OpenExamsFREE PRACTICE — ANY EXAM

Performing Cybersecurity Using Cisco Security Technologies — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Performing Cybersecurity Using Cisco Security Technologies

Time limit
120 minutes
Exam fee
$US400, or use Cisco Learning Credits
Examination outline
  • Fundamentals (20%)
    • Interpret the components within a playbook
    • Determine the tools needed based on a playbook scenario
    • Apply the playbook for a common scenario
    • Infer the industry for various compliance standards
    • Describe the purpose of cyber risk insurance
    • Analyze elements of a risk analysis
    • Apply the incident response workflow
    • Describe characteristics and areas of improvement using common incident response metrics
    • Describe types of cloud environments
    • Compare security operations considerations of cloud platforms
  • Techniques (30%)
    • Recommend AI-powered data analytic techniques
    • Describe the use of hardening machine images for deployment
    • Describe the process of evaluating the security posture of an asset
    • Evaluate the security controls of an environment, diagnose gaps, and recommend improvement
    • Determine resources for industry standards and recommendations for hardening of systems
    • Determine patching recommendations, given a scenario
    • Recommend services to disable, given a scenario
    • Apply segmentation to a network
    • Utilize network controls for network hardening
    • Determine DevSecOps recommendations
    • Describe use of a Threat Intelligence Platform to automate intelligence
    • Apply AI-driven threat intelligence using tools
    • Apply concepts of data loss, leakage, and data states
    • Describe mechanisms to detect and enforce data loss prevention techniques
    • Recommend tuning devices and software across rules, filters, and policies
    • Describe the concepts of security data management
    • Describe use of SIEM tools for security data analytics
    • Recommend procedural and SOAR workflows and automation
    • Apply dashboard data to communicate with stakeholders
    • Analyze anomalous user and entity behavior using SIEM data
    • Determine the next action based on user behavior alerts
    • Describe tools and limitations for network analysis
    • Evaluate artifacts and streams in a packet capture file
    • Troubleshoot existing detection rules
    • Determine tactics, techniques, and procedures from an attack
  • Processes (30%)
    • Analyze components in a threat model
    • Determine steps to investigate common case types
    • Apply the concepts and sequence of steps in the malware analysis process
    • Interpret attack events based on predictive AI analysis of traffic patterns
    • Determine steps to investigate endpoint intrusion
    • Determine known Indicators of Compromise and Indicators of Attack
    • Determine IOCs in a sandbox environment
    • Determine steps to investigate potential data loss
    • Recommend general mitigation steps for vulnerabilities
    • Recommend next steps for vulnerability triage and risk analysis
  • Automation (20%)
    • Compare concepts, platforms, and mechanisms of SOAR
    • Interpret basic scripts such as Python
    • Modify a provided script to automate a security operations task
    • Recognize common data formats
    • Determine opportunities for automation, orchestration, and machine learning within SOAR
    • Determine constraints when consuming APIs
    • Explain common HTTP response codes associated with REST APIs
    • Evaluate parts of an HTTP response
    • Interpret API authentication mechanisms
    • Utilize Bash commands
    • Describe components of a CI/CD pipeline
    • Apply principles of DevOps practices
    • Describe principles of Infrastructure as Code
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.