Define the management plane and identify practices that can be used to make it more secure.

Welcome to Cisco CCNA Security from LearnSmart.

Looking to become Cisco CCNA Security Certified? Preparing to take the Cisco Exam CCNA Security 640-554 IINS?

By the end of the course you'll demonstrate your proficiency in the principles, techniques, and tools involved in working with routers, networks, and switches. Be ready to prove to yourself, and others, that you are ready for Prove to yourself, and others, that you are ready for the Cisco Certified Network Associate in Security (640-554) certification exam.

If you're interested in becoming an accomplished Network Associate professional, this training will establish your understanding of all the fundamental concepts within CCNA routers, networks, and switches.

Course Overview:

These sections can be taken in any order, as a review of a particular concept or exam domain. However, if you are just becoming familiar with networking, it is recommended that you view the courses sequentially.

In this course become familiar with the fundamental topics and skills required to install, operate, and develop a small to medium size enterprise branch network in its security infrastructure.

Course Breakdown:

Section 1: In the pre-assessment quiz you'll face questions from all sections of this training. Test your current knowledge and know your strengths and weaknesses.

Section 2: Understand common security threats within a network and take a look at network and information security basics by learning some of the fundamental security principles. Learn how to secure the control, data and management planes on Cisco devices, including implementing security on Cisco routers.

Section 3: Take a look at the differences between TACACS and RADIUS by understanding what they offer as an authentication type, and how to configure each one. Review the examples of ways in which you can configure AAA, via the Command Line Interface and Cisco Configuration Professional, along with some verification commands.

Section 4: Access Control Lists (ACLs) help to mitigate threats against a network in a variety of ways. ACLs should be tested in a test environment prior to actually applying them and look at exactly what they are, what they do, and discuss the different types of ACLs and the role they play in security.

Section 5: Focus on securing the network management plane. Be able to define the management plane, and learn some best practices that can be used to make it more secure, such as strong passwords, AAA, Role Based Access Control, Syslog, and NTP. Then, you will learn to identify and study demonstrations of the different configurations that can be implemented on the management plane.

Section 6: Gain an in-depth understanding of these topics to determine how to best respond to layer 2 attacks.

Section 7: Cisco Firewall Technologies explains the different firewall technologies and the strengths and weaknesses that surround them.

Section 8: Cisco IPS discusses the differences between a Cisco IPS and Cisco IDS device, and some options that you have when deploying them in your network.

Section 9: Learn the basics of VPN technologies, and how IPSec works in a VPN tunnel setup. You will also look at the basics of cryptography in order to gain a better understanding of exactly what goes on behind the scenes of a VPN tunnel establishment. Finally, you will walk through different ways of implementing a site-to-site VPN and configured SSL VPN using the graphical device manager from an ASA.

Section 10: Demonstrate and prove to yourself, and others, that you are ready for Cisco's Implementing Cisco IOS Network Security certification exam. You'll demonstrate your proficiency in the principles, techniques, and tools involved in working with routers, networks, and switches.