Why This Cheat Sheet Matters for SCOR
This cheat sheet covers the most important Firewalls, VPNs & IPS concepts tested on the SCOR (SCOR) certification exam. It contains 2 sections with 10 key points that you should memorize before exam day. Master Cisco Firepower, ASA, IPS/IDS, zone-based firewalls, NAT, VPNs (site-to-site, remote access), and network segmentation. Use this as a quick-reference guide during your final review sessions.
Firewall Concepts
- Stateful inspection tracks connection state (TCP handshake, UDP pseudo-state).
- Zone-based firewall: traffic between zones follows configured policies.
- Cisco Firepower: NGFW with IPS, URL filtering, AMP, and application visibility.
- ASA: traditional stateful firewall with VPN support.
- NGFW = stateful firewall + IPS + application awareness + identity awareness.
VPN Types
- Site-to-Site IPsec: IKEv1 (6+3 messages) or IKEv2 (4 messages).
- IPsec modes: Transport (payload encrypted) vs Tunnel (entire packet encrypted).
- Remote Access VPN: AnyConnect (SSL/TLS or IPsec with IKEv2).
- DMVPN: scalable hub-spoke VPN with dynamic spoke-to-spoke tunnels.
- SSL VPN: uses TLS, easier to deploy through firewalls (port 443).
Practice Network Security Questions
Put your knowledge to the test with practice questions.
Cisco Command Quick Reference
Cisco IOS commands follow a hierarchical structure: User EXEC mode (>), Privileged EXEC mode (#), Global Configuration mode (config)#, and Interface Configuration mode (config-if)#. Master the transitions between these modes and the key "show" commands for each technology area — they are heavily tested on every Cisco exam.