Exam Topics

Exam Topics

According to the Cisco Web site, the following information provides general guidelines for the content likely to be included on this exam. However, other related topics may also appear on any specific delivery of the exam.

Security Fundamentals

  • Need for network security

  • Network attack taxonomy

  • Network security policy

  • Management protocols and functions

Architectural Overview

  • Design fundamentals

  • Safe axioms

  • Security wheel

Cisco Security Portfolio

  • Secure connectivity - Virtual Private Network solutions

  • Secure connectivity - the 3000 Concentrator series

  • Secure connectivity - Cisco VPN optimized routers

  • Perimeter security firewalls - Cisco PIX and Cisco IOS Firewall

  • Intrusion protection - IDS and Cisco secure scanner

  • Identity - Access control solutions

  • Security management - VMS and CSPM

  • Cisco AVVID

SAFE Small Network Design

  • Small network corporate Internet module

  • Small network campus module

  • Implementation-ISP router

  • Implementation-IOS Firewall features and configuration

  • Implementation-PIX Firewall

SAFE Medium Network Design

  • Medium network corporate Internet module

  • Medium network corporate Internet module design guidelines

  • Medium network campus module

  • Medium network campus module design guidelines

  • Medium network WAN module

  • Implementation - ISP router

  • Implementation - edge router

  • Implementation - IOS Firewall

  • Implementation - PIX Firewall

  • Implementation - NIDS

  • Implementation - HIDS

  • Implementation - VPN Concentrator

  • Implementation - Layer 3 switch

SAFE Remote-User Network Implementation

  • Key devices

  • Threat mitigation

  • Software access option

  • Remote site firewall option

  • Hardware VPN Client option

  • Remote site router option




Part III: Virtual Private Networks (VPNs)