CCNA Security 210-260 Official Cert Guide

Introduction

Networking Security Concepts

• Understanding Network and Information Security Basics
• Recognizing Current Network Threats
• Applying Fundamental Security Principles to Network Design
• Review All the Key Topics

Common Security Threats

• Network Security Threat Landscape
• Distributed Denial-of-Service Attacks
• Social Engineering Methods
• Malware Identification Tools
• Data Loss and Exfiltration Methods
• Summary
• Review All the Key Topics

Implementing AAA in Cisco IOS

• Cisco Secure ACS, RADIUS, and TACACS
• Configuring Routers to Interoperate with an ACS Server
• Configuring the ACS Server to Interoperate with a Router
• Verifying and Troubleshooting Router-to-ACS Server Interactions
• Review All the Key Topics
• Command Reference to Check Your Memory

Bring Your Own Device (BYOD)

• Foundation Topics
• Bring Your Own Device Fundamentals
• BYOD Architecture Framework
• Mobile Device Management
• Exam Preparation Tasks
• Review All the Key Topics

Fundamentals of VPN Technology and Cryptography

• Understanding VPNs and Why We Use Them
• Cryptography Basic Components
• Public Key Infrastructure
• Putting the Pieces of PKI to Work
• Review All the Key Topics
• Command Reference to Check Your Memory

Fundamentals of IP Security

• IPsec Concepts, Components, and Operations
• Configuring and Verifying IPsec
• Review All the Key Topics
• Command Reference to Check Your Memory

Implementing IPsec Site-to-Site VPNs

• Planning and Preparing an IPsec Site-to-Site VPN
• Implementing and Verifying an IPsec Site-to-Site VPN in Cisco IOS Devices
• Implementing and Verifying an IPsec Site-to-Site VPN in Cisco ASA
• Review All the Key Topics
• Command Reference to Check Your Memory

Implementing SSL VPNs Using Cisco ASA

• Functions and Use of SSL for VPNs
• Configuring Clientless SSL VPNs on ASA
• Using the Cisco AnyConnect Secure Mobility Client
• Troubleshooting SSL VPN
• Review All the Key Topics

Securing Layer 2 Technologies

• VLAN and Trunking Fundamentals
• Spanning-Tree Fundamentals
• Common Layer 2 Threats and How to Mitigate Them
• CDP and LLDP
• DHCP Snooping
• Dynamic ARP Inspection
• Review All the Key Topics
• Command Reference to Check Your Memory

Network Foundation Protection

• Using Network Foundation Protection to Secure Networks
• Understanding the Management Plane
• Understanding the Control Plane
• Understanding the Data Plane
• Review All the Key Topics

Securing the Management Plane on Cisco IOS Devices

• Securing Management Traffic
• Implementing Security Measures to Protect the Management Plane
• Review All the Key Topics
• Command Reference to Check Your Memory

Securing the Data Plane in IPv6

• Understanding and Configuring IPv6
• Configuring IPv6 Routing
• Developing a Security Plan for IPv6
• Review All the Key Topics
• Command Reference to Check Your Memory

Securing Routing Protocols and the Control Plane

• Foundation Topics
• Securing the Control Plane
• Control Plane Policing
• Securing Routing Protocols
• Exam Preparation Tasks
• Review All the Key Topics

Understanding Firewall Fundamentals

• Firewall Concepts and Technologies
• Using Network Address Translation
• Creating and Deploying Firewalls
• Review All the Key Topics

Implementing Cisco IOS Zone-Based Firewalls

• Cisco IOS Zone-Based Firewalls
• Configuring and Verifying Cisco IOS Zone-Based Firewalls
• Review All the Key Topics
• Command Reference to Check Your Memory

Configuring Basic Firewall Policies on Cisco ASA

• The ASA Appliance Family and Features
• ASA Firewall Fundamentals
• Configuring the ASA
• Review All the Key Topics
• Command Reference to Check Your Memory

Cisco IDS/IPS Fundamentals

• IPS Versus IDS
• Identifying Malicious Traffic on the Network
• Managing Signatures
• Monitoring and Managing Alarms and Alerts
• Cisco Next-Generation IPS Solutions
• Review All the Key Topics

Mitigation Technologies for E-mail-Based and Web-Based Threats

• Mitigation Technology for E-mail-Based Threats
• Mitigation Technology for Web-Based Threats
• Cisco Content Security Management Appliance
• Review All the Key Topics
• Command Reference to Check Your Memory

Mitigation Technologies for Endpoint Threats

• Antivirus and Antimalware Solutions
• Personal Firewalls and Host Intrusion Prevention Systems
• Advanced Malware Protection for Endpoints
• Hardware and Software Encryption of Endpoint Data
• Review All the Key Topics

Final Preparation

• The Cisco Learning Network
• Lesson-Ending Review Tools
• Recall the Facts
• Practice Configurations
• Using the Exam Engine