| 思科IOS网络安全 |
Exam 642-501：
Securing Cisco IOS Networks (SECUR)
|
 |
| |
| 基础介绍 |
| CCSP认证的必要组成部分，是一个面向解决方案的，基于网络案例的研究，讲授安装、配置、操作、管理和验证Cisco网络安全产品的知识和技能以及Cisco
IOS安全的特点，本课程着眼于实现IP网络安全,是CCSP的五门必考科目之一. |
考试摘要 |
| The Securing Cisco IOS Networks exam (SECUR
642-501) is one of the exams associated with the Cisco
Certified Security Professional, Cisco Firewall Specialist,
Cisco VPN |
|
|
| Specialist, and Cisco IDS Specialist certifications.
Candidates can prepare for this exam by taking the SECUR
1.0 course. This exam includes simulations and tests a
candidate's knowledge and ability to secure Cisco IOS
router networks. CCNA or CCDA recertification candidates
who pass the 642-501 exam will be considered recertified
at the CCNA or CCDA level. |
| |
| 考试要点 |
* 课程介绍
* 网络威胁
* 基本路由器安全
* 高级AAA安全功能，确保路由器网络安全
* 缓解Cisco路由器安全威胁
* Cisco IOS防火墙CBAC功能
* Cisco IOS防火墙认证代理
* Cisco IOS防火墙入侵检测
* 使用路由器实现IPSec VPN
* 使用CA实现高级IPSec VPN
* 使用Cisco Easy VPN配置IOS远程访问
* 管理企业VPN路由器 |
| |
| 考试范围 |
The following information provides general guidelines
for the content likely to be included on this exam. However,
other related topics may also appear on any specific delivery
of the exam.
Basic Cisco Router Security
Secure administrative access for Cisco routers
Describe the components of a basic AAA implementation
Test the perimeter router AAA implementation using applicable
debug commands
Advanced AAA Security
for Cisco Router Networks
Describe the features and architecture of CSACS 3.0 for
Windows
Configure the perimeter router to enable AAA processes
to use a TACACS remote service
Cisco
Router Threat Mitigation
Disable unused router services and interfaces
Use access lists to mitigate common router security threats
Cisco IOS Firewall CBAC Configuration
Define the Cisco IOS Firewall and CBAC
Configure CBAC
Cisco IOS Firewall Authentication
Proxy Configuration
Describe how authentication proxy technology works
Configure AAA on a Cisco IOS Firewall
Cisco
IOS Firewall IDS Configuration
Name the two types of signature implementations used by
the Cisco IOS Firewall IDS
Initialize a Cisco IOS Firewall IDS router
Building Basic IPSec Using Cisco Routers
Configure a Cisco router for IPSec using pre-shared keys
Verify the IKE and IPSec configuration
Explain the issues regarding configuring IPSec manually
and using RSA encrypted nonces
Building
Advanced IPSec VPNs Using Cisco Routers and Certificate
Authorities
Advanced IPSec VPNs using Cisco Routers and CAs
Configuring Cisco Remote Access IPSec VPNs
Describe the Easy VPN Server
Managing
Enterprise VPN Routers
Managing Enterprise VPN Routers
|
| |
| |
|
|
|
|
Login |
|
