CCNA Security MInd Map

CCNA Security MInd Map

1. 1.0 Security Concepts

   • 1.1.a Describe confidentiality, integrity, availability (CIA)
     • 1.1.a  What is CIA? These are the three basic components of information security. They are the following: Confidentiality – only the people who are supposed to see the data, can see it. All others cannot. This is ensured through the use of EncryptionIntegrity – ensuring the data is untouched and has not been manipulated, except by authorized people. This can be ensured through the use of hashing.Availability – the people who need it can get to it. This usually takes the form of redundancy – of circuits, devices, servers etc.
   • 1.1.b Describe SIEM technology
     • 1.1.b  What is SIEM?Security information and event management (SIEM) is an approach to security management that seeks to provide a holistic view of an organization’s information technology (IT) security. The acronym is pronounced “sim” with a silent e. In Cisco terms this applies to the collection, correlation and acting on security information. SEIM is supposed to integrate into the overall architecture of the network. What this means is the security and monitoring of a network should be aspects of the initial design and not afterthoughts as they so often are. SEIM comes from the convergence of SIM (Security information Management) and SEM (security event management), and what we are essentially talking about is a single pane of glass for the security systems.
   • 1.1.c Identify common security terms
     • 1.1.c Identify common security terms Security terms can mean a variety of things depending on who you are talking to but for everyday life in security and especially for the exam, these are the terms we need to be familiar with and understand.Asset – this is what we are attempting to keep secure. It might be a server or an entire network or some data.Vulnerability – A weakness in the system. This can be anything from a weak operating system, weak password, poor policy and procedure or device capability.Threat – this is the exploitation of the vulnerabilityRisk – the chance of that exploit being used against youCountermeasure – Steps we take to mitigate the risk of the exploit being used against us.Be familiar with the syslog messaging levels. Just like with learning the OSI model for the CCNA R&S, get to know these:Alert Messages            Severity 1 Critical Messages         Severity 2 Error Messages            Severity 3 Warning Messages         Severity 4 Notification Messages     Severity 5 Informational Messages    Severity 6 Debugging Messages        Severity 7
   • 1.1.d Identify common network security zones
     • 1.1.d Identify common network security zonesZones are an important concept in security. In fact the definition of a firewall is that it controls access between zones. In terms of firewalls, (both ASA and IOS) there are 3 zones to be aware of: Inside – this is the local LAN side of the firewall. Typical high security, #100 and trustedOutside – this is the wild untamed internet, lowest security #0, not trusted at allDMZ – This is a zone that has one foot in each camp – lower security for internet facing servers, proxies etc. #1-99 Modern firewalls perform inspection of traffic and use that inspection to form tables of what traffic is allowed to flow from untrusted to trusted network. By default, no traffic is allowed to flow from untrusted to trusted so: inside to outside traffic is ok inside to DMZ traffic is ok Outside to inside is no allowed DMZ to inside is not allowed DMZ to outside is  allowed Outside to DMZ is not allowed

2. 2.0 Secure Access

3. 3.0 VPN

4. 4.0 Secure Routing and Switching

5. 5.0 Cisco Firewall Technologies

6. 6.0 IPS

7. 7.0 Content and Endpoint Security