CCNA Security 210-260 Official Cert Guide

Book Preface

Congratulations! If you are reading this, you have in your possession a powerful tool that can help you to

â–  Improve your awareness and knowledge of network security
â–  Increase your skill level related to the implementation of that security
â–  Prepare for the CCNA Security certification exam

When writing this book, we did so with you in mind, and together we will discover the critical ingredients that make up the recipe for a secure network and work through examples of how to implement these features. By focusing on both covering the objectives for the CCNA Security exam and integrating that with real-world best practices and examples, we created this content with the intention of being your personal tour guides as we take you on a journey through the world of network security.

The CCNA Security Implementing Cisco Network Security (IINS) 210-260 exam is required for the CCNA Security certification. The prerequisite for CCNA Security is the CCNA Route/Switch certification (or any CCIE certification). The CCNA Security exam tests your knowledge of securing Cisco routers and switches and their = associated networks, and this book prepares you for that exam. This book covers all the topics listed in Cisco’s exam blueprint, and each chapter includes key topics and preparation tasks to assist you in mastering this information. The CD that accompanies this book also includes bonus videos to assist you in your journey toward becoming a CCNA in Security. Of course, the CD included with the printed book also includes several practice questions to help you prepare for the exam.

Contents at a Glance

Introduction xxvi
Part I Fundamentals of Network Security
Chapter 1 Networking Security Concepts 3
Chapter 2 Common Security Threats 25
Part II Secure Access
Chapter 3 Implementing AAA in Cisco IOS 35
Chapter 4 Bring Your Own Device (BYOD) 71
Part III Virtual Private Networks (VPN)
Chapter 5 Fundamentals of VPN Technology and Cryptography 83
Chapter 6 Fundamentals of IP Security 119
Chapter 7 Implementing IPsec Site-to-Site VPNs 149
Chapter 8 Implementing SSL VPNs Using Cisco ASA 203
Part IV Secure Routing and Switching
Chapter 9 Securing Layer 2 Technologies 233
Chapter 10 Network Foundation Protection 261
Chapter 11 Securing the Management Plane on Cisco IOS Devices 275
Chapter 12 Securing the Data Plane in IPv6 321
Chapter 13 Securing Routing Protocols and the Control Plane 341
Part V Cisco Firewall Technologies and Intrusion Prevention System Technologies
Chapter 14 Understanding Firewall Fundamentals 355
Chapter 15 Implementing Cisco IOS Zone-Based Firewalls 377
Chapter 16 Configuring Basic Firewall Policies on Cisco ASA 413
Chapter 17 Cisco IDS/IPS Fundamentals 457
Part VI Content and Endpoint Security
Chapter 18 Mitigation Technologies for E-mail-Based and Web-Based Threats 477
Chapter 19 Mitigation Technologies for Endpoint Threats 495
Part VII Final Preparation
Chapter 20 Final Preparation 505
Part VIII Appendixes
Appendix A Answers to the “Do I Know This Already?” Quizzes 511
Appendix B CCNA Security 210-260 (IINS) Exam Updates 517
Glossary 521
Index 533