CCNA Security 640-554 Official Cert Guide

Part III: Mitigating and Controlling Threats

CCNA Security exam topics covered in this part:

• Describe common security threats

• Implement security on Cisco routers

• Describe Cisco Security Manager

• Describe standard, extended, and named IP IOS access control lists (ACL) to filter packets

• Describe considerations when building ACLs

• Implement IP ACLs to mitigate threats in a network

• Describe operational strengths and weaknesses of the different firewall technologies

• Describe stateful firewalls

• Describe the types of NAT used in firewall technologies

• Implement zone-based policy firewall using CCP

• Implement the Cisco Adaptive Security Appliance (ASA)

• Implement Network Address Translation (NAT) and Port Address Translation (PAT) ...