Securing Networks with Cisco Firepower (300-710 SNCF) Certification Path

Securing Networks with Cisco Firepower (300-710 SNCF) exam is affiliated with the CCNP Security and Cisco Accredited Specialist-Network Security Firepower certifications. This is the official prerequisite for this exam. However these courses, Cisco Firepower Securing Networks, and Cisco Firepower Next-Generation Intrusion Prevention System Securing Network, help candidates prepare for this test.

Knowledge of these domains is an unofficial prerequisite:

• Intrusion Detection Systems (IDS) and IPS
• Firewall, VPN, and Intrusion Prevention System (IPS)
• TCP/IP
• Routing protocols

Exam Content

The content of the Cisco 300-710 test revolves around four domains, each containing specific knowledge and skills that the candidates must develop competency in. These areas have different percentage weights in the exam syllabus, which shows how many questions related to this or that topic will appear in the test. While preparing for your certification exam, you need to pay special attention to the sections with higher weight. However, you need to remember that only mastering all the topics will guarantee success in your test. The detailed outline of the domains covered in Cisco 300-710 is provided below.

• Deployment – 30%

Within this first topic, the examinees need to demonstrate that they have the relevant skills in implementing NGFW modes (including routed mode as well as transparent mode); implementing NGIPS modes (including passive & inline); implementing high availability options (including link redundancy, standby/active failover, multi-instance); describing IRB configurations.

• Configuration – 30%

This domain requires that the students have the expertise in a wide range of knowledge areas. For starters, they should have proficiency in configuring system settings within Cisco Firepower Management Center as well as configuring the policies, such as access control, malware & file, intrusion, identity, SSL, DNS, prefilter within Cisco Firepower Management Center. In addition, they need to able to customize the following features with the help of Cisco Firepower Management Center: network discovery, correlation, application detectors (Open AppID), and actions. This part also encompasses such skills as customizing objects with the help of Firepower Management Center (including object management as well as intrusion rules) and customizing devices with the help of Firepower Management Center (including device Management, VPN, NAT, QoS, Certificates, Platform Settings).

• Management & Troubleshooting – 25%

To tackle the questions associated with this subject area, the test takers should develop their competency in performing troubleshooting with the help of FMC CLI as well as GUI; customizing dashboards as well as reporting in FMC; troubleshooting with the help of packet capture actions; analyzing standard reports and risk.

• Integration – 15%

The last section in the Cisco 300-710 exam encompasses the individuals’ skills, such as customizing Cisco AMP for Networks within Firepower Management Center; configuring Cisco AMP for Endpoints within Firepower Management Center; implementing Threat Intelligence Director for third-party security intelligence feeds. Moreover, the learners should possess the expertise in describing the utilization of Cisco Threat Response for the needs of security investigations; describing Cisco FMC PxGrid Integration using Cisco Identify Services Engine (ISE); describing the functionality of Rapid Threat Containment (RTC) within Firepower Management Center.

Reference: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/sncf-300-710.html