otftetfie cisco. Cisco ASA Express Security (500-260) Exam Description: The Cisco ASA Express Security (SAEXS) exam is a 60 minute, 45 - 55 question, assessment that assesses the candidate on the skills required to understand how the ASA functions, including FirePOWER services for ASA, while focusing on how to deploy and manage the Cisco ASA. This, exam is required for partners to attain ASA Express Security Specialization, ‘The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without ee Blue text is Volume 1 25% 1.0 ASA Product Overview: Platform and Positioning 1.1 Give a high-level overview of Cisco ASA NGFW solution, platform, and security services Bg 20-23 1.2 Describe management tools °g 25-27 1.3. Describe base features 1.4 Describe license features 15 Describe platform and performance pg 31-34 1.6 Describe where Cisco ASA platforms are placed in the network 17 Configure basic connectivity 1.7.a Managing boot process pg 40 - 44 1.7.b Managing Cisco ASA with ASDM 2sdm image command L.7.c Basic Cisco ASDM features PG 47 & 50 & 58 ~ 67 17d Basicupgrade copy to flash, Boot system command, pg 69 1.7.e Interface security level #i lo goes. lo-hi dies, cames dies 17 Configure static route, DHCP, NTP Pg 87 1.7.g Configure VLANs pg 96 - 98 1.8 Implement routing 1.8.a Configure static routing 1.8b Configure dynamic routing PF 126 pg 106 1.9 Configure backup and restore Pd 121 1.10 Configure basic access control foundation pg 188 - 190 1.10. Configure interface ACL Pg 190-191,203 1.10.b Configure global ACL Pg 211 1.10.c Configure object groups Pas 219-221 1.10.4 Implement NAT Pg 135, 140, 111 Destrbe active/standby HA Ps 218, 22% 22075 Cisco Sysioms, ne, This dosument ls Cisco Publ. Paes35% 2.0 2a 22 23 24 25 26 27 28 29 2.10 25% 3.0 Ba 32 33 34 Green Text is Volume 2 ASA FirePOWER Services: Positioning and Best Practices Positioning, platforms, licensing, and services 3 ©, 9-10, 16-20, Management considerations 2.2.a Cisco FireSIGHT Management Center 2, 12 22.b Cisco Adaptive Security Device Manager 2.2.¢ Cisco Security Manager 2.2.d SFR module management interfaces pg 21-26 SFR initialization and traffic redirection P9 26-20, 35, 36-38 FireSIGHT policies and system basics FireSight to FirePower registration, pg 55,56 24a Policytypes pg 63-64 24.b Security zones ®g 78 Zens 2.4.¢ Active directory integration Pg 85 and pg 88 only 24.d Network discovery Ps 88 optional Implement intrusion policy py 100-103 Implement access policies Ps 99 -95 Implement file policies P= 109-210 Implement user context Implement system and health policies eg 56-68, 70-72 Event and system monitoring 2.10.a Impact levels PS 122 2.10.b Indications of compromise po 116 240. Eventtypes just be aware that they exist 2.10.d Monitoring and dashboards ASA VPN Features, Positioning and Best Practices Introduction Py 286 Describe management of Cisco ASA VPN Pg 286 Describe remote access VPN 3.3.a Cisco AnyConnect Mobile Security Client *9 288 3.3.b Cisco AnyConnect Mobile Security Client: Network Access Manager Pg 289 3.3.¢ Configure full-tunnel SSLVPN. 5 307 3.3.4 Configure Web VPN Pg 236, 240, 247 3.3.e Configure XML profiles Pg 266 - 269 3.3. OSintegration options 5 236 - 238 3.3.g Customize userinterface pg 270 - 276 Describe site-to-site VPN TPSEC tunnel ot covered on this course [015 Caco Spams, Ts documents Gaza Pub Poaet10% 4.0 44 az 43 44 5% 5.0 Sa 5.2 ASA Licensing Introduction Describe feature licensing 42a Security plus 4.2. Websecurity essentials Ps 152-153 42.¢ Cloud web security 5; repower Licensing Pg 57-60 4.24 Botnet filtering 4.2 Cisco AnyConnect mobile security premium and essentials Pg 296-303 424 Security context Describe license changes 43.a Permanent 43.b Time-based 43.c Share Cisco AnyConnect Describe license management ASA Cloud Web Security Implement cloud web security S.L.a Configure CWS proxy on Cisco ASA 498-*59 5.ib Cisco ScanCenter integration 5 ‘180 ~ 181 ‘AMP and CTA AMP Pg 199 and CTA pg 202 215 Gea Sytem, ne Ths documents ico Publi Pages