31 days before your CCNA security exam : a day-by-day review guide for the IINS 210-260 certification exam

Content: Introduction xxii Digital Study Guide xxvi Day 31: Common Security Principles 1 CCNA Security 210-260 IINS Exam Topics 1 Key Topics 1 Confidentiality, Integrity, and Availability (CIA) 1 SIEM 1 Common Network Security Terms 2 Security Zones 2 Study Resources 4 Day 30: Common Security Threats 5 CCNA Security 210-260 IINS Exam Topics 5 Key Topics 5 Network Attacks 5 Reconnaissance Attacks 5 Access Attacks 5 DoS and DDoS Attacks 6 Social Engineering 7 Types 7 Defenses 8 Malware 8 Data Loss 9 Study Resources 10 Day 29: Cryptographic Technologies 11 CCNA Security 210-260 IINS Exam Topics 11 Key Topics 11 CIA Triad 11 Key Exchange and Management 11 Hash Algorithms 12 Well-known Hash Functions 12 Authentication Using Hashing 13 Hashing in Cisco Products 14 Symmetric and Asymmetric Encryption 15 Encryption Overview 15 Symmetric Encryption Algorithms 15 Asymmetric Encryption Algorithms 16 Digital Signatures and RSA Certificates 18 Study Resources 19 Day 28: PKI and Network Security Architectures 21 CCNA Security 210-260 IINS Exam Topics 21 Key Topics 21 Public Key Infrastructure 21 PKI Terminology, Components, and Classes of Certificates 22 PKI Topologies 23 PKI Standards 24 PKI Operations 25 Enrollment and Revocation 27 Network Architectures and Topologies 28 Campus-Area Network (CAN) 28 WAN and Branch/SOHO 29 Data Center 31 Cloud and Virtual Networks 31 Study Resources 33 Day 27: Secure Management Systems 35 CCNA Security 210-260 IINS Exam Topics 35 Key Topics 35 In-band and Out-of-band Management 35 Management Plane Security 36 Access Security 36 SSH/HTTPS 38 Syslog 38 Simple Network Management Protocol (SNMP) 39 Network Time Protocol (NTP) 42 Secure Copy Protocol (SCP) 43 Study Resources 44 Day 26: AAA Concepts 45 CCNA Security 210-260 IINS Exam Topics 45 Key Topics 45 AAA 45 RADIUS and TACACS+ 46 RADIUS 46 TACACS+ 47 ACS and ISE 48 ACS 49 ISE 49 Study Resources 50 Day 25: TACACS+ and RADIUS Implementation 51 CCNA Security 210-260 IINS Exam Topics 51 Key Topics 51 Server-based AAA Authentication 51 Server-based AAA Authorization 53 Server-based AAA Accounting 54 Server-based AAA Verification and Troubleshooting 55 Study Resources 58 Day 24: 802.1X 61 CCNA Security 210-260 IINS Exam Topics 61 Key Topics 61 802.1X 61 Terminology and Concepts 61 Configuration and Verification 63 Study Resources 65 Day 23: BYOD 67 CCNA Security 210-260 IINS Exam Topics 67 Key Topics 67 BYOD Architecture 67 BYOD Management 69 Study Resources 72 Day 22: IPsec Technologies 73 CCNA Security 210-260 IINS Exam Topics 73 Key Topics 73 VPNs 73 IPsec Framework 76 IPsec Protocols 77  AH 77  ESP 78  IPsec Modes of Operations 78 Confidentiality 79 Data Integrity 79 Origin Authentication 80 Key Management 80 Suite B Cryptographic Standard 81 IKE 81 IKEv1 Phase 1 82 IKEv1 Phase 2 83 IKEv2 83 Study Resources 84 Day 21: Clientless Remote-Access VPN 85 CCNA Security 210-260 IINS Exam Topics 85 Key Concepts 85 Clientless SSL VPN Concepts 85 Clientless SSL VPN Configuration 87 Task 1: Launch Clientless SSL VPN Wizard from ASDM 88 Task 2: Configure the SSL VPN URL and Interface 88 Task 3: Configure User Authentication 89 Task 4: Configure User Group Policy 90 Task 5: Configure Bookmarks 90 Clientless SSL VPN Verification 95 Study Resources 97 Day 20: AnyConnect Remote Access VPN 99 CCNA Security 210-260 IINS Exam Topics 99 Key Topics 99 AnyConnect SSL VPN Concepts 99 SSL VPN Server Authentication 100 SSL VPN Client Authentication 100 SSL VPN Client IP Address Assignment 100 AnyConnect SSL VPN Configuration and Verification 101 Phase 1: Configure Cisco ASA for Cisco AnyConnect 101  Task 1: Connection Profile Identification 101  Task 2: VPN Protocols and Device Certificate 102  Task 3: Client Image 102  Task 4: Authentication Methods 103  Task 5: Client Address Assignment 103  Task 6: Network Name Resolution Servers 104  Task 7: Network Address Translation Exemption 104  Task 8: AnyConnect Client Deployment and Summary 105 Phase 2: Configure the Cisco AnyConnect VPN Client 106 Phase 3: Verify AnyConnect Configuration and Connection 108 Study Resources 111 Day 19: Site-to-Site VPN 113 CCNA Security 210-260 IINS Exam Topics 113 Key Topics 113 IPsec Negotiation 113 Cisco IOS CLI-based Site-to-Site IPsec VPN 114 Configuration 115  Step 1: ACL Compatibility 115  Step 2: IKE Phase 1-ISAKMP Policy 115  Step 3: IKE Phase 2-IPsec Transform Set 117  Step 4: Crypto ACLs 117  Step 5: IPsec Crypto Map 118 Verification 119 Cisco ASA Site-to-Site IPsec VPN 122 Configuration 123  Step 1: Launch the ASDM Site-to-Site VPN Wizard 123  Step 2: Peer Device Identification 123  Step 3: Traffic to Protect 124  Step 4: Security 124  Step 5: NAT Exempt 125 Verification 125 Study Resources 128 Day 18: VPN Advanced Topics 131 CCNA Security 210-260 IINS Exam Topics 131 Key Topics 131 Hairpinning and Client U-Turn 131 Split Tunneling 132 Always-on VPN 134 NAT Traversal 134 Endpoint Posture Assessment 135 Study Resources 136 Day 17: Secure Device Access 137 CCNA Security 210-260 IINS Exam Topics 137 Key Topics 137 Cisco IOS Authorization with Privilege Levels 137 Authorization with Role-Based CLI 138 Cisco IOS Resilient Configuration 139 Cisco IOS File Authenticity 140 Study Resources 142 Day 16: Secure Routing Protocols 143 CCNA Security 210-260 IINS Exam Topics 143 Key Topics 143 Routing Protocol Authentication 143 OSPF MD5 Authentication 144 MD5 Authentication with Key Chain 144 MD5 Authentication Without Key Chain 145 OSPF SHA Authentication 146 Study Resources 148 Day 15: Control Plane Security 149 CCNA Security 210-260 IINS Exam Topics 149 Key Topics 149 Functional Planes of the Network 149 Control Plane Policing 150 Control Plane Protection 151 Study Resources 152 Day 14: Layer 2 Infrastructure Security 153 CCNA Security 210-260 IINS Exam Topics 153 Key Topics 153 Common Layer 2 Attacks 153 STP Attacks 153 ARP Spoofing 155 MAC Spoofing 156 CAM Table Overflows 157 CDP/LLDP Reconnaissance 157 VLAN Hopping 157 DHCP Spoofing 158 Study Resources 159 Day 13: Layer 2 Protocols Security 161 CCNA Security 210-260 IINS Exam Topics 161 Key Topics 161 DHCP Snooping 161 Dynamic ARP Inspection 163 IP Source Guard 164 Port Security 165 STP Security Mechanisms 167 PortFast 167 BPDU Guard 168 Root Guard 168 Loop Guard 168 Study Resources 169 Day 12: VLAN Security 171 CCNA Security 210-260 IINS Exam Topics 171 Key Topics 171 Private VLANs 171 PVLAN Edge 174 ACLs on Switches 175 PACL Configuration 176 VACL Configuration 177 Native VLAN 178 Study Resources 180 Day 11: Firewall Technologies 181 CCNA Security 210-260 IINS Exam Topics 181 Key Topics 181 Firewall Overview 181 Packet Filtering 183 Proxy and Application Firewalls 185 Stateful Firewalls 187 Next-Generation Firewalls 188 Personal Firewall 189 Study Resources 189 Day 10: Cisco ASA NAT Implementation 191 CCNA Security 210-260 IINS Exam Topics 191 Key Topics 191 NAT Fundamentals 191 NAT on Cisco ASA 193 Static NAT 195 Dynamic NAT 198 Dynamic PAT 201 Policy NAT 203 Study Resources 208 Day 9: Cisco IOS Zone-Based Policy Firewall 209 CCNA Security 210-260 IINS Exam Topics 209 Key Topics 209 ZPF Concepts 209 ZPF Zones and Zone Pairs 210 Introduction to C3PL 211 Class Maps 212 Policy Maps 212 Service Policy 213 Default Policies and Traffic Flows 213 ZPF Configuration and Verification 214 Configuring Class Maps 214 Configuring Policy Maps 215 Configuration and Verification 216 Study Resources 218 Day 8: Cisco ASA Firewall Concepts 219 CCNA Security 210-260 IINS Exam Topics 219 Key Topics 219 Cisco ASA Family 219 ASA Features and Services 221 ASA Deployments 222 ASA High Availability 223 ASA Contexts 225 Study Resources 226 Day 7: ASA Firewall Configuration 227 CCNA Security 210-260 IINS Exam Topics 227 Key Topics 227 ASA Default Configuration 227 ASA Management Access 229 ASA Interfaces 230 ASA Access Rules 232 ASA Objects and Object Groups 234 ASA Modular Policy Framework 240 Study Resources 244 Day 6: IDS/IPS Concepts 245 CCNA Security 210-260 IINS Exam Topics 245 Key Topics 245 IDS vs. IPS 245 Host-based vs. Network-based IPS 247 IPS Deployment Options 248 IPS Placement 249 IPS Terminology 250 Study Resources 251 Day 5: IDS/IPS Technologies 253 CCNA Security 210-260 IINS Exam Topics 253 Key Topics 253 Detection Technologies 253 Signatures 254 Trigger Actions 255 Blacklisting 256 Next-Generation IPS with FirePOWER 256 Study Resources 257 Day 4: Email-based Threat Mitigation 259 CCNA Security 210-260 IINS Exam Topics 259 Key Topics 259 ESA Overview 259 ESA Deployment 260 ESA Features 263 Filtering Spam 263 Fighting Viruses and Malware 264 Email Data Loss Prevention 264 Advanced Malware Protection 264 ESA Mail Processing 265 Incoming Mail Processing 265 Outgoing Mail Processing 266 Study Resources 267 Day 3: Web-based Threat Mitigation 269 CCNA Security 210-260 IINS Exam Topics 269 Key Topics 269 Cisco WSA 269 Cisco CWS 272 Study Resources 274 Day 2: Endpoint Protection 275 CCNA Security 210-260 IINS Exam Topics 275 Key Topics 275 Endpoint Security Overview 275 Personal Firewalls 276 Antivirus 276 Antispyware 277 Antimalware 278 Data Encryption 279 Study Resources 280 Day 1: CCNA Security Skills Review and Practice 281 CCNA Security 210-260 IINS Exam Topics 281 Key Topics 281 CCNA Security Skills Practice 281 Introduction 281 Topology Diagram 281 Addressing Table 282 ISP Configuration 283 Implementation 283  Step 1: Cable the Network As Shown in the Topology 283  Step 2: Configure Initial Settings for R1_BRANCH 283  Step 3: Configure Initial Settings for HQ_SW 284  Step 4: Configure Initial Settings for HQ-ASA 285  Step 5: Configure Clientless SSL VPN 286  Step 6: Configure Site-to-Site IPsec VPN 286  Step 7: Configure a Zone-Based Policy Firewall 288 Answers to CCNA Security Skills Practice 289 Step 1: Cable the Network As Shown in the Topology 289 Step 2: Configure Initial Settings for R1_BRANCH 289 Step 3: Configure Initial Settings for HQ_SW 290 Step 4: Configure Initial Settings for HQ-ASA 291 Step 5: Configure Clientless SSL VPN 293 Step 6: Configure Site-to-Site IPsec VPN 294 Step 7: Configure a Zone-Based Policy Firewall 295 Exam Day 299 What You Need for the Exam 299 What You Should Receive After Completion 299 Summary 300 Post-Exam Information 301 Receiving Your Certificate 301 U.S. Government Recognition 301 Examining Certification Options 302 If You Failed the Exam 302 Summary 302       9781587205781   TOC   5/24/2016