Implementing Cisco Security Monitoring, Analysis and Response System

The 642-544 MARS Implementing Cisco Security Monitoring, Analysis and Response System exam is associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the Implementing Cisco Security Monitoring, Analysis and Response System course. This exam tests a candidate's knowledge of the Cisco Security Monitoring, Analysis and Response System.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Install and configure the Cisco Security MARS product

• Identify the components, features and functions of the Cisco Security MARS product
• Describe the process of installing the Cisco Security MARS appliance
• Add Cisco reporting devices into the Cisco Security MARS appliance
• Add non-Cisco reporting devices into the Cisco Security MARS appliance
• Investigate events that the Cisco Security MARS appliance collects from configured security devices
• Configure the Cisco Security MARS appliance to send alerts
• Create and view a long-duration query on the Cisco Security MARS appliance
• Configure rules to detect interesting patterns of network activity and other anomalous network behavior
• Use the management features in the Cisco Security MARS appliance to assign event, addressing, service, and user information
• Configure the Cisco Security MARS appliance hardware maintenance activities
• Utilize the Global Controller to manage multiple Cisco Security MARS appliances

Implementing Cisco Security Monitoring, Analysis and Response System (MARS) is the recommended training for this exam.

Courses listed are offered by Cisco Learning Partners—the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the Global Learning Partner Locator for a Cisco Learning Partner near you.

A variety of Cisco Press Self-Study titles are available for this exam. These titles can be purchased at the Cisco Marketplace, directly from Cisco Press, or wherever you purchase technical books.

Return to Top