CCNA-210-260
CCNA Security 210-260 Official Cert Guide
- Practice in 40 Hands-On Labs — nothing to install
- 21 Interactive Lessons and 105 topics mapped to the official exam objectives
- 449 Practice Test Questions and 2 Full Length Tests
Self-paced · 1 year access 4.4/5 (191 Reviews)
40 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
21Interactive Lessons
105Topics
40LiveLab
449Practice Test Questions
3Videos
150Flashcards
150Glossary of terms
01 / Skills you'll get
What you will be able to do
Try Free →
No credit card required
The Cisco CCNA 210-260 exam validates a candidate's knowledge and skills in securing network infrastructure, understanding core security concepts, managing secure access, VPN encryption, firewalls, intrusion prevention, web and email content security; and endpoint security using SIEM Technology, and more. The 210-260 exam also tests candidates' skills in the installation, troubleshooting, and monitoring of a secure network to maintain integrity, confidentiality, and availability of data and devices.
Target Career Roles
- Network Security Specialist
- Network Security Administrator
- Network Security Support Engineer
02 / Lessons & labs
See exactly what you will learn and practice
Lessons
21 Interactive Lessons · 105 topics01 Introduction +
02 Networking Security Concepts 4 topics +
- Understanding Network and Information Security Basics
- Recognizing Current Network Threats
- Applying Fundamental Security Principles to Network Design
- Review All the Key Topics
03 Common Security Threats 7 topics +
- Network Security Threat Landscape
- Distributed Denial-of-Service Attacks
- Social Engineering Methods
- Malware Identification Tools
- Data Loss and Exfiltration Methods
- Summary
- Review All the Key Topics
04 Implementing AAA in Cisco IOS 6 topics +
- Cisco Secure ACS, RADIUS, and TACACS
- Configuring Routers to Interoperate with an ACS Server
- Configuring the ACS Server to Interoperate with a Router
- Verifying and Troubleshooting Router-to-ACS Server Interactions
- Review All the Key Topics
- Command Reference to Check Your Memory
05 Bring Your Own Device (BYOD) 6 topics +
- Foundation Topics
- Bring Your Own Device Fundamentals
- BYOD Architecture Framework
- Mobile Device Management
- Exam Preparation Tasks
- Review All the Key Topics
06 Fundamentals of VPN Technology and Cryptography 6 topics · 2 LiveLab +
- Understanding VPNs and Why We Use Them
- Cryptography Basic Components
- Public Key Infrastructure
- Putting the Pieces of PKI to Work
- Review All the Key Topics
- Command Reference to Check Your Memory
2 LiveLab in this lesson — see the labs panel →
07 Fundamentals of IP Security 4 topics · 1 LiveLab +
- IPsec Concepts, Components, and Operations
- Configuring and Verifying IPsec
- Review All the Key Topics
- Command Reference to Check Your Memory
1 LiveLab in this lesson — see the labs panel →
08 Implementing IPsec Site-to-Site VPNs 5 topics · 2 LiveLab +
- Planning and Preparing an IPsec Site-to-Site VPN
- Implementing and Verifying an IPsec Site-to-Site VPN in Cisco IOS Devices
- Implementing and Verifying an IPsec Site-to-Site VPN in Cisco ASA
- Review All the Key Topics
- Command Reference to Check Your Memory
2 LiveLab in this lesson — see the labs panel →
09 Implementing SSL VPNs Using Cisco ASA 5 topics · 4 LiveLab +
- Functions and Use of SSL for VPNs
- Configuring Clientless SSL VPNs on ASA
- Using the Cisco AnyConnect Secure Mobility Client
- Troubleshooting SSL VPN
- Review All the Key Topics
4 LiveLab in this lesson — see the labs panel →
10 Securing Layer 2 Technologies 8 topics · 10 LiveLab +
- VLAN and Trunking Fundamentals
- Spanning-Tree Fundamentals
- Common Layer 2 Threats and How to Mitigate Them
- CDP and LLDP
- DHCP Snooping
- Dynamic ARP Inspection
- Review All the Key Topics
- Command Reference to Check Your Memory
10 LiveLab in this lesson — see the labs panel →
11 Network Foundation Protection 5 topics +
- Using Network Foundation Protection to Secure Networks
- Understanding the Management Plane
- Understanding the Control Plane
- Understanding the Data Plane
- Review All the Key Topics
12 Securing the Management Plane on Cisco IOS Devices 4 topics · 9 LiveLab +
- Securing Management Traffic
- Implementing Security Measures to Protect the Management Plane
- Review All the Key Topics
- Command Reference to Check Your Memory
9 LiveLab in this lesson — see the labs panel →
13 Securing the Data Plane in IPv6 5 topics · 3 LiveLab +
- Understanding and Configuring IPv6
- Configuring IPv6 Routing
- Developing a Security Plan for IPv6
- Review All the Key Topics
- Command Reference to Check Your Memory
3 LiveLab in this lesson — see the labs panel →
14 Securing Routing Protocols and the Control Plane 6 topics · 3 LiveLab +
- Foundation Topics
- Securing the Control Plane
- Control Plane Policing
- Securing Routing Protocols
- Exam Preparation Tasks
- Review All the Key Topics
3 LiveLab in this lesson — see the labs panel →
15 Understanding Firewall Fundamentals 4 topics · 1 LiveLab +
- Firewall Concepts and Technologies
- Using Network Address Translation
- Creating and Deploying Firewalls
- Review All the Key Topics
1 LiveLab in this lesson — see the labs panel →
16 Implementing Cisco IOS Zone-Based Firewalls 4 topics +
- Cisco IOS Zone-Based Firewalls
- Configuring and Verifying Cisco IOS Zone-Based Firewalls
- Review All the Key Topics
- Command Reference to Check Your Memory
17 Configuring Basic Firewall Policies on Cisco ASA 5 topics · 5 LiveLab +
- The ASA Appliance Family and Features
- ASA Firewall Fundamentals
- Configuring the ASA
- Review All the Key Topics
- Command Reference to Check Your Memory
5 LiveLab in this lesson — see the labs panel →
18 Cisco IDS/IPS Fundamentals 6 topics +
- IPS Versus IDS
- Identifying Malicious Traffic on the Network
- Managing Signatures
- Monitoring and Managing Alarms and Alerts
- Cisco Next-Generation IPS Solutions
- Review All the Key Topics
19 Mitigation Technologies for E-mail-Based and Web-Based Threats 5 topics +
- Mitigation Technology for E-mail-Based Threats
- Mitigation Technology for Web-Based Threats
- Cisco Content Security Management Appliance
- Review All the Key Topics
- Command Reference to Check Your Memory
20 Mitigation Technologies for Endpoint Threats 5 topics +
- Antivirus and Antimalware Solutions
- Personal Firewalls and Host Intrusion Prevention Systems
- Advanced Malware Protection for Endpoints
- Hardware and Software Encryption of Endpoint Data
- Review All the Key Topics
21 Final Preparation 5 topics +
- The Cisco Learning Network
- Lesson-Ending Review Tools
- Recall the Facts
- Practice Configurations
- Using the Exam Engine
Hands-On Labs Our edge
40 LiveLabs- Installing Both Root and Identity Certificates
- Generating an RSA Key Pair
- Implementing IPsec VPNs through CLI
- Sending Commands to the Cisco ASA by ASDM
- Testing Ping Using the Correct Source Interface
- Troubleshooting AnyConnect Client Issues
- Configuring Clientless SSL VPNs on ASA
- Configuring an SSL Cisco AnyConnect Secure Mobility Client VPN
- Using SVC Logging
- Creating a New VLAN and Placing Switch Ports into that VLAN
- Configure Interfaces as Trunk Ports
- Configuring Router-on-a-Stick and Switch Support for the Router
- Configuring Port Fast and Rapid Spanning Tree
- Configuring the Switch to Automatically Restore Errdisabled Ports
- Locking Down Switch Ports Administratively
- Implementing a BPDU Guard on a Switch Port
- Implementing Port Security
- Disabling CDP
- Configuring DHCP Snooping
- Using Service Timestamps with Syslog Events
- Disabling HTTPS
- Creating and Applying a Custom Method List to vty Lines
- Implementing Parser Views
- Implementing Logging Features
- Configuring SNMPv3
- Configuring the Secure Copy Protocol
- Configuring the Router to Use NTP Services
- Adding a Local User with the Privilege Level 15
- Configuring an IPv6 Address in the Hard Way
- Enabling IPv6 Routing and Routing Protocols
- Using the IPv6 Access Control List
- Verifying MD5 Authentication Between BGP Peers
- Observing the Show ip cef Output
- Verifying the Control Plane Policing Configuration
- Configuring the Static Translation of Inside Source Addresses
- Configuring the Interfaces
- Issuing an ICMP Echo Request (Ping) from the ASA
- Configuring the ASA as a DHCP Server for Inside Clients
- Creating and Applying an ACL at the CLI
- Using the Packet Tracer Utility at the CLI
Labs run in your browser — nothing to install.
03 / Exam details
CCNA Security 210-260 Official Cert Guide Details
The Cisco CCNA 210-260 exam validates a candidate's knowledge and skills in securing network infrastructure, understanding core security concepts, managing secure access, VPN encryption, firewalls, intrusion...
Questions
60-70
(per exam)
Duration
90 minutes
(per exam)
Exam Fee
USD 300
(per exam)
Delivered by
Pearson VUE
(in-person or online)
Question Format
Multiple choice single answer, multiple choice multiple...
single/multiple choice, performance-based
Practice Tests
449 Practice Questions
(mapped to official exam objectives)
Certification
CCNA-210-260
Cisco credential
Ready to take the exam?
Add your official CCNA-210-260 exam voucher to your order.
Official Voucher · Fast delivery · Retake bundle available
Exam voucher is sold separately and not included with standard course.
04 / Reviews
4.4
★★★★
191 verified learner reviews
3M+ happy customers · 50+ countries
★★★★
I had the opportunity to take the CCNA Security 210-260 course on uCertify and I had an amazing UX. It was a hands-on learning process! I enjoyed one of the tools; the study...
★★★★★
CCNA Security 210-260 Official Cert Guide covers all of the objectives to exam preparation. The reading materials are complete and easy to understand. We can use the practice...
05 / FAQs
Questions before you start
What are the prerequisites for this exam?+
Any valid Cisco CCENT, CCNA Routing and Switching, or any CCIE certification can act as a prerequisite.
What is the exam registration fee?+
USD 300
Where do I take the exam?+
What is the format of the exam?+
Multiple choice single answer, multiple choice multiple answers, drag and drop, and simlet.
How many questions are asked in the exam?+
The exam contains 60-70 questions.
What is the duration of the exam?+
90 minutes
What is the exam's retake policy?+
The policies for retaking exams are as follows:
- Once passed, a candidate must wait a minimum of 180 days before taking the same exam with an identical exam number.
- Candidates who fail any CCIE or CCDE written exam must wait for a period of 15 calendar days, beginning the day after the failed attempt, before retaking the same exam.
- Candidates who violate these policies are in violation of the agreement. Such conduct is strictly prohibited as described in the Cisco Certification and Confidentiality Agreement.
- Candidates who fail an Associate, Professional, or Specialist exam must wait a period of five (5) calendar days, beginning the day after the failed attempt, before they may retest for the same exam.
Where can I find more information about this exam?+
Keep going
You might also like
Prepare for CCNA Security 210-260 Official Cert Guide
One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.
- 1 year of full access
- 40 LiveLab included
- Certificate of completion
No credit card required