Hi folks,

I'll do this exam. There are somebody that have already did this test before?

Thanks a lot!

Rafa

Report this post to a moderator

I took and failed this test recently.

Make sure you know how to configure isakmp+ipsec on PIX and IOS.

Know the physical layout of the small, medium and remote-access networks.

Know the threats at every point in all 3 networks and how to mitigate them

Good Luck

Chris Slater-Walker

Report this post to a moderator

I took this a few months ago and passed to earn the CCSP. I think the format kinda throws people off because it is a bit of a change for Cisco exams. I was not a cake walk thats for sure. Upon completing the CCSP you now get a letter from the Cisco that states you have met the requirements of the NSA which is just an added benefit for your resume that doesn't cost you a penny.

Report this post to a moderator

Pardon my ignorance, but what is this NSA that Cisco says you meet its requirements (by getting the CCSP certificatgion)?

Report this post to a moderator

OK, I found the answer to my own question!

Cisco offers an Information Systems Security (INFOSEC) Professional qualification to those people passing the SCUR/MCNS, CSPFA, CSVPN and CSIDS exams (but not the CSI exam).

For more information about INFOSEC you can look at the following:

http://www.cisco.com/warp/public/10...EC_4011_FAQ.pdf

Report this post to a moderator

Hi folks,

Does anybody knows the answer of this question?

When you block Java applets and ActiveX controls, which attack you are preventing?

. Brute force
. IP spoofing
. DoS
. Application layer


Boson says DoS. But I didn't found any reason for that.

Regards,

Rafa

Report this post to a moderator

Yes Boson is OK. if you think, there are only three types of attack:
=Reconoissance
=Access
=DoS

Of course this is DoS.

It can not be IP spoofing prevention.
I don't know what is Brute Force.
Application Layer Attack-I don't think so.

Report this post to a moderator

Yes it would be DoS because you have to remember that any attack that breaks things can be a DoS attack. If you take down a web server thats a DoS if you make me run an application that crashes my system thats is a DoS. You have denied me the service to which I was trying to access.

I suppose that you could use java or activex for an Access attack, but that was not one of the choices. It really depends on perspective, but DoS was the only valid choice in that scenario

Report this post to a moderator