloud including local hypervisors such as VMware and container orchestration platforms such as Kubernetes
    • Describe how eBPF-based tools (Cilium, Tetragon) provide runtime security observability and enforcement for containerized workloads
  • Identity (20%)
    • Describe the use and function of identity intelligence across IDPs
    • Implement user and device authentication via identity certificates
    • Implement multifactor authentication (including phishing resistant) for users and devices with Cisco Duo
    • Implement endpoint posture policies for user access to resources
    • Configure user and device trust using SAML authentication for a mobile or web application
    • Configure SSO and user provisioning using an IDP connection
  • Policies (30%)
    • Describe encryption methods for data in transit and at rest in cloud environments such as TLS, IPsec in context, and tunnels
    • Describe how features such as IPS, DLP, and malware protection help provide secure private access
    • Describe the use, purpose, and characteristics of AI Defense
    • Describe AI features in Secure Access such AI Access and AI Guardrails
    • Describe how web application firewalls protect against DDoS
    • Determine security policies for network security edge to enforce application policy
    • Determine security policies for application enforcement using Cisco Secure Workload and enforcement agents
  • Access (30%)
    • Configure DNS security
    • Configure Secure Web Gateway
    • Configure Data Loss Protection
    • Configure CASB
    • Configure secure private access for workloads
    • Configure secure private access for users
  • Operations (10%)
    • Select the process or tool that provides cloud application (includes workloads and containers) visibility, microsegmentation, traffic analysis, and policy enforcement based on security requirements
    • Interpret traffic flow and telemetry reports for baseline and compliance behavior analysis
    • Interpret Cisco Secure Access dashboards
    • Integrate Cisco Secure Access with Cisco XDR and Splunk Enterprise to enhance SOC operations
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.