CERTIFICAZIONE CISCO CCNA SECURITY 640-553

La certificazione Cisco CCNA 640-553 è la verticalizzazione
in ambito security della certificazione Cisco CCNA 640-802.
Tale certificazione attesta le abilità nell' implementazione di soluzioni di sicurezza per assicurare integrità ,
confidenzialità e continuità del servizio.
Questa certificazione è ritenuta dalla National Security
Agency Americana (NSA)  in linea con lo standard Formativo Internazionale CNSS 4011 al quale tutti i professionisti della sicurezza si rifanno per operare all’ interno di strutture Governative.
L'esame ha una durata di 120 Minuti dove il candidato dovrà rispondere a 55-65 quesiti in Lingua Inglese
Le domande sono divise in Risposta Multipla ,
Associazione di testo con il metodo del Drag and Drop e in vere e proprie simulazioni dove il candidato
sarà chiamato alla configurazione degli apparati preposti.

Di seguito tutte le argomentazioni ufficiali su cui l'esame Cisco CCNA 640-553 verte:

Describe the security threats facing modern network infrastructures

• Describe and list mitigation methods for common network attacks
• Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks
• Describe the Cisco Self Defending Network architecture

Secure Cisco routers

• Secure Cisco routers using the SDM Security Audit feature
• Use the One-Step Lockdown feature in SDM to secure a Cisco router
• Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements
• Secure administrative access to Cisco routers by configuring multiple privilege levels
• Secure administrative access to Cisco routers by configuring role based CLI
• Secure the Cisco IOS image and configuration file

Implement AAA on Cisco routers using local router database and external ACS

• Explain the functions and importance of AAA
• Describe the features of TACACS+ and RADIUS AAA protocols
• Configure AAA authentication
• Configure AAA authorization
• Configure AAA accounting

Mitigate threats to Cisco routers and networks using ACLs

• Explain the functionality of standard, extended, and named IP ACLs used by routers to filter packets
• Configure and verify IP ACLs to mitigate given threats (filter IP traffic destined for Telnet, SNMP, and DDoS attacks) in a network using CLI
• Configure IP ACLs to prevent IP address spoofing using CLI
• Discuss the caveats to be considered when building ACLs

Implement secure network management and reporting

• Use CLI and SDM to configure SSH on Cisco routers to enable secured management access
• Use CLI and SDM to configure Cisco routers to send Syslog messages to a Syslog server

Mitigate common Layer 2 attacks

• Describe how to prevent layer 2 attacks by configuring basic Catalyst switch security features

Implement the Cisco IOS firewall feature set using SDM

• Describe the operational strengths and weaknesses of the different firewall technologies
• Explain stateful firewall operations and the function of the state table
• Implement Zone Based Firewall using SDM

Implement the Cisco IOS IPS feature set using SDM

• Define network based vs. host based intrusion detection and prevention
• Explain IPS technologies, attack responses, and monitoring options
• Enable and verify Cisco IOS IPS operations using SDM

Implement site-to-site VPNs on Cisco Routers using SDM

• Explain the different methods used in cryptography
• Explain IKE protocol functionality and phases
• Describe the building blocks of IPSec and the security functions it provides
• Configure and verify an IPSec site-to-site VPN with pre-shared key authentication using SDM

- Corso Cisco CCNA Security
- Corso Cisco CCNA E-learning
- Laboratorio Cisco
- Importanza della Certificazione Informatica
- Cisco Academy
- Calendario Sessioni Esame
- Prenota il tuo Esame
- Importanza della Certificazione Informatica