Implementing Cisco Security Monitoring, Analysis, and Response System

The Implementing Cisco Security Monitoring, Analysis and Response System exam is associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the Implementing Cisco Security Monitoring, Analysis and Response System course. This exam tests a candidate's knowledge of the Cisco Security Monitoring, Analysis and Response System.

The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Install and configure the Cisco Security MARS product

• Describe, configure and verify features and functions of the Cisco Security MARS appliance
• Describe, configure and verify the installation of the Cisco Security MARS appliance
• Add supported Cisco reporting devices to the Cisco Security MARS appliance and verify the operations
• Add supported third-party reporting devices to the Cisco Security MARS appliance and verify the operations
• Perform incident investigation and mitigation from the Cisco Security MARS appliance
• Configure the Cisco Security MARS appliance to send alerts and notifications
• Generate queries and reports on the Cisco Security MARS appliance
• Describe, configure and verify rules to detect interesting patterns of network activity and other anomalous network behavior
• Use the Management options in the Cisco Security MARS appliance user interface to configure and verify Event, IP, Service, and User information
• Describe and perform Cisco Security MARS appliance maintenance activities
• Describe Cisco Security MARS Global Controller functionalities

Implementing Cisco Security Monitoring, Analysis and Response System (MARS) is the recommended training for this course.

Courses listed are offered by Cisco Learning Partners—the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the Global Learning Partner Locator for a Cisco Learning Partner near you.

A variety of Cisco Press Self-Study titles are available for this exam. These titles can be purchased at the Cisco Marketplace, directly from Cisco Press, or wherever you purchase technical books.

Return to Top