Trouble Spots
In the IPS v7.0 exam, there are dozens of acronyms, and as a result we need to know what the acronyms mean, where they fit in, and exactly what they do. Examples include SFR, ARR, TVR, PD, ARC, RR. Questions about these, regardless of the format (drag and drop, multiple choice, etc.), will require knowledge the details regarding which attributes are specific components of which IPS subsystems.
Integration between IPS and other products such as IME, MARS, and CSM may be tough if a candidate has never had exposure to those products in conjunction with an IPS appliance before. The CCNP Security IPS 642-627 Official Cert Guide or the official curriculum from the IPS v7 course will be a valuable resource for learning about the integration of those tools with IPS systems.
The IPSv7.0 exam contains scenario based questions, as well as simulations. The simulations have several windows that can be navigated, and if not careful, the full screen of the simulation may not be in view, which will prevent the candidate from seeing all the tabs and options, some of which may be needed to complete a task. Remember to maximize the simulation windows, to verify that all the options intended are available to you. Experience with the live interface of the IPS appliance, and configuring virtually every option, will be important for saving time in the testing environment, as well as the ability to correctly answer or configure what is being requested. Watching the clock, especially in the scenario based and simulation questions will be critical, as there are 70 questions total, 90 minutes to complete them all, and several simulations/simlets to complete.