Ccna Security - Exam 210-260

Lay the foundation for a successful career in network security
 
CCNA Security Study Guide offers comprehensive review for Exam 210-260. Packed with concise explanations of core security concepts, this book is designed to help you successfully prepare for the exam. Expert instruction guides you through critical concepts relating to secure network infrastructure, access management, VPN encryption, Firewalls, intrusion prevention and more, with complete coverage of the CCNA exam objectives. Practical examples allow you to apply your skills in real-world scenarios, helping you transition effectively from "learning" to "doing". You also get access to the Sybex online learning environment, featuring the tools you need to maximize your study time: key terminology and flash cards allow you to study anytime, anywhere, while chapter tests and practice exams help you track your progress and gauge your readiness along the way.
 
The CCNA Security certification tests your knowledge of secure network installation, monitoring, and troubleshooting using Cisco security hardware and software solutions. When you're ready to get serious about preparing for the exam, this book gives you the advantage of complete coverage, real-world application, and extensive learning aids to help you pass with confidence.
* Master Cisco security essentials, standards, and core technologies
* Work through practical examples drawn from real-world examples
* Track your progress with online study aids and self-tests
* Develop critical competencies in maintaining data integrity, confidentiality, and availability
 
Earning your CCNA Security certification validates your abilities in areas that define careers including network security, administrator, and network security support engineer. With data threats continuing to mount, the demand for this skill set will only continue to grow--and in an employer's eyes, a CCNA certification makes you a true professional. CCNA Security Study Guide is the ideal preparation resource for candidates looking to not only pass the exam, but also succeed in the field.

List of contents

Introduction xxi
 
Assessment Test xxxi
 
Chapter 1 Understanding Security Fundamentals 1
 
Goals of Security 2
 
Confidentiality 2
 
Integrity 3
 
Availability 3
 
Guiding Principles 3
 
Common Security Terms 6
 
Risk Management Process 7
 
Network Topologies 15
 
CAN 15
 
WAN 16
 
Data Center 16
 
SOHO 17
 
Virtual 17
 
Common Network Security Zones 17
 
DMZ 17
 
Intranet and Extranet 18
 
Public and Private 18
 
VLAN 18
 
Summary 19
 
Exam Essentials 19
 
Review Questions 20
 
Chapter 2 Understanding Security Threats 25
 
Common Network Attacks 26
 
Motivations 26
 
Classifying Attack Vectors 27
 
Spoofing 28
 
Password Attacks 29
 
Reconnaissance Attacks 30
 
Buffer Overflow 34
 
DoS 34
 
DDoS 36
 
Man-in-the-Middle Attack 37
 
ARP Poisoning 37
 
Social Engineering 38
 
Phishing/Pharming 38
 
Prevention 38
 
Malware 39
 
Data Loss and Exfiltration 39
 
Summary 40
 
Exam Essentials 40
 
Review Questions 42
 
Chapter 3 Understanding Cryptography 45
 
Symmetric and Asymmetric Encryption 46
 
Ciphers 46
 
Algorithms 48
 
Hashing Algorithms 53
 
MD5 54
 
SHA-1 54
 
SHA-2 54
 
HMAC 55
 
Digital Signatures 55
 
Key Exchange 57
 
Application: SSH 57
 
Public Key Infrastructure 57
 
Public and Private Keys 58
 
Certificates 60
 
Certificate Authorities 61
 
PKI Standards 63
 
PKI Topologies 64
 
Certificates in the ASA 65
 
Cryptanalysis 67
 
Summary 68
 
Exam Essentials 68
 
Review Questions 69
 
Chapter 4 Securing the Routing Process 73
 
Securing Router Access 74
 
Configuring SSH Access 74
 
Configuring Privilege Levels in IOS 76
 
Configuring IOS Role-Based CLI 77
 
Implementing Cisco IOS Resilient Configuration 79
 
Implementing OSPF Routing Update Authentication 80
 
Implementing OSPF Routing Update Authentication 80
 
Implementing EIGRP Routing Update Authentication 82
 
Securing the Control Plane 82
 
Control Plane Policing 83
 
Summary 84
 
Exam Essentials 85
 
Review Questions 86
 
Chapter 5 Understanding Layer 2 Attacks 91
 
Understanding STP Attacks 92
 
Understanding ARP Attacks 93
 
Understanding MAC Attacks 95
 
Understanding CAM Overflows 96
 
Understanding CDP/LLDP Reconnaissance 97
 
Understanding VLAN Hopping 98
 
Switch Spoofing 98
 
Double Tagging 99
 
Understanding DHCP Spoofing 99
 
Summary 101
 
Exam Essentials 101
 
Review Questions 102
 
Chapter 6 Preventing Layer 2 Attacks 107
 
Configuring DHCP Snooping 108
 
Configuring Dynamic ARP Inspection 110
 
Configuring Port Security 112
 
Configuring STP Security Features 114
 
BPDU Guard 114
 
Root Guard 115
 
Loop Guard 115
 
Disabling DTP 116
 
Verifying Mitigations 116
 
DHCP Snooping 116
 
DAI 117
 
Port Security 118
 
STP Features 118
 
DTP 120
 
Summary 120
 
Exam Essentials 121
 
Review Questions 122
 
Chapter 7 VLAN Security 127
 
Na

About the author

Troy McMillan, CCNA, CCNP, CISSP, CASP, Security+, writes practice tests, study guides, and online course material for Kaplan IT Cert Prep. As a trainer and consultant with over 30 industry certifications, he delivers training in both live and video formats.

Summary

Lay the foundation for a successful career in network security

CCNA Security Study Guide offers comprehensive review for Exam 210-260. Packed with concise explanations of core security concepts, this book is designed to help you successfully prepare for the exam. Expert instruction guides you through critical concepts relating to secure network infrastructure, access management, VPN encryption, Firewalls, intrusion prevention and more, with complete coverage of the CCNA exam objectives. Practical examples allow you to apply your skills in real-world scenarios, helping you transition effectively from "learning" to "doing". You also get access to the Sybex online learning environment, featuring the tools you need to maximize your study time: key terminology and flash cards allow you to study anytime, anywhere, while chapter tests and practice exams help you track your progress and gauge your readiness along the way.

The CCNA Security certification tests your knowledge of secure network installation, monitoring, and troubleshooting using Cisco security hardware and software solutions. When you're ready to get serious about preparing for the exam, this book gives you the advantage of complete coverage, real-world application, and extensive learning aids to help you pass with confidence.
* Master Cisco security essentials, standards, and core technologies
* Work through practical examples drawn from real-world examples
* Track your progress with online study aids and self-tests
* Develop critical competencies in maintaining data integrity, confidentiality, and availability

Earning your CCNA Security certification validates your abilities in areas that define careers including network security, administrator, and network security support engineer. With data threats continuing to mount, the demand for this skill set will only continue to grow--and in an employer's eyes, a CCNA certification makes you a true professional. CCNA Security Study Guide is the ideal preparation resource for candidates looking to not only pass the exam, but also succeed in the field.

Product details

• Authors: T Mcmillan, Troy McMillan, McMillan Troy
• Publisher: Sybex Uitgeverij
• Languages: English
• Product format: Paperback / Softback
• Released: 31.01.2018
• EAN: 9781119409939
• ISBN: 978-1-119-40993-9
• No. of pages: 552
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > Data communication, networks; Informatik, Netzwerksicherheit, computer science, Networking / Security, Netzwerke / Sicherheit