CCNA Security

CCNA Security validates knowledge of security infrastructure, threats and vulnerabilities to networks, and threat mitigation. Skills include installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in “Cisco IOS Network Security” This certification is earned by passing the IINS 640-553 (Implementing Cisco IOS Network Security, or IINS) exam. The price of the exam is USD$250.

Exam Details

IINS Exam – 640-554

Multiple Choices

90 minute duration

Description

Implementing Cisco IOS Network Security (IINS) v1.0 is a 20 day's instructor-led course focused on the necessity of a comprehensive security policy and how it affects the posture of the network. Learners will be able to perform basic tasks to secure a small branch type office network using Cisco IOS security features available through web-based GUIs (Cisco Router and Security Device Manager [SDM]) and the command-line interface (CLI) on the Cisco routers and switches. Implementing Cisco IOS Network Security (IINS) v1.0, in conjunction with its prerequisite, Interconnecting Cisco Networking Devices, Part 1 (ICND1) v1.0, will form the recommended training component for this new associate level certification, CCNA Security. IINS v1.0 provides students with the knowledge and skills necessary to achieve competency in Cisco security solutions.

CCNA Prerequisites

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:
Develop a comprehensive network security policy to counter threats against information security.
Configure routers on the network perimeter with Cisco IOS Software security features.
Configure a Cisco IOS zone-based firewall to perform basic security operations on a network.
Configure site-to-site VPNs using Cisco IOS features.
Configure IPS on Cisco network routers.
Configure LAN devices to control access, resist attacks, shield other network devices and systems, and protect the
integrity and confidentiality of network traffic.

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows: Skills and knowledge equivalent to those learned in ICND1 & ICND2.Working knowledge of the Windows operating system.

Introduction to Network Security Principles

Examining Network Security Fundamentals
Examining Network Attack Methodologies
Examining Operations Security
Examining Operations Security
Building Cisco Self-Defending Networks

Perimeter Security

Securing Administrative Access to Cisco Routers
Introducing Cisco SDM/CCP
Configuring AAA on a Cisco Router Using the Local Database
Configuring AAA on a Cisco Router to Use Cisco Secure ACS
Implementing Secure Management and Reporting
Locking down the Router

Network Security Using Cisco IOS Firewalls

Introducing Firewall Technologies
Creating Static Packet Filters Using ACL’s
Configuring Cisco IOS Zone-based Policy

Firewall Site-to-Site VPN’s

Examining Cryptographic Services
Examining Symmetric Encryption
Examining Cryptographic Hashes and Digital Signatures
Examining Asymmetric Encryption and PKI
Examining IPsec Fundamentals
Building Site-to Site IPsec VPN
Configuring IPsec on a Site-to Site VPN Using Cisco SDM/CCP

Network Security Using Cisco IOS IPS

Introducing IPS Technologies
Configuring Cisco IOS IPS Using Cisco SDM/CCP

LAN, SAN, Voice and Endpoint Security Overview

Examining Endpoint Security
Examining SAN Security
Examining Voice Security
Migrating Layer 2 Attacks