CCNA Security IINS Exam | 1.1 Common security principles Exam Topics Summary Day 5
Follow me on Twitter:
/ ccnadailytips
My strategy to pass CCNA Security in 6 MONTHS:
• CCNA Security IINS | My Study Strateg...
Video 1:
• CCNA Security IINS Exam Topics | 1.1 ...
Video 2:
• CCNA Security IINS Exam Topics | 1.1 ...
Video 3:
• CCNA Security IINS Exam Topics | 1.2 ...
Video 4:
• CCNA Security IINS Exam Topics | 1.3 ...
Video 5:
• CCNA Security IINS Exam Topics | 1.4 ...
1.1 Common security principles
Confidentiality: Only authorized person can view.
Integrity: The data hasn’t been modified by an unauthorized users.
Availability: The data is available to authorized users when and where they need it.
SIEM: It is a live log and event management of a network
Asset - Property, people, information/data (This is what we want to protect with CIA)
Vulnerability - Weakness in a system or design (Maybe a firewall is unpatched)
Threat - Potential danger to Assets
Risk - Potential for unauthorized access to compromise, destroy, or cause damage (Firewall with no PW, Reset our network devices, no network access)
Countermeasure - Mitigates potential RISK. (a Firewall, blocking port and access)
Private: The private, trusted network is commonly referred to as the “inside” security zone (controlled by us)
Public : The public, untrusted network is commonly referred to as the “outside” security zone (cannot control)
DMZ: This zone usually contains a relatively small number of systems whose services are made available to systems residing in the outside zone.
1.2 Common security threats
1.2.a Identify common network attacks
Reconnaissance
Social Engineering
Backdoor, brute force
Privilege escalation, botnets
DDoS, Man-in-the-middle
How to protect against attacks
Least Privilege
Role rotation
Auditing
Defense in depth
Describe social engineering
Phishing
Phone Scams
Malverstin
Identify malware
NetFlow
IPEvents
Snort
1.2.d Classify the vectors of data loss/exfiltration
IP
Credit cards
PII
1.3 Cryptography concepts
Hash Algorithm - a fixed value used data for integrity
Symmetric - Same key to encrypt and decrypt. Faster, use less CPU, and used to encrypt VPN traffic to encrypt HTTPS
Asymmetric - Private and Public key used to encrypt and decrypt. Slower, use more CPU, and used to encrypt VPN authentication and it is used to send over the symmetric shared public key
Digital signatures - A signature used to sign data.
Certificates - issue by the CA used to identify, our asymmetric public and private key
PKI - is the infrastructure manage keys and certificates.
1.4 Describe network topologies
CAN - Multiple LANs connected in a limited area
WAN - Multiple LANs connected in a large geographic area.
Data Center - a facility that host large servers
SaaS - Host software and license applications (OneDrive)
PaaS - Provides you with software and hardware power
IaaS - provides you with everything you need over the internet: firewall, storage, and OS.
1.2 Common security threats