CCNP Security stands for the Cisco Certified Network Professional Security Certification program is specifically aligned for the job profile of the Cisco Network Security Engineer who would be responsible for providing and maintaining Security in Routers, Switches, Networking devices, and appliances, also he/she would be responsible for choosing, supporting, deploying, and troubleshooting Firewalls, VPNs, and IDS/IPS solutions for their networking environments.
Each Professional level exam would be valid for exactly 3 years from the date which they have passed, so if you have passed the 300-206 SENSES exam, it will be valid for 3 years. For further details regarding the validity, you can refer to the Expiration section of the Cisco Certification Exams page.
In order to earn the Cisco CCNP security certification , would have to pass the following exams:
300-208 SISAS:
The 300-208 Implementing Cisco Secure Access Solutions or SISAS exam is going to validate the network security engineer knowledge of the architecture and components of secure access by utilizing the 802.1X and Cisco TrustSec, including the Cisco Identity Services Engine or ISE solution, architecture, and components as an overall endpoint control solution and network threat mitigation. It is also going to validate the knowledge of the fundamental concepts of BYOD using the profiling and posture services of the Cisco ISE. The candidates can prepare for this exam by taking the Implementing Cisco Secure Access Solutions or SISAS course.
300-206 SENSS
The 300-206 Implementing Cisco Edge Network Security Solutions or SENSS exam is going to validate the knowledge of a network security engineer to implement and configure security on Cisco networks perimeter edge devices like the Cisco switch, Cisco router, or Cisco ASA firewall. This exam is going to focus on the technologies used to strengthen the security of a network perimeter like the Network Address Translation or NAT, application inspection and Cisco ASA policy, and a zone-based firewall on Cisco routers. Candidates can prepare themselves for this exam by taking the Implementing Cisco Edge Network Security Solutions or SENSS training course.
300-209 SIMOS
The 300-209 Implementing Cisco Secure Mobility Solutions or SIMOS exam examines the network security engineer on a variety of virtual private network or VPN solutions that Cisco has made available on the Cisco IOS and Cisco ASA firewall platforms. Additionally, the exam is also going to validate the knowledge necessary to properly implement the highly secure remote communications throughout VPN technology, like remote-access SSLVPN and site-to-site VPN, DMVPN or FlexVPN. For the preparation of this exam, the candidates will have to take the Implementing Cisco Secure Mobility Solutions or SIMOS training course.
300-210 SITCS
The Final exam of this module is the Implementing Cisco Threat Control Solutions or SITCS Exam. This exam will be testing a network security engineer on advanced firewall configuration and architecture along with the Cisco next-generation firewall, utilizing identity and access policies. Some older technologies have been removed and include the coverage for both Cisco AMP or Advanced Malware Protection and Cisco Firepower NGIPS. This exam will be covering the integration of Intrusion Prevention System or IPS and context-aware firewall components. It is also going to contain the Web (Cloud) and Email Security solutions. For this examination, the candidates can prepare themselves by taking the Implementing Cisco Threat Control Solutions or SITCS course.
To achieve the CCNP Security Certification, you will have 3 years in order to complete all of the necessary requirements which will start from the date of passing the first exam. For example, if a candidate passes their first CCNP Security exam, i.e. SENSS, exam today, then he or she will have total three years in order to complete the remaining 3 exams: which are the SISAS, SIMOS, and SITCS.
So if you are planning to take this exam, you will have to gain the knowledge regarding the entire three exams, you might go for the official Cisco Training, which will cost you around $4000. You may even select the SPOTO CCIE Club, as they are way cheaper and efficient than the other training providing organizations.