Share your SNAA Experience
As you know, the CCSP certification requires you to pass 3 exams: SNRS, SNAF, IPS and one of three optional exams CANAC, MARS or SNAA but currently this site has only materials for CCNA Security 640-553. Many candidates have requested us to put up materials for other exams but it is a time-consuming work. In the mean time, we created the “Share your experience” for the SNAA exam. We really hope anyone who read securitytut, 9tut, digitaltut, certprepare, networktut and voicetut contribute to these sections as your experience is invaluable for CCSP learners to complete their goals.
Please share with us your experience after taking the SNAA exam, your materials, the way you learned, your recommendations…
Hello everybody, I can’t load ASA 5505 image from tftp server. Could u anybody help me.
Clear SNAA few days back. For the SNAA the focus seems to be heavily towards the ASDM GUI.
The abstract level/theory content is I would say on par with what would be expected on the SNAF. The only additional content I thought was is in the WebVPN area with the plugins and secure desktop from what I saw in the BluePrints.
Material used
Videos
1. Cisco Live Training CCSP SNAA BRKCRT-1280. A one hour Cisco seminar that lets you get a feel for what are the important area to learn about
2. CBT Nuggets SNAA
Reading
1. Cisco Student guide for SNAA (you might notice a lot of similarity with the CBT Nuggets though)
Lab Material
1. GNS 0.72 + ASA image 8.02 + ASDM 6.15
What you might want to get familiar with
1. Regular expressions. Good examples in the student guide
2. Ability to completely dissect MPF from a GUI perspective. Meaning drill down from service policy and see what class maps and policy maps are in it and then be able to figure out how the traffic is inspected/blocked/logged.
a. Watch out for if it is an AND condition or an OR condition
3. Practice one full lab of setting up for WebVPN.
- Setup a router as a self signed CA server
- Setup ASA to gets it own identity cert from the router
- Setup ASA for basic WebVPN with book marks and AnyConnect client.
- Reverse route injection
- Experiment with port forwarding. Setup port forward tunnel to router
- Add to this now say limiting get command / url length for http
By the time you get done with this mini use case you become reasonably proficient with
a. navigating the ASDM.
b. Knowing the peril of clock time not being synchronized and why NTP is important.
c. Learning about certificate enrollment, identity certs
d. Customizing WebVPN home page for port forwarding. Seeing that telnet 127.0.0.1 5023 redirect to 23
e. ACL + NAT selector for VPN
f. Bit about routing. See the routing table on the PC and note the loopback adapter if using anyconnect client and how the PC routing table matches the VPN ACL on the loopback
On ASA see the static route injected from the address allocated on the VPN pool
@toy_man,
you cleared SNAF and SNAA in just few weeks?
you said on SNAF that you cleared SNAF a couple days ago, you posted there October 30th, 2010. After 4 days you cleared SNAA a few days back. That’s fast, way to go!
@ykzrenev.
Well prepared for entire series CCNA Sec, CCSP (4 papers) for about total of approx 6 months and making sure I worked through almost all the lab guides exercises possible in GNS. Have scorched my lap with the overheated cpu on my Dell laptop
. Only for the Active/Standby and Active/Active did I have to use a physical rack.
Then took the CCSP 4 papers at the rate of 1 a week!!!
CCIE Security next on the agenda. Perhaps written no later than end Dec 2010 and hopefully the lab in Mar/Apr 2011. Current availability of earliest lab dates indicate free slots in this time frame.
Does anyone knows about the asdm configurations? are there only questions to answer about it or do i have to configure on the asdm asa software?
I take SNAA some days ago with 1000/1000.
The exam has 59 questions, 90 min time + 30 min for none native speakers and a minimum of 811 points. There was no lab simulation but 1 simlet with 5 questions. The other questions where mcq.
I study with:
- original Cisco docs
- CBT Nuggets
- ASA 5505
- ActualTest and CertifyMe
For the simlets you have to learn and understand ASDM 6.x. Have a deeper look to Service Policy Rules, Class Maps, Inspect Maps under Configuration button to learn to configure Layer-3/4 and Layer-7 Inspection .
Be aware, most of the questions in older AT have only 4 choices for the right answer, in exam you have 5 to 7 choices for about 60% of the answer. So you have to learn the answers not the position.
A newer version of AT can be found here: http://www.examcollection.com/cisco/Cisco.ActualTests.642-515.v2011-01-21.by.NoName.80q.vce.file.html
any one please say whether the options in exam are same or re arranged. If the options are same it is like dumps by Noname(80q) or dumps by taylor 72q.pls
Are the AT questions/answers pretty close to the SNAA exam? without regard to the number of answers…
Actually orders were changed. 72 q is valid and 80q are valid.
Passed the exam
Hi everyone I should take exam 24th March; can anyone says me if all questions are from Pass4Sure v.2.73?
I am preparing for this exam today. Hope that everything have not changed as all of you commented
Have just pass SNAA 1000/1000, 59 questions with 1 simplet (5 question)
Noname ‘s vce 100% valid, thanks him for his effort.
Next stop is IPS
Pls assist me with the latest dump for 640-553. My email is mamakola@hotmail.com. Thanks
just a question does SNAA have any simulation in exam or its all questions at all .