Reviews 5,0
Reviews 5,0
100% fundable

Implementing and Operating Cisco® Security Core Technologies (SCOR)

Cyberattacks are becoming more sophisticated – networks need to be better protected accordingly. The SCOR training shows you how to secure networks using Cisco technologies, detect threats, and respond to security incidents professionally.

Key topics

  • Understanding and applying network security architectures in a structured way.
  • Configuring and managing firewalls, IPS and VPN technologies.
  • Securing endpoints, cloud and network environments in an integrated way.
  • Detecting, analyzing and responding to threats with targeted measures.
  • Implementing access controls, authentication and security policies.

Prerequisite
Knowledge of networking and a basic understanding of security fundamentals will help you get started quickly.

Target group
Suitable for network administrators, IT security officers and systems engineers looking to expand their Cisco security expertise.

The training provides the foundation for the 350-701 SCOR exam and is a prerequisite for various Cisco Professional security certifications.

Course content
  • Core aspects of IT security
  • Risk potentials and countermeasures
  • Risk management overview
  • Identifying and assessing security vulnerabilities
  • CVSS evaluation methodology
  • Historical TCP/IP weaknesses
  • Error sources in the IP protocol
  • ICMP protocol flaws
  • Security issues in TCP
  • Weaknesses in UDP
  • Attack vectors and routes
  • Reconnaissance and scanning
  • Attacks on permission levels
  • Man-in-the-middle attack scenarios
  • Denial-of-service attacks
  • Amplification attacks
  • IP and protocol spoofing
  • DHCP attack patterns
  • Credential theft
  • DNS-based attack forms
  • DNS tunneling in practice
  • Web-based attack vectors
  • HTTP redirect abuse
  • Command injection attacks
  • Understanding SQL injection
  • Cross-site scripting & request forgery
  • Phishing and email threats
  • Buffer overflow attacks
  • Malware categories overview
  • Deception-based attack methods
  • System control by attackers
  • Social manipulation techniques
  • Attacks via web applications
  • Exploit kits and rootkit methods
  • Understanding privilege escalation
  • Post-exploitation phases
  • Using exploit toolkits
  • Defense-in-depth concepts
  • Full-spectrum attack defense
  • Network segmentation and virtualization
  • Stateful firewall fundamentals
  • Security-relevant data points
  • Threat intelligence integration
  • Malware defense in networks
  • How IPS works and where it’s used
  • NGFW technologies overview
  • Email security solutions
  • Web security and proxy technologies
  • Threat detection systems
  • DNS security measures
  • Understanding the AAA framework
  • Identity and access management
  • Comparing VPN solutions
  • Hardware form factors for security appliances
  • Cisco ASA deployment options
  • Interface security levels
  • Objects and object groups in ASA
  • NAT configuration
  • Access lists for ASA interfaces
  • Global access rules
  • Advanced filtering options
  • Setting up ASA high availability
  • Deploying and operating Firepower NGFW
  • Rule processing and packet inspection
  • Object management in Firepower
  • NAT rules in Firepower
  • Prefilter configuration
  • Defining access control policies
  • Security intelligence in Firepower
  • Network and detection policies
  • Configuring IPS policies
  • Malware detection and file control
  • Cisco Email Security Appliance (ESA)
  • Understanding SMTP
  • Analyzing email data flows
  • Configuring email listeners
  • Host Access Table (HAT)
  • Recipient Access Table (RAT)
  • Email security policies
  • Spam and graymail filtering
  • Antivirus and malware detection
  • Outbreak filters
  • Content-based filter rules
  • DLP for email communications
  • Encrypting outbound emails
  • Cisco Web Security Appliance (WSA)
  • WSA deployment modes
  • User authentication in web proxy
  • HTTPS inspection and decryption
  • Access profiles and control mechanisms
  • Configuring web usage policies
  • Malware defense in web traffic
  • Cisco Umbrella architecture
  • Umbrella deployment
  • Remote protection with Umbrella
  • Umbrella administration
  • Threat intelligence with Umbrella Investigate
  • VPN use cases and benefits
  • Comparing VPN types
  • Encryption methods for VPNs
  • Key management and security
  • Understanding PKI concepts
  • Site-to-site VPN models
  • IPsec VPN fundamentals
  • Static crypto map settings
  • IPsec VTI configuration
  • Deploying DMVPN
  • FlexVPN technology overview
  • VTI fundamentals in Cisco IOS
  • Setting up point-to-point VTI
  • IKEv2-based VPN connections
  • Secure communication over VPN
  • S2S VPN on Cisco ASA
  • ASA-side VPN configuration
  • VPN setup on Firepower NGFW
  • Remote access over VPN
  • Remote VPN methods
  • SSL fundamentals for VPN
  • Remote access fundamentals
  • Connection profile configuration
  • Group policies for VPN users
  • ASA-side SSL VPN configuration
  • SSL VPN on Firepower NGFW
  • Network access control
  • Components of the Cisco security framework
  • AAA protocols for access control
  • Cisco ISE for identity management
  • Segmentation with TrustSec
  • 802.1X protocol and EAP overview
  • EAP authentication methods
  • RADIUS as 802.1X backend
  • RADIUS authorization and attributes
  • 802.1X on Cisco Catalyst switches
  • 802.1X configuration on Cisco WLC
  • ISE configuration for 802.1X
  • Supplicant configuration
  • Web auth methods in Cisco
  • Host-based firewall
  • Host antivirus solutions
  • Host IPS technologies
  • Application control via allow and block lists
  • Endpoint malware protection
  • Sandbox analysis for malware
  • File integrity monitoring (FIM)
  • Understanding Cisco AMP architecture
  • Analysis engines in Cisco AMP
  • Retrospective threat detection
  • Device and file trajectory
  • AMP management and configuration
  • Identifying network layers
  • Control plane monitoring
  • Securing the management plane
  • Traffic monitoring and logging
  • Layer 2 data security
  • Layer 3 protection measures
  • Infrastructure access lists
  • Control Plane Policing (CoPP)
  • Protecting routing infrastructure
  • Routing protocol security
  • Preventing VLAN hopping
  • Defending against STP attacks
  • Configuring port security
  • Deploying private VLANs (PVLANs)
  • DHCP snooping configuration
  • Dynamic ARP Inspection (DAI)
  • Setting up storm control
  • MACsec for Layer 2 encryption
  • Antispoofing techniques
  • Unicast Reverse Path Forwarding (uRPF)
  • IP source verification
  • Secure management access
  • SNMPv3 security
  • Secure device access with Cisco
  • AAA integration for management
  • Time synchronization with NTP
  • Log management and forwarding
  • Traffic analysis with NetFlow
  • Stealthwatch product family
  • Core components of Stealthwatch Enterprise
  • Flow aggregation and deduplication
  • Optional Stealthwatch components
  • ISE integration in Stealthwatch
  • AI-based analysis in Stealthwatch
  • Encrypted Traffic Analytics (ETA)
  • Configuring host groups
  • Managing alarms and security events
  • Host policies and security standards
  • Cloud computing developments
  • Cloud service models
  • Responsibilities in cloud security
  • Cloud deployment models
  • Attacks and risks in cloud environments
  • Patch management in the cloud
  • Cloud security audits and assessments
  • Cisco security strategy for the cloud
  • Securing cloud infrastructure
  • Workload security in the cloud
  • API security and cloud governance
  • Network virtualization
  • NFV use cases with Cisco
  • Cloud threat monitoring
  • Deploying CASB technologies
  • CloudLock® for SaaS security
  • OAuth security and attack vectors
  • Monitoring public cloud environments
  • Monitoring private networks
  • Stealthwatch Cloud in practice
  • SDN fundamental principles
  • Programmable network control
  • Cisco APIs and interfaces
  • Network automation with Python

Up to 100% funding for your continuing education

Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.

Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.

The QCG Program for Everyone in the Company The Education Voucher for All Job Seekers

Frequently asked questions

  • The SCOR training delivers practical knowledge of network security, firewall configuration, VPN technologies, threat defense and security automation.
  • The training is aimed at network professionals and IT security specialists looking to deepen their knowledge and prepare for the CCNP Security exam.
  • TCP/IP fundamentals and some hands-on experience with Cisco systems and network components are recommended.
  • A SCOR certification significantly improves your chances for roles in cybersecurity and is widely recognized as a key qualification for network and security professionals.
  • Yes, SCOR is the core module for CCNP Security certification. Beyond that, specialized focus modules can be freely chosen.
  • The training covers Cisco Firepower, Cisco Umbrella, Cisco ISE and Stealthwatch – applied hands-on to real-world deployment scenarios.
  • IT security skills are more in demand in organizations than ever before. SCOR provides up-to-date competencies directly relevant to day-to-day security roles.

Your Personal Path to the Right Continuing Education Program – We Provide Personalized Guidance

Our experienced educational advisors will guide you from your very first question all the way to the start of your continuing education program.