CCNA Security Official Exam Certification Guide (Exam 640-553)

by Watkins, Michael; Wallace, Kevin

• ISBN13: 9781587202209
• ISBN10: 1587202204
• Format: Hardcover w/CD
• Copyright: 2008-01-01
• Publisher: Cisco Press

Summary

Preparation and practice for the ALL NEW CCNA Security exam from the all-time best selling CCNA self-study test preparation series.

Table of Contents

Foreword

Introduction

Network Security Concepts

Understanding Network Security Principles

"Do I Know This Already?" Quiz

Foundation Topics

Exploring Security Fundamentals

Why Network Security Is a Necessity

Types of Threats

Scope of the Challenge

Nonsecured Custom Applications

The Three Primary Goals of Network Security

Confidentiality

Integrity

Availability

Categorizing Data

Classification Models

Classification Roles

Controls in a Security Solution

Responding to a Security Incident

Legal and Ethical Ramificat

Table of Contents provided by Publisher. All Rights Reserved.

Excerpts

Introduction IntroductionCongratulations on your decision to pursue a Cisco Certification! If you're reading far enough to look at the introduction to this book, you likely already have a sense of what you ultimately would like to achieve--the Cisco CCNA Security certification. Achieving Cisco CCNA Security certification requires that you pass the Cisco IINS (640-553) exam. Cisco certifications are recognized throughout the networking industry as a rigorous test of a candidate's knowledge of and ability to work with Cisco technology. Through its quality technologies, Cisco has garnered a significant market share in the router and switch marketplace, with more than 80 percent market share in some markets. For many industries and markets around the world, networking equals Cisco. Cisco certification will set you apart from the crowd and allow you to display your knowledge as a networking security professional.Historically speaking, the first entry-level Cisco certification is the Cisco Certified Network Associate (CCNA) certification, first offered in 1998.With the introduction of the CCNA Security certification, Cisco has for the first time provided an area of focus at the associate level. The CCNA Security certification is for networking professionals who work with Cisco security technologies and who want to demonstrate their mastery of core network security principles and technologies. Format of the IINS ExamThe 640-553 IINS exam follows the same general format of other Cisco exams. When you get to the testing center and check in, the proctor gives you some general instructions and then takes you into a quiet room with a PC. When you're at the PC, you have a few things to do before the timer starts on your exam. For instance, you can take a sample quiz, just to get accustomed to the PC and the testing engine. If you have user-level PC skills, you should have no problems with the testing environment. Additionally, Chapter 16 points to a Cisco website where you can see a demo of the actual Cisco test engine.When you start the exam, you are asked a series of questions. You answer the question and then move on to the next question.The exam engine does not let you go back and change your answer.When you move on to the next question, that's it for the earlier question.The exam questions can be in one of the following formats:Multiple-choice (MC)TestletDrag-and-drop (DND)Simulated lab (Sim)SimletThe first three types of questions are relatively common in many testing environments. The multiple-choice format simply requires that you point and click a circle beside the correct answer(s). Cisco traditionally tells you how many answers you need to choose, and the testing software prevents you from choosing too many answers. Testlets are questions with one general scenario, with multiple MC questions about the overall scenario. Drag-and-drop questions require you to click and hold, move a button or icon to another area, and release the mouse button to place the object somewhere else--typically in a list. For example, to get the question correct, you might need to put a list of five things in the proper order.The last two types both use a network simulator to ask questions. Interestingly, these two types allow Cisco to assess two very different skills. Sim questions generally describe a problem, and your task is to configure one or more routers and switches to fix the problem. The exam then grades the question based on the configuration you changed or added. Interestingly, Sim questions are the only questions that Cisco (to date) has openly confirmed that partial credit is given for.The Simlet questions may well be the most difficult style of question on the exams. Simlet question