CCNA Security 210-260 Certification Guide

封面

版权信息

Packt Upsell

Why subscribe?

PacktPub.com

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Conventions

Get in touch

Reviews

Exploring Security Threats

Important terms in network security

Threats

Vulnerability

Analyzing vulnerability

Introduction to an attack

Passive attacks

Active attacks

Spoofing attacks

Internet protocol – the heart of internet communication

How is an IP datagram spoofed?

IP spoofing

Scanning

Hijacking an online session

Flooding

ARP spoofing attacks

Mitigating ARP spoofing attacks

The DHCP process

Why DHCP snooping?

Trusted and untrusted sources

Ping of Death

TCP SYN flood attacks

Password attacks

Buffer overflow attacks

Malware

Network security tools

Wireshark

Metasploit

Kali Linux

Summary

Delving into Security Toolkits

Firewall functions

Rules of a firewall

Types of firewall

Packet-filtering firewall/stateless firewall

Circuit-level gateway firewall/stateful firewall

Application-layer firewall

Zone-based firewall

Intrusion prevention system

Intrusion detection system

Virtual Private Network

Benefits of VPN

Site-to-site VPNs

Remote-access VPN

Content security

Content Security Policy

Cisco Email Security Appliance

Cisco IronPort Web Security Appliance

Endpoint security

Summary

Understanding Security Policies

Need for a security policy

Five steps for a security policy

Security policy components

Best example for a security policy – a password policy

How to develop a policy

Risk

Risk analysis

Benefits of risk analysis

Quantitative risk

Qualitative risk

Vulnerability

Weakness in technology

Weakness in configuration

Weakness in a security policy

Threat

Threat consequence

Disclosure

Threat action – exposure

Threat action – interception

Threat action – inference

Threat action – intrusion

Deception

Threat action – masquerade

Threat action - falsification

Threat action – repudiation

Disruption

Threat action – incapacitation

Types of threat

Asset

Why classifying of assets is required

Identifying the asset

Asset accountability

Creating a plan for asset classification