0/22 Contents and Introduction (CCNA Security 640-554 Exam Cram)

Introduction

These rough exam cram notes were generated based on the CCNA Security 640-554 Cisco Official Cert Guide as a personal method of revising for the exam (since the information displays nicely on modern smartphones like the iPhone.)

Contents

0 Contents and Introduction

1 Networking Security Concepts

2 Understanding Security Policies Using a Lifecycle Approach

3 Building a Security Strategy

4 Network Foundation Protection

5 Using Cisco Configuration Professional to Protect the Network Infrastructure

6 Securing the Management Plane on Cisco ISO Devices

7 Implementing AAA Using IOS and the ACS Server

8 Securing Layer 2 Technologies

9 Securing the Data Plane in IPv6

10 Planning a Threat Control Strategy

11 Using Access Control Lists for Threat Mitigation

12 Understanding Firewall Fundamentals

13 Implementing Cisco IOS Zone-Based Firewalls

14 Configuring Basic Firewall Policies on Cisco ASA

15 Cisco IPS/IDS Fundamentals

16 Implementing IOS-Based IPS

17 Fundamentals of VPN Technology

18 Fundamentals of the Public Key Infrastructure

19 Fundamentals of IP Security

20 Implementing IPsec Site-to-Site VPNs

21 Implementing SSL VPNs Using Cisco ASA

22 Additional Labs

Recommended Materials

1. CCNA Security 640-554 Cisco Official Cert Guide

2. Cisco Configuration Professional

You can download a copy from http://www.firewall.cx/downloads/cat_view/167-cisco-tools-a-applications.html. The CCP comes with a demo mode!

3. GNS3 simulator

For CLI practice - you will need available Cisco Router IOS files to load into GNS3!

4. Cisco Secure ACS

Access to a Cisco Secure ACS (Access Control Server) GUI and experience on this is recommended.

5. Cisco ASDM

Access to a Cisco ASDM (Adaptive Security Device Manager) GUI (for ASA) and experience on this is recommended.