Expert Level Knowledge and Experience
The CCIE Security Programs recognizes individuals who have the knowledge and skills to implement, maintain and support extensive Cisco Network Security Solutions using the latest industry best practices and technologies
Benefits of CCIE Security Certification
The CCIE Security Certification is the industry standard for recognition and rewards for Network Security Engineers who have demonstrated expert level performance in implementation, configuration and troubleshooting of Cisco network security solutions . Attaining and maintaining this performance-based, practical certification proves skills only achievable by distinct experts in the network security field and carries a prestige and honor that is envied by security professionals worldwide. Not only must a Security CCIE prove their theoretical knowledge of security best practices, they must perform them in a lab environment with real equipment using real-world scenarios. Therefore, the CCIE Security is considered one of the most advanced Network Security Certifications available and qualifies candidates to manage, lead, and design the most complex network security teams and projects available in the Industry.
Requirements for Certification
There are no formal prerequisites for CCIE certification. Other professional certifications or training courses are not required. Instead, candidates must first pass a written qualification exam and then the corresponding hands-on lab exam. You are expected to have an in-depth understanding of the topics in the exam blueprints and strongly encouraged to have three to five years of job experience before attempting certification. You can review the exam preparation materials included on this page for more information.
Step One: CCIE Security Written Exam
You must pass the two-hour, written qualification exam covering networking concepts and some equipment commands before you are eligible to schedule the lab exam.
CCIE Security Written
350-018 CCIE Security Exam
Duration: 120 minutes (90-110 questions)
The written exam is a two-hour, multiple choice test with 100 questions covering areas such as security protocols, operating systems, application protocols, security technologies, and Cisco security applications. All exam materials are provided and no outside reference materials are allowed.
CCIE Security Lab Exam
Core Knowledge Questions
The CCIE Security lab exam begins with a brief Core Knowledge section, consisting of four questions requiring a short typed response, generally no more than four or five words. Candidate have up to 30 minutes to complete the four questions and may move on to the rest of the exam if they finish early. No access to the Cisco documentation is provided during this part of the exam and candidates may not return to the Core Knowledge questions once they have moved on. Core Knowledge questions cover material from the list of exam topics and well-prepared candidates should be able to answer the questions without difficulty. All candidates must pass the Core Knowledge section in order to achieve CCIE certification.
Effective August 15, 2011, the CCIE Security Lab Exam, in all global locations, will no longer include the four open-ended Core Knowledge questions. The removal of Core Knowledge questions allow candidates to utilize the total lab time for configuration and troubleshooting. The total lab time will remain eight hours.
Lab Environment
The Cisco documentation CD is available in the lab room, but the exam assumes knowledge of the more common protocols and technologies. Documentation can only be navigated using the index; the search function has been disabled. No outside reference materials are permitted in the lab room. You must report any suspected equipment issues to the proctor during the exam; adjustments cannot be made once the exam is over.
Lab Exam Grading
Each question on the lab has specific criterion. The labs are graded by proctors who ensure all the criterion are met and points are awarded accordingly. The proctors use automatic tools to gather information from the routers to perform some preliminary evaluations, but the final determination of a correct or incorrect configuration is done by a trained proctor.
Results
You can review your lab exam results online (login required), usually within 48 hours. Results are Pass/Fail and failing score reports indicate major topic areas where additional study and preparation may be useful.
Reevaluation of Lab Results
You may request a reevaluation of results for Routing and Switching, Security and Service Provider labs for up to 14 days following your exam date. Use the link next to your lab record called "Request for Reread". Due to the equipment used, rereads are not available for the Voice and Storage Networking exams. Each reread costs US$250 plus any applicable local taxes. Payment is made online via credit card and your card will be charged upon receipt of the request. You may not cancel the reread request once the process has been initiated and refunds are only given when the results change from Fail to Pass.
A reread consists of a second proctor loading your configurations onto a rack to recreate the test and rescore the entire exam. This process may take up to three weeks after receipt of payment. Only one reread per lab attempt is permitted. The result of the reread is an updated score report with success rates for each major section. Be aware that scores may decrease. Exams receive a Pass mark only when the total exam score exceeds 80%. Before requesting a reread, consider that, historically, only 0.3% of exams have been changed from Fail to Pass
Duration: 120 minutes (90-110 questions)
The written exam is a two-hour, multiple choice test with 100 questions covering areas such as security protocols, operating systems, application protocols, security technologies, and Cisco security applications. All exam materials are provided and no outside reference materials are allowed.
Step Two: CCIE Security Lab Exam
The eight-hour lab exam tests your ability to get a secure network running in a timed test situation. You must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam. If you do not pass the lab exam within three years of passing the written exam, you must retake the written exam before being allowed to attempt the lab exam again.
CCIE Security Lab Exam
Configuring a Network to Given Specifications
The CCIE lab exam is an eight-hour, hands-on exam which requires you to configure a series of secure networks to given specifications. Knowledge of troubleshooting is an important skill and candidates are expected to diagnose and solve issues as part of the CCIE lab exam.Core Knowledge Questions
The CCIE Security lab exam begins with a brief Core Knowledge section, consisting of four questions requiring a short typed response, generally no more than four or five words. Candidate have up to 30 minutes to complete the four questions and may move on to the rest of the exam if they finish early. No access to the Cisco documentation is provided during this part of the exam and candidates may not return to the Core Knowledge questions once they have moved on. Core Knowledge questions cover material from the list of exam topics and well-prepared candidates should be able to answer the questions without difficulty. All candidates must pass the Core Knowledge section in order to achieve CCIE certification.
Lab Environment
The Cisco documentation CD is available in the lab room, but the exam assumes knowledge of the more common protocols and technologies. Documentation can only be navigated using the index; the search function has been disabled. No outside reference materials are permitted in the lab room. You must report any suspected equipment issues to the proctor during the exam; adjustments cannot be made once the exam is over.
Lab Exam Grading
Each question on the lab has specific criterion. The labs are graded by proctors who ensure all the criterion are met and points are awarded accordingly. The proctors use automatic tools to gather information from the routers to perform some preliminary evaluations, but the final determination of a correct or incorrect configuration is done by a trained proctor.
Results
You can review your lab exam results online (login required), usually within 48 hours. Results are Pass/Fail and failing score reports indicate major topic areas where additional study and preparation may be useful.
Reevaluation of Lab Results
You may request a reevaluation of results for Routing and Switching, Security and Service Provider labs for up to 14 days following your exam date. Use the link next to your lab record called "Request for Reread". Due to the equipment used, rereads are not available for the Voice and Storage Networking exams. Each reread costs US$250 plus any applicable local taxes. Payment is made online via credit card and your card will be charged upon receipt of the request. You may not cancel the reread request once the process has been initiated and refunds are only given when the results change from Fail to Pass.