CCNA Security

Skills-Based Assessment

Topology

Objectives
Part 1: Build the network and configure basic device settings
Part 2: Secure Network Routers
• Configure encrypted passwords and a login banner.
• Configure EXEC timeout on console and VTY lines.
• Configure login failure rates and virtual login enhancements
• Configure SSH access and disable Telnet.

All contents are Copyright © 1992–2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 2
CCNA Security

• Configure local AAA authentication.

• Configure a zone-based policy firewall (ZPF) and ACLs using Cisco SDM.
• Configure Intrusion Prevention System (IPS) using Cisco SDM.
Part 3: Configure a Site-to-Site VPN
• Configure a Site-to-Site VPN using SDM.
Part 4: Secure Network Switches
• Configure passwords, and a login banner.
• Configure management VLAN access.
• Secure trunk ports.
• Secure access ports.
• Protect against STP attacks.
• Configure port security and disable unused ports.

All contents are Copyright © 1992–2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 2