CCIE Security Exam Certification Guide

Conclusion......Page 21
Using This Book to Prepare for the CCIE Security Written Exam......Page 25
CCIE Security Written Exam Blueprint......Page 26
How to Prepare for the CCIE Security Written Exam UsingThis Book......Page 29
General Networking Topics......Page 33
“Do I Know This Already?” Quiz......Page 34
Networking Basics—The OSI Reference Model......Page 43
Ethernet Overview......Page 49
Internet Protocol......Page 55
Variable-Length Subnet Masks......Page 60
Classless Interdomain Routing......Page 61
Transmission Control Protocol......Page 62
TCP Services......Page 67
Routing Protocols......Page 75
ISDN......Page 101
IP Multicast......Page 105
Asynchronous Communications and Access Devices......Page 106
Foundation Summary......Page 109
Requirements for FastEther Channel......Page 111
Q & A......Page 115
Scenario 2-1: Routing IP on Cisco Routers......Page 121
Scenario 2-1 Answers: Routing IP on Cisco Routers......Page 123
“Do I Know This Already?” Quiz......Page 125
Domain Name System......Page 132
Trivial File Transfer Protocol......Page 135
File Transfer Protocol......Page 137
Hypertext Transfer Protocol......Page 140
Secure Socket Layer......Page 142
Simple Network Management Protocol......Page 143
Simple Mail Transfer Protocol......Page 149
Network Time Protocol......Page 150
Secure Shell......Page 154
Foundation Summary......Page 156
Q & A......Page 158
Scenario 3-1: Configuring DNS, TFTP, NTP, and SNMP......Page 162
Scenario 3-1 Solutions......Page 164
“Do I Know This Already?” Quiz......Page 167
Cisco Hardware......Page 172
show and debug Commands......Page 181
Password Recovery......Page 196
Basic Security on Cisco Routers......Page 201
IP Access Lists......Page 204
Foundation Summary......Page 213
Q & A......Page 215
Scenario 4-1: Configuring Cisco Routers for Passwords andAccess Lists......Page 217
Scenario Answers......Page 219
“Do I Know This Already?” Quiz......Page 221
Authentication, Authorization, and Accounting (AAA)......Page 230
Remote Authentication Dial-In User Service (RADIUS)......Page 234
Terminal Access Controller Access Control System Plus(TACACS+)......Page 240
Kerberos......Page 247
Virtual Private Dial-Up Networks (VPDN)......Page 251
Encryption Technology Overview......Page 257
Internet Key Exchange (IKE)......Page 268
Certificate Enrollment Protocol (CEP)......Page 281
Foundation Summary......Page 282
Q & A......Page 287
Scenario 5-1: Configuring Cisco Routers for IPSec......Page 293
Scenario 5-1 Solutions......Page 297
“Do I Know This Already?” Quiz......Page 301
UNIX......Page 306
Microsoft NT Systems......Page 312
Common Windows DOS Commands......Page 317
Cisco Secure for Windows and UNIX......Page 319
Cisco Secure Intrusion Detection System and Cisco Secure Scanner......Page 321
Cisco Security Wheel......Page 326
Foundation Summary......Page 327
Q & A......Page 330
Scenario 6-2: UNIX File Permissions......Page 333
Scenario 6-2 Solution......Page 334
“Do I Know This Already?” Quiz......Page 337
Advanced Security Concepts......Page 342
Network Address Translation and Port Address Translation......Page 346
Cisco Private Internet Exchange (PIX)......Page 350
Cisco IOS Firewall Security Feature Set......Page 366
Public Key Infrastructure......Page 370
Virtual Private Networks......Page 371
Foundation Summary......Page 374
Q & A......Page 377
Scenario 7-1: Configuring a Cisco PIX for NAT......Page 380
Scenario 7-1 Solution......Page 381
“Do I Know This Already?” Quiz......Page 383
Network Security Policies......Page 387
Standards Bodies and Incident Response Teams......Page 388
Vulnerabilities, Attacks, and Common Exploits......Page 391
Intrusion Detection System......Page 394
Protecting Cisco IOS from Intrusion......Page 397
Foundation Summary......Page 403
Q & A......Page 406
Scenario 8-1: Defining IOS Commands to View DoS Attacks in Real Time......Page 409
Scenario 8-1 Solution......Page 410
Study Tips for CCIE Security Examinations......Page 1