Contact Us

« Important Announcement » Contact Us 877-206-0106 | USA Flag

Thank you for your interest in LearnQuest.

Your request is being processed and LearnQuest or a LearnQuest-Authorized Training Provider will be in touch with you shortly.


Thank you for your interest in Private Training.

We look forward to helping you develop the perfect training solution to help you meet your company's goals.

For immediate assistance, speak with one of our representatives using the chat module below. Otherwise, LearnQuest or a LearnQuest-Authorized Training Provider will be in touch with you shortly.


Thank you for your interest in LearnQuest!

Now, you will be able to stay up-to-date on our latest course offerings, promotions, and training discounts. Watch your inbox for upcoming special offers.


Date: xxx

Location: xxx

Time: xxx

Price: xxx

Please take a moment to fill out this form. We will get back to you as soon as possible.

All fields marked with an asterisk (*) are mandatory.

Designing and Implementing Secure Cloud Access for Users and Endpoints

4,500 USD
5 Days
Classroom Training, Online Training
Cisco Training

AWS Training Pass

Take advantage of flexible training options with the AWS Training Pass and get Authorized AWS Training for a full year.

Learn More

Prices reflect a 22.5% discount for IBM employees (wherever applicable).
Prices reflect a 24% discount for Kyndryl employees (wherever applicable).
Prices reflect the Accenture employee discount.
Prices shown are the special AWS Partner Prices.
Prices reflect the Capgemini employee discount.
Prices reflect the UPS employee discount.
Prices reflect the ??democompanyname?? employee discount.
GSA Private/Onsite Price: ??gsa-private-price??
For GSA pricing, please go to GSA Advantage.

Class Schedule

Delivery Formats

Sort results

Filter Classes

Guaranteed to Run





    Sorry, there are no public classes currently scheduled in your country.

    Please complete this form, and a Training Advisor will be in touch with you shortly to address your training needs.

View Global Schedule

Course Description


The Designing and Implementing Secure Cloud Access for Users and Endpoints training teaches you the skills for designing and implementing cloud security architecture, user and device security, network and cloud security, cloud application and data security, cloud visibility and assurance, and responding to cloud threats.

This training prepares you for the 300-740 SCAZT v1.0 exam. If passed, you earn the Cisco Certified Specialist – Security Secure Cloud Access certification and satisfy the concentration exam requirement for the Cisco Certified Network Professional (CCNP) Security certification.


This training will help you:
  • Attain skills for designing and implementing cloud security architecture, user and device security, network and cloud security, cloud application and data security, cloud visibility and assurance, and responding to cloud threats
  • Gain knowledge for protocols, solutions, and designs to acquire professional-level and expert-level cloud design and implementation roles
After completing this training, you should be able to:
  • Compare and contrast the National Institute of Standards and Technology (NIST), Cybersecurity and Infrastructure Security Agency (CISA), and Defense Information Systems Agency (DISA) security frameworks, and understand the importance of adopting standardized frameworks for cybersecurity in enhancing an organization's security posture
  • Describe the Cisco Security Reference Architecture and its five main components
  • Describe commonly deployed use cases and recommend the necessary capabilities within an integrated security architecture to address them effectively
  • Describe the Cisco Secure Architecture for Everyone (SAFE) architecture
  • Review the benefits, components, and process of certificate-based authentication for both users and devices
  • Enable Duo multi-factor authentication (MFA) to protect an application from the Duo Administration Portal, and then configure the application to use Duo MFA for user login authentication
  • Install Cisco Duo and implement its multifactor authentication on remote access virtual private network (VPN)
  • Configure endpoint compliance
  • Review and demonstrate the ability to understand Stateful Switchover (SSO) using security assertion markup language (SAML) or OpenID Connect together with Cisco Duo
  • Describe Cisco software-defined wide-area network (SD-WAN) on-box and integrated threat prevention security services
  • Describe SD-WAN on-box and integrated content filtering security services
  • Describe the features and capabilities of Cisco Umbrella Secure Internet Gateway (SIG), such as DNS Security, Cloud-Delivered Firewall (CDFW), intrusion prevention systems (IPS), and interaction with Cisco SD-WAN
  • Introduce the reverse proxy for internet-facing applications protections
  • Explore the Cisco Umbrella SIG use case to secure cloud application access, the limitations and benefits of the solution, and the features available to discover and control access to cloud delivered applications
  • Explore the Cisco ThousandEyes capabilities for monitoring the Cisco SD-WAN deployment
  • Describe the challenges of accessing SaaS applications in modern business environments and explore the Cisco SD-WAN Cloud OnRamp for SaaS solution with direct or centralized internet access
  • Introduce the Cisco Secure Firewall platforms, use cases, and security capabilities
  • Demonstrate a comprehesive understanding of web application firewalls
  • Demonstrate a comprehensive understanding of Cisco Secure Workload capabilities, deployment options, agents, and connectors
  • Demonstrate a comprehensive understanding of Cisco Secure Workload application dependency mapping and policy discovery
  • Demonstrate a comprehensive understanding of common cloud attack tactics and mitigation strategies
  • Demonstrate a comprehensive understanding of multicloud security requirements and policy capabilities
  • Introduce the security issues with the adoption of public clouds and common capabilities of cloud visibility and assurance tools to mitigate these issues
  • Introduce Cisco Secure Network Analytics and Cisco Security Analytics and Logging
  • Describe Cisco Attack Surface Management
  • Describe how Application Program Interfaces (APIs) and automation can help in troubleshooting cloud policy, especially in the context of misconfigurations
  • Demonstrate a comprehensive knowledge of the appropriate responses to cloud threats in specific scenarios
  • Demonstrate the comprehensive knowledge required to use automation for cloud threat detection and response


  • Network Engineers
  • Network Security Engineers
  • Network Architects
  • Sales/Presales Engineers


    The knowledge and skills you are expected to have before attending this training are:
    • Basic understanding of enterprise routing
    • Basic understanding of WAN networking
    • Basic understanding of Cisco SD-WAN
    • Basic understanding of Public Cloud services
    These skills can be found in the following Cisco Learning Offerings:
    • Implementing and Administering Cisco Solutions 2.0
    • Implementing Cisco SD-WAN Solutions 3.0
    • Cisco SD-WAN Operation and Deployment 2.0


Course Outline 1. Industry Security Frameworks 2. Cisco Security Reference Architecture Fundamentals 3. Cisco Security Reference Architecture Common Use Cases 4. Cisco SAFE Architecture 5. Certificate-Based User and Device Authentication 6. Cisco Duo Multifactor Authentication for Application Protection 7. Cisco Duo with AnyConnect VPN for Remote Access 8. Introducing Cisco ISE Endpoint Compliance Services 9. SSO using SAML or OpenID Connect 10. Deploying On-Premises Threat Prevention 11. Examining Content Filtering 12. Exploring Cisco Umbrella SIG 13. Reverse Proxy 14. Securing Cloud Application with Cisco Umbrella SIG 15. Exploring Cisco SD-WAN ThousandEyes 16. Optimizing SaaS Applications 17. Security Policies for Remote Access VPN 18. Cisco Secure Access 19. Cisco Secure Firewall 20. Web Application Firewall 21. Cisco Secure Workload Deployments, Agents, and Connectors 22. Cisco Secure Workload Structure and Policy 23. Cloud Security Attacks and Mitigations 24. Multicloud Security Policies 25. Cloud Visibility and Assurance 26. Cisco Secure Network Analytics and Cisco Secure Analytics and Logging 27. Cisco XDR 28. Cisco Attack Surface Management 29. Cloud Applications and Data Access Verifications 30. Automation of Cloud Policy 31. Response to Cloud Threats 32. Automation of Cloud Threat Detection and Response Lab Outline 1. Explore Cisco SecureX 2. Windows Client BYOD Onboarding Interactive Activity 3. Use Cisco Duo MFA to Protect the Splunk Application 4. Integrate the Cisco Duo Authentication Proxy to Implement MFA for Cisco Security Secure Firewall AnyConnect Remote Access VPN 5. Configure Cisco ISE Compliance Services 6. Configure Threat Prevention 7. Implement Web Security 8. Deploy DIA Security with Unified Security Policy 9. Configure Cisco Umbrella DNS Policies 10. Deploy Cisco Umbrella Secure Internet Gateway 11. Implement CASB Security 12. Microsoft 365 SaaS Testing by Using Cisco ThousandEyes 13. Configure Remote Access VPN on the Cisco Secure Firewall Threat Defense 14. Configure Cisco Secure Firewall Policies 15. Explore Cisco Secure Workload 16. Explore the ATT&CK Matrix Cloud-Based Techniques 17. Explore Cisco Secure Network Analytics 18. Explore Cisco XDR Incident Response Tasks
Get Personalized Training Solutions

Get Personalized Training Solutions

Need a personalized solution for your Training? Contact us, and our training advisors will guide you.

Contact Us Now

Need Help?

Need Help? We're Here!

Have questions about courses, instruction, materials covered, or finding the right fit? We're here to help!

Reach Out To Us

2023 Top 20 Training Industry Company - IT Training

Need Help?

Call us at 877-206-0106 or e-mail us at

Save Up to $500 This Summer

Soak up new skills this summer with exclusive discounts on our popular topics and courses.


Summer 2024 Promotion

IBM TechXchange Conference 2024

October 21-24 | Mandalay Bay, Las Vegas

Save $127 with Code: TECHXCHANGE10

Offer Expires June 30, 2024

Self-Paced Training Info

Learn at your own pace with anytime, anywhere training

  • Same in-demand topics as instructor-led public and private classes.
  • Standalone learning or supplemental reinforcement.
  • e-Learning content varies by course and technology.
  • View the Self-Paced version of this outline and what is included in the SPVC course.
  • Learn more about e-Learning

Course Added To Shopping Cart







Self-Paced Training Terms & Conditions


Exam Terms & Conditions


Sorry, there are no classes that meet your criteria.

Please contact us to schedule a class.

STOP! Before You Leave

Save 0% on this course!

Take advantage of our online-only offer & save 0% on any course !

Promo Code skip0 will be applied to your registration

Nothing yet
here's the message from the cart

To view the cart, you can click "View Cart" on the right side of the heading on each page
Add to cart clicker.

Purchase Information

??elearning-coursenumber?? ??coursename??
View Cart


Date: xxx

Location: xxx

Time: xxx

Price: xxx

#Please take a moment to fill out this form. We will get back to you as soon as possible.#

#All fields marked with an asterisk (*) are mandatory.#

If you would like to request a quote for 5 or more students, please contact to be assigned an account representative.

Need more Information?

Speak with our training specialists to continue your learning journey.


Delivery Formats


By submitting this form, I agree to LearnQuest's Terms and Conditions

heres the new schedule
This website uses third-party profiling cookies to provide services in line with the preferences you reveal while browsing the Website. By continuing to browse this Website, you consent to the use of these cookies. If you wish to object such processing, please read the instructions described in our Privacy Policy.
Your use of this LearnQuest site affirms your consent to our use of session and persistent cookies to track how you use our website.