31 Days Before Your CCNA Security Exam: A Day-By-Day Review Guide for the IINS 210-260 Certification Exam

Features

• Commit to taking the CCNA Security/IINS exam in one month and understand the process
• Review key points of the Networking Academy information with a specific focus on CCNA Security objectives
• Provides instructors with a creative way to present relatively dry topics using the book and online companion as well as review at the end of the class
• Empowers an individual to fit CCNA Security studies into an otherwise busy schedule with a daily timeline

• Copyright 2016
• Dimensions: 6" x 9"
• Pages: 352
• Edition: 1st

• Book
• ISBN-10: 1-58720-578-5
• ISBN-13: 978-1-58720-578-1

31 Days Before Your CCNA Security Exam

31 Days Before Your CCNA Security Exam offers you an engaging and practical way to understand the certification process, commit to taking the CCNA Security IINS 210-260 certification exam, and finish your preparation using a variety of Primary and Supplemental study resources.

The IINS 210-260 exam tests your knowledge of secure network infrastructure, core security concepts, secure access, VPN encryption, firewalls, intrusion prevention, web/email content security, and endpoint security. It also tests your skills for installing, troubleshooting, and monitoring secure networks to maintain the integrity, confidentiality, and availability of data and devices.

Sign up for the IINS 210-260 exam and use the book’s day-by-day guide and checklist to organize, prepare, and review. Each day in this guide breaks down an exam topic into a manageable bit of information to review using short summaries. A Study Resources section provides you with a quick reference for locating more in-depth treatment of a day’s topics within the Primary and Supplemental resources.

The features of the book empower you to fit exam preparation into a busy schedule:

·         A visual calendar summarizing each day’s study topic

·         A checklist providing advice for preparation activities leading up to the exam

·         A description of the CCNA Security IINS 210-260 exam organization and sign-up process

·         Strategies from the author to be mentally, organizationally, and physically prepared for exam day

·         A conversational tone, which makes your study time more enjoyable

Primary Resources:

CCNA Security 210-260 Official Cert Guide ISBN-13: 978-1-58720-566-8

CCNA Security Course Booklet Version 2 ISBN-13: 978-1-58713-351-0

CCNA Security Lab Manual Version 2 ISBN-13: 978-1-58713-350-3

Supplemental Resources:

CCNA Security 210-260 Complete Video Course ISBN-13: 978-0-13-449931-4

CCNA Security Portable Command Guide, Second Edition ISBN-13: 978-1-58720-575-0

Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services, Third Edition ISBN-13: 978-1-58714-307-6

Category: Certification

Covers: CCNA Security

Sample Pages

Download the sample pages (includes Chapter 29 and Index)

Table of Contents

Introduction xxii

Digital Study Guide xxvi

Day 31: Common Security Principles 1

CCNA Security 210-260 IINS Exam Topics 1

Key Topics 1

Confidentiality, Integrity, and Availability (CIA) 1

SIEM 1

Common Network Security Terms 2

Security Zones 2

Study Resources 4

Day 30: Common Security Threats 5

CCNA Security 210-260 IINS Exam Topics 5

Key Topics 5

Network Attacks 5

    Reconnaissance Attacks 5

    Access Attacks 5

    DoS and DDoS Attacks 6

Social Engineering 7

    Types 7

    Defenses 8

Malware 8

Data Loss 9

Study Resources 10

Day 29: Cryptographic Technologies 11

CCNA Security 210-260 IINS Exam Topics 11

Key Topics 11

CIA Triad 11

Key Exchange and Management 11

Hash Algorithms 12

    Well-known Hash Functions 12

    Authentication Using Hashing 13

    Hashing in Cisco Products 14

Symmetric and Asymmetric Encryption 15

    Encryption Overview 15

    Symmetric Encryption Algorithms 15

    Asymmetric Encryption Algorithms 16

Digital Signatures and RSA Certificates 18

Study Resources 19

Day 28: PKI and Network Security Architectures 21

CCNA Security 210-260 IINS Exam Topics 21

Key Topics 21

Public Key Infrastructure 21

    PKI Terminology, Components, and Classes of Certificates 22

    PKI Topologies 23

    PKI Standards 24

    PKI Operations 25

    Enrollment and Revocation 27

Network Architectures and Topologies 28

    Campus-Area Network (CAN) 28

    WAN and Branch/SOHO 29

    Data Center 31

    Cloud and Virtual Networks 31

Study Resources 33

Day 27: Secure Management Systems 35

CCNA Security 210-260 IINS Exam Topics 35

Key Topics 35

In-band and Out-of-band Management 35

Management Plane Security 36

    Access Security 36

    SSH/HTTPS 38

    Syslog 38

Simple Network Management Protocol (SNMP) 39

Network Time Protocol (NTP) 42

Secure Copy Protocol (SCP) 43

Study Resources 44

Day 26: AAA Concepts 45

CCNA Security 210-260 IINS Exam Topics 45

Key Topics 45

AAA 45

RADIUS and TACACS+ 46

    RADIUS 46

    TACACS+ 47

ACS and ISE 48

    ACS 49

    ISE 49

Study Resources 50

Day 25: TACACS+ and RADIUS Implementation 51

CCNA Security 210-260 IINS Exam Topics 51

Key Topics 51

Server-based AAA Authentication 51

Server-based AAA Authorization 53

Server-based AAA Accounting 54

Server-based AAA Verification and Troubleshooting 55

Study Resources 58

Day 24: 802.1X 61

CCNA Security 210-260 IINS Exam Topics 61

Key Topics 61

802.1X 61

    Terminology and Concepts 61

    Configuration and Verification 63

Study Resources 65

Day 23: BYOD 67

CCNA Security 210-260 IINS Exam Topics 67

Key Topics 67

BYOD Architecture 67

BYOD Management 69

Study Resources 72

Day 22: IPsec Technologies 73

CCNA Security 210-260 IINS Exam Topics 73

Key Topics 73

VPNs 73

IPsec Framework 76

    IPsec Protocols 77

        AH 77

        ESP 78

        IPsec Modes of Operations 78

    Confidentiality 79

    Data Integrity 79

    Origin Authentication 80

    Key Management 80

    Suite B Cryptographic Standard 81

IKE 81

    IKEv1 Phase 1 82

    IKEv1 Phase 2 83

    IKEv2 83

Study Resources 84

Day 21: Clientless Remote-Access VPN 85

CCNA Security 210-260 IINS Exam Topics 85

Key Concepts 85

Clientless SSL VPN Concepts 85

Clientless SSL VPN Configuration 87

    Task 1: Launch Clientless SSL VPN Wizard from ASDM 88

    Task 2: Configure the SSL VPN URL and Interface 88

    Task 3: Configure User Authentication 89

    Task 4: Configure User Group Policy 90

    Task 5: Configure Bookmarks 90

Clientless SSL VPN Verification 95

Study Resources 97

Day 20: AnyConnect Remote Access VPN 99

CCNA Security 210-260 IINS Exam Topics 99

Key Topics 99

AnyConnect SSL VPN Concepts 99

    SSL VPN Server Authentication 100

    SSL VPN Client Authentication 100

    SSL VPN Client IP Address Assignment 100

AnyConnect SSL VPN Configuration and Verification 101

    Phase 1: Configure Cisco ASA for Cisco AnyConnect 101

        Task 1: Connection Profile Identification 101

        Task 2: VPN Protocols and Device Certificate 102

        Task 3: Client Image 102

        Task 4: Authentication Methods 103

        Task 5: Client Address Assignment 103

        Task 6: Network Name Resolution Servers 104

        Task 7: Network Address Translation Exemption 104

        Task 8: AnyConnect Client Deployment and Summary 105

    Phase 2: Configure the Cisco AnyConnect VPN Client 106

    Phase 3: Verify AnyConnect Configuration and Connection 108

Study Resources 111

Day 19: Site-to-Site VPN 113

CCNA Security 210-260 IINS Exam Topics 113

Key Topics 113

IPsec Negotiation 113

Cisco IOS CLI-based Site-to-Site IPsec VPN 114

    Configuration 115

        Step 1: ACL Compatibility 115

        Step 2: IKE Phase 1–ISAKMP Policy 115

        Step 3: IKE Phase 2–IPsec Transform Set 117

        Step 4: Crypto ACLs 117

        Step 5: IPsec Crypto Map 118

    Verification 119

Cisco ASA Site-to-Site IPsec VPN 122

    Configuration 123

        Step 1: Launch the ASDM Site-to-Site VPN Wizard 123

        Step 2: Peer Device Identification 123

        Step 3: Traffic to Protect 124

        Step 4: Security 124

        Step 5: NAT Exempt 125

    Verification 125

Study Resources 128

Day 18: VPN Advanced Topics 131

CCNA Security 210-260 IINS Exam Topics 131

Key Topics 131

Hairpinning and Client U-Turn 131

Split Tunneling 132

Always-on VPN 134

NAT Traversal 134

Endpoint Posture Assessment 135

Study Resources 136

Day 17: Secure Device Access 137

CCNA Security 210-260 IINS Exam Topics 137

Key Topics 137

Cisco IOS Authorization with Privilege Levels 137

Authorization with Role-Based CLI 138

Cisco IOS Resilient Configuration 139

Cisco IOS File Authenticity 140

Study Resources 142

Day 16: Secure Routing Protocols 143

CCNA Security 210-260 IINS Exam Topics 143

Key Topics 143

Routing Protocol Authentication 143

OSPF MD5 Authentication 144

    MD5 Authentication with Key Chain 144

    MD5 Authentication Without Key Chain 145

OSPF SHA Authentication 146

Study Resources 148

Day 15: Control Plane Security 149

CCNA Security 210-260 IINS Exam Topics 149

Key Topics 149

Functional Planes of the Network 149

Control Plane Policing 150

Control Plane Protection 151

Study Resources 152

Day 14: Layer 2 Infrastructure Security 153

CCNA Security 210-260 IINS Exam Topics 153

Key Topics 153

Common Layer 2 Attacks 153

    STP Attacks 153

    ARP Spoofing 155

    MAC Spoofing 156

    CAM Table Overflows 157

    CDP/LLDP Reconnaissance 157

    VLAN Hopping 157

    DHCP Spoofing 158

Study Resources 159

Day 13: Layer 2 Protocols Security 161

CCNA Security 210-260 IINS Exam Topics 161

Key Topics 161

DHCP Snooping 161

Dynamic ARP Inspection 163

IP Source Guard 164

Port Security 165

STP Security Mechanisms 167

    PortFast 167

    BPDU Guard 168

    Root Guard 168

    Loop Guard 168

Study Resources 169

Day 12: VLAN Security 171

CCNA Security 210-260 IINS Exam Topics 171

Key Topics 171

Private VLANs 171

PVLAN Edge 174

ACLs on Switches 175

    PACL Configuration 176

    VACL Configuration 177

Native VLAN 178

Study Resources 180

Day 11: Firewall Technologies 181

CCNA Security 210-260 IINS Exam Topics 181

Key Topics 181

Firewall Overview 181

Packet Filtering 183

Proxy and Application Firewalls 185

Stateful Firewalls 187

Next-Generation Firewalls 188

Personal Firewall 189

Study Resources 189

Day 10: Cisco ASA NAT Implementation 191

CCNA Security 210-260 IINS Exam Topics 191

Key Topics 191

NAT Fundamentals 191

NAT on Cisco ASA 193

Static NAT 195

Dynamic NAT 198

Dynamic PAT 201

Policy NAT 203

Study Resources 208

Day 9: Cisco IOS Zone-Based Policy Firewall 209

CCNA Security 210-260 IINS Exam Topics 209

Key Topics 209

ZPF Concepts 209

ZPF Zones and Zone Pairs 210

Introduction to C3PL 211

    Class Maps 212

    Policy Maps 212

    Service Policy 213

Default Policies and Traffic Flows 213

ZPF Configuration and Verification 214

    Configuring Class Maps 214

    Configuring Policy Maps 215

    Configuration and Verification 216

Study Resources 218

Day 8: Cisco ASA Firewall Concepts 219

CCNA Security 210-260 IINS Exam Topics 219

Key Topics 219

Cisco ASA Family 219

ASA Features and Services 221

ASA Deployments 222

ASA High Availability 223

ASA Contexts 225

Study Resources 226

Day 7: ASA Firewall Configuration 227

CCNA Security 210-260 IINS Exam Topics 227

Key Topics 227

ASA Default Configuration 227

ASA Management Access 229

ASA Interfaces 230

ASA Access Rules 232

ASA Objects and Object Groups 234

ASA Modular Policy Framework 240

Study Resources 244

Day 6: IDS/IPS Concepts 245

CCNA Security 210-260 IINS Exam Topics 245

Key Topics 245

IDS vs. IPS 245

Host-based vs. Network-based IPS 247

IPS Deployment Options 248

IPS Placement 249

IPS Terminology 250

Study Resources 251

Day 5: IDS/IPS Technologies 253

CCNA Security 210-260 IINS Exam Topics 253

Key Topics 253

Detection Technologies 253

Signatures 254

Trigger Actions 255

Blacklisting 256

Next-Generation IPS with FirePOWER 256

Study Resources 257

Day 4: Email-based Threat Mitigation 259

CCNA Security 210-260 IINS Exam Topics 259

Key Topics 259

ESA Overview 259

ESA Deployment 260

ESA Features 263

    Filtering Spam 263

    Fighting Viruses and Malware 264

    Email Data Loss Prevention 264

    Advanced Malware Protection 264

ESA Mail Processing 265

    Incoming Mail Processing 265

    Outgoing Mail Processing 266

Study Resources 267

Day 3: Web-based Threat Mitigation 269

CCNA Security 210-260 IINS Exam Topics 269

Key Topics 269

Cisco WSA 269

Cisco CWS 272

Study Resources 274

Day 2: Endpoint Protection 275

CCNA Security 210-260 IINS Exam Topics 275

Key Topics 275

Endpoint Security Overview 275

Personal Firewalls 276

Antivirus 276

Antispyware 277

Antimalware 278

Data Encryption 279

Study Resources 280

Day 1: CCNA Security Skills Review and Practice 281

CCNA Security 210-260 IINS Exam Topics 281

Key Topics 281

CCNA Security Skills Practice 281

    Introduction 281

    Topology Diagram 281

    Addressing Table 282

    ISP Configuration 283

    Implementation 283

        Step 1: Cable the Network As Shown in the Topology 283

        Step 2: Configure Initial Settings for R1_BRANCH 283

        Step 3: Configure Initial Settings for HQ_SW 284

        Step 4: Configure Initial Settings for HQ-ASA 285

        Step 5: Configure Clientless SSL VPN 286

        Step 6: Configure Site-to-Site IPsec VPN 286

        Step 7: Configure a Zone-Based Policy Firewall 288

Answers to CCNA Security Skills Practice 289

    Step 1: Cable the Network As Shown in the Topology 289

    Step 2: Configure Initial Settings for R1_BRANCH 289

    Step 3: Configure Initial Settings for HQ_SW 290

    Step 4: Configure Initial Settings for HQ-ASA 291

    Step 5: Configure Clientless SSL VPN 293

    Step 6: Configure Site-to-Site IPsec VPN 294

    Step 7: Configure a Zone-Based Policy Firewall 295

Exam Day 299

What You Need for the Exam 299

What You Should Receive After Completion 299

Summary 300

Post-Exam Information 301

Receiving Your Certificate 301

U.S. Government Recognition 301

Examining Certification Options 302

If You Failed the Exam 302

Summary 302

9781587205781   TOC   5/24/2016

Errata

We've made every effort to ensure the accuracy of this book and its companion content. Any errors that have been confirmed since this book was published can be downloaded below.

Download the errata

Submit Errata