CCNP Security study guide
CCNP Security · Work through your exam, one topic at a time.
CCNP Security is Cisco's professional-level security certification, aimed at engineers who design, deploy, and operate Cisco security solutions rather than at candidates seeking their first security role. It sits above associate-level security credentials and is typically pursued by network and security engineers, SOC and firewall administrators, and consultants who already work with Cisco security products day to day. The exam blueprint is organised into five domains: network security, cloud security, content security, endpoint protection and detection, and secure access. Each domain spans both policy design and hands-on configuration, so success depends on combining conceptual understanding with practical work in labs. The CCNP Security study guide has 5 sections and about 1,282 words.
01Network Security
Cisco Secure Firewall is usually managed through Firepower Management Center (FMC) with Firepower Threat Defense (FTD) devices. Know interface and zone design, access control policies, NAT order, and routing.
268 words, about 1 min02Cloud Security
Cloud security in CCNP Security centers on Cisco Umbrella and cloud-delivered security: DNS-layer security, intelligent proxy, cloud firewall, CASB, DLP, and secure internet gateway functions. Understand SASE and SSE terminology: policy enforced near the user, identity-aware, and delivered as a service.
273 words, about 1 min03Content Security
Content security covers email and web traffic. For email, know Cisco Secure Email: listeners, Host Access Table (HAT), recipient access tables, mail policies, content filters, message tracking, SPF/DKIM/DMARC authentication, outbreak filters, AMP, and encryption.
253 words, about 1 min04Endpoint Protection and Detection
Cisco Secure Endpoint (formerly AMP for Endpoints) combines cloud reputation, file analysis, exploit prevention, behavioral protection, and endpoint detection and response (EDR). Know the connector, policies, exclusions, offline versus online states, quarantine, device control, and isolation.
243 words, about 1 min05Secure Access
Secure access is identity-centric: Cisco ISE with 802.1X, MAB, web authentication, guest and BYOD flows, profiling, posture, and authorization policies. Know EAP-TLS (certificate), PEAP-MSCHAPv2 (credentials), and MAB (MAC address) tradeoffs.
245 words, about 1 min