Exam Description and Topics

This is what Cisco says the CSI Exam is about:

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use and implement the principles and axioms presented in the SAFE Small, Midsize and Remote (SMR) User White Paper. Candidates are tested on knowledge of how the following devices can be used to create a complete end-to-end solution: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Host IDS, and the Cisco VPN Client. The SAFE SMR can be downloaded for free from: www.cisco.com/go/safe.

The actual topics are these:

• Security Fundamentals

  • Need for network security

  • Network attack taxonomy

  • Network security policy

  • Management protocols and functions

• Architectural Overview

  • Overview

  • Design fundamentals

  • Safe axioms

  • Security wheel

• Cisco Security Portfolio

  • Overview

  • Secure connectivity virtual private network solutions

  • Secure connectivity the 3000 concentrator series

  • Secure connectivity Cisco VPN optimized routers

  • Perimeter security firewalls Cisco PIX and Cisco IOS firewall

  • Intrusion protection IDS and Cisco secure [sic] scanner

  • Identity Access control solutions

  • Security management VMS and CSPM

  • Cisco AVVID

• SAFE Small Network Design

  • Overview

  • Small network Corporate Internet module

  • Small network Campus module

  • Implementation ISP router

  • Implementation IOS firewall features and configuration

  • Implementation PIX firewall

• SAFE Medium Network Design

  • Medium network Corporate Internet module

  • Medium network Corporate Internet module design guidelines

  • Medium network Campus module

  • Medium network Campus module design guidelines

  • Medium network WAN module

  • Implementation ISP router

  • Implementation edge router

  • Implementation IOS firewall

  • Implementation PIX firewall

  • Implementation NIDS

  • Implementation HIDS

  • Implementation VPN concentrator

  • Implementation Layer 3 switch

• SAFE Remote-User Network Implementation

  • Overview

  • Key devices

  • Threat mitigation

  • Software access option

  • Remote site firewall option

  • Hardware VPN client option

  • Remote site router option

That list covers a great deal of material, which is another reason to consider making the SAFE Implementation Exam the final one in your pursuit of the CCSP certification. In fact, you will find that certain principles of network design and wise use of networking devices that you have seen in other exams run through the entire SAFE concept. If you pay attention to the principles, the information is much easier both to understand and to keep organized in your head.