CCNA Security | 1.1 Common Security Principles Exam Topics Summary

CCNA Security | 1.1 Common Security Principles Exam Topics Summary

Follow me on Twitter:

My strategy to pass CCNA Security in 6 MONTHS:…

Video 1:…

Video 2:…

Video 3:…

Video 4:

Video 5:

1.1 Common security principles

Confidentiality: Only authorized person can view. Integrity: The data hasn’t been modified by an unauthorized users. Availability: The data is available to authorized users when and where they need it.

SIEM: It is a live log and event management of a network

1.1.c Identify common security terms

Asset – Property, people, information/data (This is what we want to protect with CIA) Vulnerability – Weakness in a system or design (Maybe a firewall is unpatched) Threat – Potential danger to Assets. Risk – Potential for unauthorized access to compromise, destroy, or cause damage (Firewall with no PW, Reset our network devices, no network access). Countermeasure – Mitigates potential RISK. (a Firewall, blocking port and access) .

1.1.d Identify common network security zones

Private: The private, trusted network is commonly referred to as the “inside” security zone (controlled by us) Public : The public, untrusted network is commonly referred to as the “outside” security zone (cannot control) DMZ: This zone usually contains a relatively small number of systems whose services are made available to systems residing in the outside zone.

1.2 Common security threats

1.2.a Identify common network attacks

  • Reconnaissance
  • Social Engineering
  • Backdoor
  • brute force
  • Privilege escalation
  • botnets DDoS
  • Man-in-the-middle

How to protect against attacks

  • Least Privilege
  • Role rotation
  • Auditing
  • Defense in depth

Describe social engineering

  • Phishing
  • Phone Scams
  • Malverstin

Identify malware

  • NetFlow
  • IPEvents
  • Snort

1.2.d Classify the vectors of data loss/exfiltration

  • IP
  • Credit cards
  • PII

1.3 Cryptography concepts

Hash Algorithm – a fixed value used data for integrity. Symmetric – Same key to encrypt and decrypt. Faster, use less CPU, and used to encrypt VPN traffic to encrypt HTTPS. Asymmetric – Private and Public key used to encrypt and decrypt. Slower, use more CPU, and used to encrypt VPN authentication and it is used to send over the symmetric shared public key.

Digital signatures – A signature used to sign data. Certificates – issue by the CA used to identify, our asymmetric public and private key. PKI – is the infrastructure manage keys and certificates.

1.4 Describe network topologies

CAN – Multiple LANs connected in a limited area. WAN – Multiple LANs connected in a large geographic area. Data Center – a facility that host large servers. SaaS – Host software and license applications (OneDrive). PaaS – Provides you with software and hardware power. IaaS – provides you with everything you need over the internet: firewall, storage, and OS.


Nothing here yet!!