A. WHAT IS CCIE SECURITY V6.0?
Objective & Syllabus:
Cybersecurity is a hot topic because of the constant internal data breaches, external data breaches and staggering average cost of a data breach. One of the biggest issues with data security is the discovery of the breach since the sophistication, stealth, and frequency of the attacks and threats continue to increase manifold.
Owing to the loss associated with a data breach of any kind including the brand image, financial loss, and client trust issues, organizations are taking Cybersecurity threats very seriously. To prevent, react and resolve the data security threats, organizations are looking for expert help before the attack, during the attack, and after the attack.
Networks are changing at a very fast rate. Intent-based networking is aimed at connecting users, devices, apps, security intent, and policies. The logical boundaries between the enterprises, Data Center and Service provider are getting almost non-existent from the Cybersecurity perspective. APIs and programmability are driving the need for automation, agility, and scale.
Organizations across the globe are looking for professionals who can take care of changing dynamics of the Cybersecurity arena. They are looking for skilled and certified professionals who can take care of the Cybersecurity end-to-end. The ability to manage the following stages is crucial for an information security professional.
- DESIGN – Architecting networks with inbuilt security to prevent attacks
- BUILD – Implement and configure the secure design
- MONITOR – Consistently monitoring networks for threats, breaches, and anomalies
- RESPOND – Identifying breach at the point of entry, evaluating the scope, taking measures to contain threat and remediation
- AUTOMATE – Building an automated process to defend and protect
Courtesy – Cisco Networking Trends Report 2020
Cisco has launched updates to its flagship certification program to reflect the rapidly changing technology demands and adoption patterns in the industry.‘Be Job-ready Today, tomorrow and Beyond’ is the main theme behind the revamp of the certification program. The revamped certification program reflects the changing needs from the market and the way Cisco is catering to their demands and needs.
The CCIE Security lab exam v5.0 was aimed at testing skillsets related to architecting, engineering, implementing, troubleshooting and supporting the full suite of Cisco Security technologies and solutions. It was aimed at validating the ability of a professional to use the latest industry best practices to secure systems and environments against modern security risks, threats, vulnerabilities, and requirements. With the evolving technologies and the sophisticated demands from the industry, Cisco has revised its focus on validating the competence and skillsets of a CCIE to reflect the changing dynamics and future needs of the industry.
Professionals with CCIE certificates can no longer afford to restrict themselves to the Troubleshooting, Diagnosing and Configuring tasks in the network. The industry is demanding them to play a far bigger and complex role to set up, operate and maintain their ever-changing network needs. The new CCIE Security lab exam v6.0 is aimed at assessing and validating the candidate’s skills through the entire lifecycle of designing, deploying, operating and optimizing complex security technology and solutions deployments.
As it is called, Cisco has rebooted the Certification program to enable a CCIE to take care of Day 0, Day 1 and Day 1 of the network life cycle. It means a CCIE should be able to look after design on day zero, they should be able to deploy and configure the solution on Day 1 followed by operating, managing and optimizing it on day 1. This is the entire philosophy behind the certification revamp. The other aspect which has played a very important role is the focus on Automation and Network Programmability.
It essentially means that the CCIE certification program has been revamped completely based on the updated syllabus to meet the present and future needs of the industry, examination method (lab structure) to validate skillsets across the network lifecycle and the marking system to match the difficulty rating and weightage.
Courtesy – Learningnetwork.cisco.com
The CCIE Security v5.0 lab exam was aimed at covering the following topics:
|Perimeter Security and Intrusion Prevention||23%|
|Advanced Threat Protection and Content Security||19%|
|Secure Connectivity and Segmentation||19%|
|Identity Management, Information Exchange, and Access Control||24%|
|Infrastructure Security, Virtualization, and Automation||15%|
Whereas CCIE Security v6.0 will assess the following topics:
|Lab Exam (%)|
|1.0 Perimeter Security and Intrusion Prevention||20%|
|2.0 Secure Connectivity and Segmentation||20%|
|3.0 Infrastructure Security||15%|
|4.0 Identity Management, Information Exchange, and Access Control||25%|
|5.0 Advanced Threat Protection and Content Security||20%|
For detailed exam topics for CCIE Security v6.0 lab exam please visit:
- THE BIGGEST DIFFERENCE BETWEEN CCIE SECURITY V5.0& CCIE SECURITY V6.0
The nature of the lab exam and the scoring method:
In the outgoing CCIE Security lab exam, v5.0 following is the structure of the lab exam:
The 8-hour CCIE Security lab exam version 5.0 is composed of three independent exam modules:
2Hour – Troubleshooting module
1 Hour – Diagnostics Module
5 Hours – ConfigurationModule
Image Courtesy: [email protected]
The Troubleshooting module has two incidents which are independent of each other. It means that the resolution of one incident does not depend on the resolution of the other. Configuration module in the CCIE Security lab exam v5.0 runs on virtual instances of Cisco security appliances. The candidate may be asked to work on physical devices as well. The diagnostics module is focussed on the skills required to diagnose network issues without having device access. It improves the reliability of the lab exam by focusing on technology concepts, troubleshooting, diagnosing and configuring skills rather than testing specific hardware platform features, software knowledge, and management.
The sequence of the three lab modules is fixed. The troubleshooting module is followed by the Diagnostics and Configuration Module. You cannot go back and forth between the modules and the Diagnostics module is fixed for 60 minutes. Even if the examinee completes the diagnostics module in less than the designated 60 minutes, he/she will have to wait till the 60 minutes timeframe completes before proceeding to the second module.
Passing Marks –
To pass the CCIE Security lab exam v5.0, candidates must meet two conditions
- The examinee must meet or exceed the minimum score on both the modules
- The examinee’s total score (the sum of each of the two modules must meet or exceed the overall lab-exam cut score)
Failure to meet either of these criteria results in failing the lab exam. There are instances when the candidate has achieved the minimum score required in both the modules and has still failed in the exam. This failure is due to not meeting the second criterion of the total score.
This criterion was aimed at making sure that the CCIE must have competency in all two areas (Troubleshooting, Diagnostics, and Configuration). Candidates cannot neglect one module and concentrate on the remaining to pass the exam.
C. NATURE OF THE LAB EXAM CCIE SECURITY V6.0
The lab exam for the CCIE Security v6.0 is as follows:
The lab exam is divided into 2 modules that have fixed time and sequence.
Module 1 – Design (3 Hours)
Module 2 – Deploy, Operate and Optimize (5 Hours)
The first section ‘Design – 3 Hours’ covers the applied design of the network based on the technological requirement. It is different from the CCDE exam which focuses on high-level design based on business requirements. The second module is 5 hours which assesses your skills in ‘Implement. Operate (it includes troubleshoot) and Optimize’ aspect of security. Cisco intends to maintain the overall storyline while going through the two modules while making some add/revisions in between like adding a branch network for example. At the same time, both of these modules are separate.
Module 1: Design (3 Hours)
The objective of this module is to assess the ability to create, analyze, validate and optimize network designs. Following skills will be validated:
- Understand the capabilities of different technologies, solutions, and services
- Translate client requirements into solutions
- Assess readiness to support proposed solutions
This is a scenario-based module with no access to any devices. The examinee will be provided with documentation like email threads, high-level design, network topology diagrams, client requirements, and restrictions.
Regarding the passing threshold for the new CCIE Security, there is no fixed number or percentage. Each lab exam is going to be different and each question will be weighted by a resident psychometrician for its difficulty level and passing marking weightage. This means each lab exam will have a different passing score based on an internal valuation by the Cisco team.
Point values associated with each item are not displayed in this module.
Module 2: Deploy, Operate and Optimize (5 Hours)
The objective of this module is to validate skill sets related to deploying, operating and optimizing network technologies and solutions.
- Deploy – Successful network implementation including configuring, integrating and troubleshooting the commissioning of technologies and solutions based on the exam syllabus. The network implementation will be guided by the design specifications, client requirements, and restrictions.
- Operate and Optimize – Monitoring network health, network performance, service quality improvement with reduced disruptions and outages. Other parameters to be tested are reducing operating costs, maintaining high availability, reliability and security. It also assesses the ability to diagnose potential issues, adjust/finetune configurations to meet changing business goals and technical requirements.
Point values associated with each item are displayed in this module.
Exam Score Evaluation
Both the modules will have a minimum score and a passing score based on the difficulty level.
The examinee must score higher than the aggregated pass scores of both the modules and score higher than the minimum score set on each of the modules individually.
If examinee scores less than the overall aggregated pass score of both modules, he/she fails. Or if the examinee scores less than the minimum score of 1 or more modules, he/she fails too.
Candidates who fail the exam will be given a report specifying the scoring percentages domain wise for the modules they passed or failed.
D. WHAT ARE THE BENEFITS OF CCIE SECURITY?
CCIE Security lab exam and syllabus are designed in such a way that the skillsets of the examinee get validated most efficiently. The syllabus covers the topics which are most relevant for the candidates based on their job roles and organizational needs. The candidate’s skillsets get validated across the lifecycle of the network. Successful candidates are ready with the Automation and Network Programmability knowledge since both these buzzword modules are covered in the CCIE Security lab exam.
Successful completion of the CCIE Security lab exam puts you ahead of all the other candidates who are competing with you for the coveted post or the job. Large organizations and corporates are looking for candidates who can take care of the complete lifecycle of their networks while being ready for the upcoming technologies.
Achieving CCIE Security certification after passing the lab exam means that the candidate is ready with the most advanced knowledge of the network security lifecycle. His capacity to be able to understand, practically apply and manage the networking security technologies is validated.
E. MARKET DEMAND FOR THE CCIE SECURITY v6.0:
Markets are looking for capable, knowledgeable and certified network engineers who can straight away take care of their following security project requirements
a. Privileged Access Management
b. Vulnerability Management
c. Threat Detection and Response
d. Cloud Security Posture Management
e. Cloud Access Security
f. Business Email Compromise
g. Dark Data Recovery
h. Security Incident Response
i. Container Security
j. Security Rating Services
*Source: Gartner Top 10 Security Projects for 2019, February 2019
CCIE certification by Cisco has been the gold standard of the networking prowess for a long time. Revamped CCIE program such as CCIE Security v6.0 is the next step in this direction. Markets have an idea about the skills and knowledge possessed by CCIE certified professionals. It helps candidates get better job opportunities across the globe.
CCIE certification opens up the global job market for professionals. The CCIE program is a well-known and well-received career certification across the continents.
F. MARKET OPPORTUNITIES FOR CCIE SECURITY:
CCIE candidates can get Network Architect, Senior engineer, Network engineer kind of roles. These are responsible and performance-oriented posts which can fetch a good salary for the right candidates.
Irrespective of the industry verticals and domains, CCIEs are always in demand due to the rigor, integrity and brand value associated with the certification program and the candidate who has gone through the whole nine yards of preparation, practice, and examination to prove his mettle.
According to a report published by Cybersecurity Ventures 2019, 3.5 million security jobs are expected by 2021. CCIE Security certificate is going to be the most attractive and effective way of getting a highly paid and lucrative job opportunities.
G. WHO SHOULD OPT FOR THE CCIE SECURITY?
Candidates who are looking for a long term career in the Security industry are the right candidates for the CCIE. CCIE is not something that can be attempted as a pastime if you are not committed enough. Professionals who have worked in the networking industry for 5-7 years are the right candidates for the CCIE provided they have enough fire and hunger in them to achieve this pinnacle of networking security certification in the world.
The CCIE certification is the best option for candidates who are expected to deliver expert-level problem-solving skills to support complex network security technologies and topologies.
It is the best career enhancement tool for the students and IT professionals who are looking for an internationally recognized certification to improve their job growth prospects.
H. PREREQUISITES FOR THE CCIE SECURITY:
As per the CISCO certification guidelines, there is no prerequisite for attempting the CCIE lab exam except the candidate needs to clear core technology exam SCOR (350-701). Candidate need not complete CCNP or CCNA to appear for the CCIE lab exam.
J. WHAT IS OCTA NETWORKS?& WHY U SHOULD CHOOSE OCTA NETWORKS?
Many of us have been working towards CCIE Security for a long time. We need to keep working on the same, we’ll receive the credit for work completed in the current program.
- If you have passed the current CCIE Security written v5.0 exam (400-251) before Feb 24th, 2020, you can go for the CCIE Wireless lab exam v6.0 till April 26th, 2020. After 27th April 2020, you are eligible to attempt CCIE Security v6.0 within 3 years of passing the written v5.0 exam (400-251).
- If you pass SCOR 350-701 which will replace the current CCIE Wireless Written v5.0 exam (400-251) once it is available on Feb 24th, 2020, you are eligible to attempt CCIE Security v6.0 lab exam within three years of passing the SCOR exam.
- If you complete the entire CCIE Wireless v5.0 certification on or before April 26th, 2020, then on April 27th, 2020 you will automatically receive the new CCIE Security v6.0 certification. You will also receive the Cisco Certified Specialist – Security Core certification.
- IF you have an active CCNP or have passed an exam that will be made equivalent to a technology core exam after migration, you will be able to attempt the CCIE lab exam within 3 years from the date of passing the exam equivalent to the core exam SCOR (350-701). That means if you have cleared SENSS (300-206), SISAS (300-208), SIMOS (300-209) &SITCS(300-210), you have achieved a Cisco Certified Specialist – Security Core SCOR (350-701). It makes you eligible to attempt the CCIE Security v6.0 lab exam within 3 years of passing the three exams mentioned before.
- If you are an active CCIE Security v5.0as of April 26th, 2020, you will receive a new CCIE Security v6.0 certificate. The validity of the original CCIE Security v5.0 (two years) remains unchanged. With the new CCIE program, recertification will be required every three years. Current CCIE Security v5.0 recertification requirement is after every two years
- CCIE Suspended status will be retired as of Feb 24th, 2020. If you are in a suspended status as of Feb 24, 2020, your certification will be considered active for the remainder of the suspended term. To remain active after the suspended term, CCIEs will have to meet new recertification requirements. For example, if your suspended status ends on May 5, 2020, your CCIE will become active on Feb 24th, 2020 and will expire on May 5th, 2020 unless new recertification requirements are met.
- For recertification details, please get in touch with us at Octa Networks or visit the Cisco website.
- WHAT IS OCTA NETWORKS?& WHY U SHOULD CHOOSE OCTA NETWORKS?
What is Octa Networks?
Octa Networks is one of the leading, trusted and preferred Training providers in India offering high-quality result oriented training for various courses like Cisco, AWS, Microsoft, VMware, AWS, Palo Alto, Huawei, Juniper to companies and clients all over the world.
The main objective of training students and professionals for the CCIE Security is to make sure that they understand the subject and are ready to implement the knowledge in real-life scenarios. Making students job-worthy in the specific domain of technology and getting it validated in the form of CCIE certification is the core of the success of the Octa Networks team. The best CCIE training institute in India, Octa Networks provides expert training and robust infrastructure for developing your enterprise networking specific technology and deployment skillsets supplemented with vendor-neutral industry knowledge. Octa Networks makes sure that the students get real-world network implementation and troubleshooting experience/skills that the market demands which in turn differentiates them from the rest of the crowd.
TRAINING APPROACH –
- Assess Industry needs & trends
- Select most relevant course material & delivery channels
- Continuously assess & upgrade courses, equipment, and material
- Identify &analyze student needs
- Training solutions aligned to industry standards & student needs
TRAINING OFFERINGS –
- Instructor-led Online Training
- Classroom Training
- Corporate Training
- Fly Me a Trainer
- 1 on 1 Training
WHY SHOULD YOU CHOOSE OCTA NETWORKS?
Octa Networks is the most renowned institute for CCIE Security training in Mumbai. Faculties at Octa Networks are well trained and certified trainers themselves. Please visit our website for further details on the infrastructure availability and the equipment list.
Our training methodology is completely based on reference exam blueprints, equipment list and recommended study resources which are used to enhance networking skillsets such as Technology theory, problem-Solving, Configuration, Monitoring & Troubleshooting.
At the foundation of training delivery are three core deliverables:
- Evaluate &
Octa Networks team is committed to following the critical trio in our training approach.
- Adoption &
Imparting relevant knowledge, assessing whether knowledge is received by the students followed by making sure that they retain and use the know-how in their daily routine work at their office is the ultimate goal of any training program.
We at Octa Networks train with the inherent objective of immersive and interactive training techniques which are based on reinforcement of theory &its practical implementation in real-world scenarios.
Octa Networks team is geared up to take care of students with different learning and communication styles followed by language barriers and cultural differences.
Octa Networks attracts students and professionals from diverse backgrounds and various nationalities from different parts of the world. Octa Networks has trained a lot of students from the Middle-East, Europe and a lot of African, Asian backgrounds.
Please feel free to visit our website www.octanetworks.com to get all the information related to the integrated course training program, placement assistance, soft-skills development, and other aspects.
Please feel free to get back to us for any clarifications/queries.
We are looking forward to working with you on your CCIE training journey.