Syllabus
Learning Objectives
On Completion of this training the knowledge and skills that a learner will have are mentioned below
- . Identity Management and Secure Access
- Implement device administration
- Compare and select AAA options
- TACACS+
- RADIUS
- Describe Native AD and LDAP
- Describe identity management
- Describe features and functionality of authentication and authorization
- Describe identity store options (i.e., LDAP, AD, PKI, OTP, Smart Card, local)
- Implement accounting
- Implement wired/wireless 802.1X
- Describe RADIUS flows
- AV pairs
- EAP types
- Describe supplicant, authenticator, and server
- Supplicant options
- 802.1X phasing (monitor mode, low impact, closed mode)
- AAA server
- Network access devices
- Implement MAB
- Describe the MAB process within an 802.1X framework
- Flexible authentication configuration
- ISE authentication/authorization policies
- ISE endpoint identity configuration
- Verify MAB Operation
- Implement network authorization enforcement
- adACL
- Dynamic VLAN assignment
- Describe SGA
- Named ACL
- CoA
- Implement Central Web Authentication (CWA)
- Describe the function of CoA to support web authentication
- Configure authentication policy to facilitate CWA
- URL redirect policy
- Redirect ACL
- Customize web portal
- Verify central web authentication operation
- Implement profiling
- Enable the profiling services
- Network probes
- IOS Device Sensor
- Feed service
- Profiling policy rules
- Utilize profile assignment in authorization policies
- Verify profiling operation
- Implement guest services
- Managing sponsor accounts
- Sponsor portals
- Guest portals
- Guest Policies
- Self registration
- Guest activation
- Differentiated secure access
- Verify guest services operation
- Implement posture services
- Describe the function of CoA to support posture services
- Agent options
- Client provisioning policy and redirect ACL
- Posture policy
- Quarantine/remediation
- Verify posture service operation
- Implement BYOD access
- Describe elements of a BYOD policy
- Device registration
- My devices portal
- Describe supplicant provisioning
- . Threat Defense
- Describe TrustSec Architecture
- SGT Classification – dynamic/static
- SGT Transport – inline tagging and SXP
- SGT Enforcement – SGACL and SGFW
- MACsec
- . Troubleshooting, Monitoring, and Reporting Tools
- Troubleshoot identity management solutions
- Identify issues using authentication event details in Cisco ISE
- Troubleshoot using Cisco ISE diagnostic tools
- Troubleshoot endpoint issues
- Use debug commands to troubleshoot RADIUS and 802.1X on IOS switches and wireless controllers
- Troubleshoot backup operations
- . Threat Defense Architectures
- Design highly secure wireless solution with ISE
- Identity Management
- 802.1X
- MAB
- Network authorization enforcement
- CWA
- Profiling
- Guest Services
- Posture Services
- BYOD Access
- . Design Identity Management Architectures
- Device administration
- Identity Management
- Profiling
- Guest Services
- Posturing Services
- BYOD Access
The Implementing Cisco Secure Access Solutions (300-208)
The Implementing Cisco Secure Access Solutions (300-208) at GATS primarily focuses on providing the skill set and knowledge necessary for a secured network infrastructure using Cisco products. On completing the course the candidate gets thorough understanding of the components and architecture of secure access, by utilizing 802.1X and Cisco Trust Sec. The course covers the Cisco Identity Services Engine (ISE) architecture, solution, and components as an overall network threat mitigation and endpoint control solutions. It also includes the fundamental concepts of bring your own device (BYOD) using posture and profiling services of ISE.
Exam and Certification
- Exam Code : 300-308
- Exam Duration: 90 minutes
- No. of Questions: 60 to 70 questions
Candidates can prepare for this exam by taking the Implementing Cisco Secure Access Solutions (300-208) course from GATS.
How to register for the exam ?
Visit a Pearson VUE Authorized exam center and get your exam registered.
You can also register online for the exam from
www.pearsonvue.com
What documents do you require for the exam ?
2 photo ID’s which have your name correctly registered along with your signature are required from any of the following:
Passport, Driver’s License, Pan Card, UID issued by Govt., Voter’s IDetc