11 Certification - MCSA/MCSE: Windows 2003 Security and CCENT/ CCNA/ CCDA/ CCDP/ CCNP Boot Camp (Some gaps between courses)
| Course Length: |
39 days |
| Certifications: |
MCP MCSA MCSE MCSA: Security MCSE: Security CompTIA Security+ CCNA CCDA CCDP CCNP |
| Number of Exams: |
16 |
| Cisco® Credits: |
100 |
The MCSA/MCSE: Security exams support the release of Windows Server 2003 by identifying systems engineers who can successfully plan and implement a network infrastructure, Active Directory® infrastructure, and client deployment on the Windows 2003 platform, and perform maintenance at a high level for a medium- to large-sized Windows 2003 environment.
The MCSA/MCSE: Security on Windows Server 2003 credential offers IT professionals a competitive edge in today's constantly changing business environment by validating the specific experience required by the network and systems administrator job role. The certification provides employers with a means to identify those qualified individuals who have the appropriate skills set to do the job successfully.
CompTIA Security+ is the primary course you will need to take if your job responsibilities include securing network services, network devices, and network traffic. In this course, you'll build on your knowledge and professional experience with computer hardware, operating systems, and networks as you acquire the specific skills required to implement basic security services on any type of computer network.
The CCNA certification (Cisco Certified Network Associate) indicates a foundation in and apprentice knowledge of networking. CCNA certified professionals can install, configure, and operate LAN, WAN, and dial access services for small networks (100 nodes or fewer), including but not limited to use of these protocols: IP, IGRP, Serial, Frame Relay, IP RIP, VLANs, RIP, Ethernet, Access Lists.
The CCDA certification (Cisco Certified Design Associate) indicates a foundation or apprentice knowledge of network design for the Cisco Internetwork Infrastructure. CCDA certified professionals can design routed and switched network infrastructures involving LAN, WAN, and dial access services for businesses and organizations.
The CCDP (Cisco Certified Design Professional) certification indicates advanced or journeyman knowledge of network design. With a CCDP, a network professional can design routed and switched networks involving LAN, WAN, and dial access services, applying modular design practices and making sure the whole solution responds optimally to the business and technical needs and is designed to be highly available.
The CCNP certification (Cisco Certified Network Professional) indicates advanced or journeyman knowledge of networks. With a CCNP, a network professional can install, configure, and troubleshoot local and wide area networks for enterprise organizations with networks from 100 to more than 500 nodes. The content emphasizes topics such as security, converged networks, quality of service (QoS), virtual private networks (VPN) and broadband technologies.
Microsoft Exam 70-270
Installing, Configuring, and Administering Microsoft Windows XP Professional
Installing Windows XP Professional
- Perform an attended installation of Windows XP Professional.
- Perform an unattended installation of Windows XP Professional.
- Upgrade from a previous version of Windows to Windows XP Professional.
- Perform post-installation updates and product activation.
- Troubleshoot failed installations.
Implementing and Conducting Administration of Resources
- Monitor, manage, and troubleshoot access to files and folders.
- Manage and troubleshoot access to shared folders.
- Connect to local and network print devices.
- Configure and manage file systems.
- Manage and troubleshoot access to and synchronization of offline files.
Implementing, Managing, Monitoring, and Troubleshooting Hardware Devices and Drivers
- Implement, manage, and troubleshoot disk devices.
- Implement, manage, and troubleshoot display devices.
- Configure Advanced Configuration Power Interface (ACPI).
- Implement, manage, and troubleshoot input and output (I/O) devices.
- Manage and troubleshoot drivers and driver signing.
- Monitor and configure multiprocessor computers.
Monitoring and Optimizing System Performance and Reliability
- Monitor, optimize, and troubleshoot performance of the Windows XP Professional desktop.
- Manage, monitor, and optimize system performance for mobile users.
- Restore and back up the operating system, System State data, and user data.
Configuring and Troubleshooting the Desktop Environment
- Configure and manage user profiles and desktop settings.
- Configure support for multiple languages or multiple locations.
- Manage applications by using Windows Installer packages.
Implementing, Managing, and Troubleshooting Network Protocols and Services
- Configure and troubleshoot the TCP/IP protocol.
- Connect to computers by using dial-up networking.
- Connect to resources using Internet Explorer.
- Configure, manage, and implement Internet Information Services (IIS).
- Configure, manage, and troubleshoot Remote Desktop and Remote Assistance.
- Configure, manage, and troubleshoot an Internet Connection Firewall (ICF).
Configuring, Managing, and Troubleshooting Security
- Configure, manage, and troubleshoot Encrypting File System (EFS).
- Configure, manage, and troubleshoot a security configuration and local security policy.
- Configure, manage, and troubleshoot local user and group accounts.
- Configure, manage, and troubleshoot Internet Explorer security settings.
[ back to top ]
Microsoft Exam 70-290
Managing and Maintaining a Microsoft Windows Server 2003 Environment
Managing and Maintaining Physical and Logical Devices
- Manage basic disks and dynamic disks.
- Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items.
- Optimize server disk performance.
- Install and configure server hardware devices.
Managing Users, Computers, and Groups
- Manage local, roaming, and mandatory user profiles.
- Create and manage computer accounts in an Active Directory environment.
- Create and manage groups.
- Create and manage user accounts.
- Troubleshoot computer accounts.
- Troubleshoot user accounts.
- Troubleshoot user authentication issues.
Managing and Maintaining Access to Resources
- Configure access to shared folders.
- Troubleshoot Terminal Services.
- Configure file system permissions.
- Troubleshoot access to files and shared folders.
Managing and Maintaining a Server Environment
- Monitor and analyze events. Tools might include Event Viewer and System Monitor.
- Manage software update infrastructure.
- Manage software site licensing.
- Manage servers remotely.
- Troubleshoot print queues.
- Monitor system performance.
- Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.
- Monitor and optimize a server environment for application performance.
- Manage a Web server.
Managing and Implementing Disaster Recovery
- Perform system recovery for a server.
- Manage backup procedures.
- Recover from server hardware failure.
- Restore backup data.
- Schedule backup jobs.
[ back to top ]
Microsoft Exam 70-291
Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Implementing, Managing, and Maintaining IP Addressing
- Configure TCP/IP addressing on a server computer.
- Manage DHCP.
- Troubleshoot TCP/IP addressing.
- Troubleshoot DHCP.
Implementing, Managing, and Maintaining Name Resolution
- Install and configure the DNS Server service.
- Manage DNS.
- Monitor DNS. Tools might include System Monitor, Event Viewer, Replication Monitor, and DNS debug logs.
Implementing, Managing, and Maintaining Network Security
- Implement secure network administration procedures.
- Monitor network protocol security. Tools might include the IP Security Monitor Microsoft Management Console (MMC) snap-in and Kerberos support tools.
- Troubleshoot network protocol security. Tools might include the IP Security Monitor MMC snap-in, Event Viewer, and Network Monitor.
Implementing, Managing, and Maintaining Routing and Remote Access
- Configure Routing and Remote Access user authentication.
- Manage remote access.
- Manage TCP/IP routing.
- Implement secure access between private networks.
- Troubleshoot user access to remote access services.
- Troubleshoot Routing and Remote Access routing.
Maintaining a Network Infrastructure
- Monitor network traffic. Tools might include Network Monitor and System Monitor.
- Troubleshoot connectivity to the Internet.
- Troubleshoot server services.
[ back to top ]
CompTIA Security+
CompTIA Security+ validates knowledge of systems security, network infrastructure, access control, assessments and audits, cryptography and organizational security.
The CompTIA Security+ (2008 Edition) Certification is a vendor neutral credential. The Security+ exam is an internationally recognized validation of foundation-level security skills and knowledge, and is used by organizations and security professionals around the globe. The skills and knowledge measured by this course are derived from an industry-wide Job Task Analysis (JTA) and were validated through a global survey in Q4, 2007.
Security+ is the primary course you will need to take if your job responsibilities include securing network services, network devices, and network traffic. It is also the main course you will take to prepare for the CompTIA Security+ examination (exam number SY0-201). In this course, you'll build on your knowledge and professional experience with computer hardware, operating systems, and networks as you acquire the specific skills required to implement basic security services on any type of computer network.
The CompTIA Security+ course is 3.5 days including the certification exam.
Target Student: This course is targeted toward an Information Technology (IT) professional who has networking and administrative skills in Windows-based TCP/IP networks and familiarity with other operating systems and to those who want to further a career in IT by acquiring a foundational knowledge of security topics; prepare for the CompTIA Security+ Certification examination; or use Security+ as the foundation for advanced security certifications.
Prerequisites: CompTIA A+ and Network+ certifications, or equivalent knowledge. Experience in networking, including experience configuring and managing TCP/IP is helpful.
Course Content:
Systems Security
- Differentiate among various systems security threats.
- Explain the security risks pertaining to system hardware and peripherals.
- Implement OS hardening practices and procedures to achieve workstation and server security.
- Carry out the appropriate procedures to establish application security.
- Implement security applications.
- Explain the purpose and application of virtualization technology.
Network Infrastructure
- Differentiate between the different ports & protocols, their respective threats and mitigation techniques.
- Distinguish between network design elements and components.
- Determine the appropriate use of network security tools to facilitate network security.
- Apply the appropriate network tools to facilitate network security.
- Explain the vulnerabilities and mitigations associated with network devices.
- Explain the vulnerabilities and mitigations associated with various transmission media.
- Explain the vulnerabilities and implement mitigations associated with wireless networking.
Access Control
- Identify and apply industry best practices for access control methods.
- Explain common access control models and the differences between each.
- Organize users and computers into appropriate security groups and roles while distinguishing between appropriate rights and privileges.
- Apply appropriate security controls to file and print resources.
- Compare and implement logical access control methods.
- Summarize the various authentication models and identify the components of each.
- Deploy various authentication models and identify the components of each.
- Explain the difference between identification and authentication (identity proofing).
- Explain and apply physical access security methods.
Assessments & Audits
- Conduct risk assessments and implement risk mitigation.
- Carry out vulnerability assessments using common tools.
- Within the realm of vulnerability assessments, explain the proper use of penetration testing versus vulnerability scanning.
- Use monitoring tools on systems and networks and detect security-related anomalies.
- Compare and contrast various types of monitoring methodologies.
- Execute proper logging procedures and evaluate the results.
- Conduct periodic audits of system security settings.
Cryptography
- Explain general cryptography concepts.
- Explain basic hashing concepts and map various algorithms to appropriate applications.
- Explain basic encryption concepts and map various algorithms to appropriate applications.
- Explain and implement protocols.
- Explain core concepts of public key cryptography.
- Implement PKI and certificate management.
Organizational Security
- Explain redundancy planning and its components.
- Implement disaster recovery procedures.
- Differentiate between and execute appropriate incident response procedures.
- Identify and explain applicable legislation and organizational policies.
- Explain the importance of environmental controls.
- Explain the concept of and how to reduce the risks of social engineering.
[ back to top ]
Microsoft Exam 70-293
Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Planning and Implementing Server Roles and Server Security
- Configure security for servers that are assigned specific roles.
- Plan a secure baseline installation.
- Plan security for servers that are assigned specific roles. Roles might include domain controllers, Web servers, database servers, and mail servers.
- Evaluate and select the operating system to install on computers in an enterprise.
Planning, Implementing, and Maintaining a Network Infrastructure
- Plan a TCP/IP network infrastructure strategy.
- Plan and modify a network topology.
- Plan an Internet connectivity strategy.
- Plan network traffic monitoring. Tools might include Network Monitor and System Monitor.
- Troubleshoot connectivity to the Internet.
- Troubleshoot TCP/IP addressing.
- Plan a host name resolution strategy.
- Plan a NetBIOS name resolution strategy.
- Troubleshoot host name resolution.
Planning, Implementing, and Maintaining Routing and Remote Access
- Plan a routing strategy.
- Plan security for remote access users.
- Implement secure access between private networks.
- Troubleshoot TCP/IP routing. Tools might include the route, tracert, ping, pathping, and netsh commands and Network Monitor.
Planning, Implementing, and Maintaining Server Availability
- Plan services for high availability.
- Identify system bottlenecks, including memory, processor, disk, and network related bottlenecks.
- Implement a cluster server.
- Monitor Network Load Balancing. Tools might include the Network Load Balancing Monitor Microsoft Management Console (MMC) snap-in and the WLBS cluster control utility.
- Plan a backup and recovery strategy.
Planning and Maintaining Network Security
- Configure network protocol security.
- Configure security for data transmission.
- Plan for network protocol security.
- Plan secure network administration methods.
- Plan security for wireless networks.
- Plan security for data transmission.
- Troubleshoot security for data transmission. Tools might include the IP Security Monitor MMC snap-in and the Resultant Set of Policy (RSoP) MMC snap-in.
Planning, Implementing, and Maintaining Security Infrastructure.
- Configure Active Directory directory service for certificate publication.
- Plan a public key infrastructure (PKI) that uses Certificate Services.
- Plan a framework for planning and implementing security.
- Plan a security update infrastructure. Tools might include Microsoft Baseline Security Analyzer and Microsoft Software Update Services.
[ back to top ]
Microsoft Exam 70-294
Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure
Planning and Implementing an Active Directory Infrastructure
- Plan a strategy for placing global catalog servers.
- Plan flexible operations master role placement.
- Implement an Active Directory directory service forest and domain structure.
- Implement an Active Directory site topology.
- Plan an administrative delegation strategy.
Managing and Maintaining an Active Directory Infrastructure
- Manage an Active Directory forest and domain structure.
- Manage an Active Directory site.
- Monitor Active Directory replication failures. Tools might include Replication Monitor, Event Viewer, and support tools.
- Restore Active Directory directory services.
- Troubleshoot Active Directory.
Planning and Implementing User, Computer, and Group Strategies
- Plan a security group strategy.
- Plan a user authentication strategy.
- Plan an OU structure.
- Implement an OU structure.
Planning and Implementing Group Policy
- Plan Group Policy strategy.
- Configure the user environment by using Group Policy.
- Deploy a computer environment by using Group Policy.
Managing and Maintaining Group Policy
- Troubleshoot issues related to Group Policy application. deployment. Tools might include RSoP and the gpresult command.
- Maintain installed software by using Group Policy.
- Troubleshoot the application of Group Policy security settings. Tools might include RSoP and the gpresult command.
[ back to top ]
Microsoft Exam 70-298
Designing Security for a Microsoft Windows Server 2003 Network
Creating the Conceptual Design for Network Infrastructure Security by Gathering and Analyzing Business and Technical Requirements
- Analyze business requirements for designing security. Considerations include existing policies and procedures, sensitivity of data, cost, legal requirements, end-user impact, interoperability, maintainability, scalability, and risk.
- Design a framework for designing and implementing security. The framework should include prevention, detection, isolation, and recovery.
- Analyze technical constraints when designing security.
Creating the Logical Design for Network Infrastructure Security
- Design a public key infrastructure (PKI) that uses Certificate Services.
- Design a logical authentication strategy.
- Design security for network management.
- Design a security update infrastructure.
Creating the Physical Design for Network Infrastructure Security
- Design network infrastructure security.
- Design security for wireless networks.
- Design user authentication for Internet Information Services (IIS).
- Design security for Internet Information Services (IIS).
- Design security for communication between networks.
- Design security for communication with external organizations.
- Design security for servers that have specific roles. Roles include domain controller, network infrastructure server, file server, IIS server, terminal server, and POP3 mail server.
Designing an Access Control Strategy for Data
- Design an access control strategy for directory services.
- Design an access control strategy for files and folders.
- Design an access control strategy for the registry.
Creating the Physical Design for Client Infrastructure Security
- Design a client authentication strategy.
- Design a security strategy for client remote access.
- Design a strategy for securing client computers. Considerations include desktop and portable computers.
[ back to top ]
Microsoft Exam 70-299
Implementing and Administering Security in a Microsoft Windows Server 2003 Network
Implementing, Managing, and Troubleshooting Security Policies
- Plan security templates based on computer role. Computer roles include SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.
- Configure security templates.
- Deploy security templates.
- Troubleshoot security template problems.
- Configure additional security based on computer roles. Server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. Client computer roles include desktop, portable, and kiosk.
Implementing, Managing, and Troubleshooting Patch Management Infrastructure
- Plan the deployment of service packs and hotfixes.
- Assess the current status of service packs and hotfixes. Tools include MBSA and the MBSA command-line tool.
- Deploy service packs and hotfixes.
Implementing, Managing, and Troubleshooting Security for Network Communications
- Plan IPSec deployment.
- Configure IPSec policies to secure communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.
- Deploy and manage IPSec policies.
- Troubleshoot IPSec.
- Plan and implement security for wireless networks.
- Deploy, manage, and configure SSL certificates, including uses for HTTPS, LDAPS, and wireless networks. Considerations include renewing certificates and obtaining self-issued certificates instead of publicly issued certificates.
- Configure security for remote access users.
Planning, Configuring, and Troubleshooting Authentication, Authorization, and PKI
- Plan and configure authentication.
- Plan group structure.
- Plan and configure authorization.
- Install, manage, and configure Certificate Services.
[ back to top ]
Cisco CCNA®
Interconnecting Cisco Networking Devices Part 1 (ICND1)
The 640-822 Interconnecting Cisco Networking Devices Part 1 (ICND1) is the exam associated with the Cisco Certified Entry Network Technician (CCENT) certification and a tangible first step in achieving the Cisco Certified Network Associate (CCNA) certification. Candidates can prepare for this exam by taking the Interconnecting Cisco Networking Devices Part 1 (ICND1) v1.0 course. This exam tests a candidate's knowledge and skills required to successfully install, operate, and troubleshoot a small branch office network. The exam includes topics on networking fundamentals; connecting to a WAN; basic security and wireless concepts; routing and switching fundamentals; the TCP/IP and OSI models; IP addressing; WAN technologies; operating and configuring IOS devices; configuring RIPv2, static and default routing; implementing NAT and DHCP; and configuring simple networks.
Course Outline:
The following topics are general guidelines for the content likely to be included on the Interconnecting Cisco Networking Devices Part 1 exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Describe the operation of data networks.
- Describe the purpose and functions of various network devices
- Select the components required to meet a given network specification
- Use the OSI and TCP/IP models and their associated protocols to explain how data flows in a network
- Describe common networking applications including web applications
- Describe the purpose and basic operation of the protocols in the OSI and TCP models
- Describe the impact of applications (Voice Over IP and Video Over IP) on a network
- Interpret network diagrams
- Determine the path between two hosts across a network
- Describe the components required for network and Internet communications
- Identify and correct common network problems at layers 1, 2, 3 and 7 using a layered model approach
- Differentiate between LAN/WAN operation and features
Implement a small switched network
- Select the appropriate media, cables, ports, and connectors to connect switches to other network devices and hosts
- Explain the technology and media access control method for Ethernet technologies
- Explain network segmentation and basic traffic management concepts
- Explain the operation of Cisco switches and basic switching concepts
- Perform, save and verify initial switch configuration tasks including remote access management
- Verify network status and switch operation using basic utilities (including: ping, traceroute,telnet,SSH,arp, ipconfig), SHOW & DEBUG commands
- Implement and verify basic security for a switch (port security, deactivate ports)
- Identify, prescribe, and resolve common switched network media issues, configuration issues, autonegotiation, and switch hardware failures
Implement an IP addressing scheme and IP services to meet network requirements for a small branch office
- Describe the need and role of addressing in a network
- Create and apply an addressing scheme to a network
- Assign and verify valid IP addresses to hosts, servers, and networking devices in a LAN environment
- Explain the basic uses and operation of NAT in a small network connecting to one ISP
- Describe and verify DNS operation
- Describe the operation and benefits of using private and public IP addressing
- Enable NAT for a small network with a single ISP and connection using SDM and verify operation using CLI and ping
- Configure, verify and troubleshoot DHCP and DNS operation on a router.(including: CLI/SDM)
- Implement static and dynamic addressing services for hosts in a LAN environment
- Identify and correct IP addressing issues
Implement a small routed network
- Describe basic routing concepts (including: packet forwarding, router lookup process)
- Describe the operation of Cisco routers (including: router bootup process, POST, router components)
- Select the appropriate media, cables, ports, and connectors to connect routers to other network devices and hosts
- Configure, verify, and troubleshoot RIPv2
- Access and utilize the router CLI to set basic parameters
- Connect, configure, and verify operation status of a device interface
- Verify device configuration and network connectivity using ping, traceroute, telnet, SSH or other utilities
- Perform and verify routing configuration tasks for a static or default route given specific routing requirements
- Manage IOS configuration files (including: save, edit, upgrade, restore)
- Manage Cisco IOS
- Implement password and physical security
- Verify network status and router operation using basic utilities (including: ping, traceroute,telnet,SSH,arp, ipconfig), SHOW & DEBUG commands
Explain and select the appropriate administrative tasks required for a WLAN
- Describe standards associated with wireless media (including: IEEE WI-FI Alliance, ITU/FCC)
- Identify and describe the purpose of the components in a small wireless network. (including: SSID, BSS, ESS)
- Identify the basic parameters to configure on a wireless network to ensure that devices connect to the correct access point
- Compare and contrast wireless security features and capabilities of WPA security (including: open, WEP, WPA-1/2)
- Identify common issues with implementing wireless networks
Identify security threats to a network and describe general methods to mitigate those threats
- Explain today's increasing network security threats and the need to implement a comprehensive security policy to mitigate the threats
- Explain general methods to mitigate common security threats to network devices, hosts, and applications
- Describe the functions of common security appliances and applications
- Describe security recommended practices including initial steps to secure network devices
Implement and verify WAN links
- Describe different methods for connecting to a WAN
- Configure and verify a basic WAN serial connection
[ back to top ]
Interconnecting Cisco Networking Devices Part 2 (ICND2)
The 640-816 Interconnecting Cisco Networking Devices Part 2 (ICND2) is the exam associated with the Cisco Certified Network Associate certification. Candidates can prepare for this exam by taking the Interconnecting Cisco Networking Devices Part 2 (ICND2) v1.0 course. This exam tests a candidate's knowledge and skills required to successfully install, operate, and troubleshoot a small to medium size enterprise branch network. The exam covers topics on VLSM and IPv6 addressing; extending switched networks with VLANs; configuring, verifying and troubleshooting VLANs; the VTP, RSTP, OSPF and EIGRP protocols; determining IP routes; managing IP traffic with access lists; NAT and DHCP; establishing point-to- point connections; and establishing Frame Relay connections.
Course Outline:
The following topics are general guidelines for the content likely to be included on the Interconnecting Cisco Networking Devices Part 2 exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Configure, verify and troubleshoot a switch with VLANs and interswitch communications
- Describe enhanced switching technologies (including: VTP, RSTP, VLAN, PVSTP, 802.1q)
- Describe how VLANs create logically separate networks and the need for routing between them
- Configure, verify, and troubleshoot VLANs
- Configure, verify, and troubleshoot trunking on Cisco switches
- Configure, verify, and troubleshoot interVLAN routing
- Configure, verify, and troubleshoot VTP
- Configure, verify, and troubleshoot RSTP operation
- Interpret the output of various show and debug commands to verify the operational status of a Cisco switched network
- Implement basic switch security (including: port security, unassigned ports, trunk access, etc.)
Implement an IP addressing scheme and IP Services to meet network requirements in a medium-size Enterprise branch office network
- Calculate and apply a VLSM IP addressing design to a network
- Determine the appropriate classless addressing scheme using VLSM and summarization to satisfy addressing requirements in a LAN/WAN environment
- Describe the technological requirements for running IPv6 (including: protocols, dual stack, tunneling, etc)
- Describe IPv6 addresses
- Identify and correct common problems associated with IP addressing and host configurations
Configure and troubleshoot basic operation and routing on Cisco devices
- Compare and contrast methods of routing and routing protocols
- Configure, verify and troubleshoot OSPF
- Configure, verify and troubleshoot EIGRP
- Verify configuration and connectivity using ping, traceroute, and telnet or SSH
- Troubleshoot routing implementation issues
- Verify router hardware and software operation using SHOW & DEBUG commands
- Implement basic router security
Implement, verify, and troubleshoot NAT and ACLs in a medium-size Enterprise branch office network.
- Describe the purpose and types of access control lists
- Configure and apply access control lists based on network filtering requirements
- Configure and apply an access control list to limit telnet and SSH access to the router
- Verify and monitor ACL's in a network environment
- Troubleshoot ACL implementation issues
- Explain the basic operation of NAT
- Configure Network Address Translation for given network requirements using CLI
- Troubleshoot NAT implementation issues
Implement and verify WAN links
- Configure and verify Frame Relay on Cisco routers
- Troubleshoot WAN implementation issues
- Describe VPN technology (including: importance, benefits, role, impact, components)
- Configure and very PPP connection between Cisco routers
[ back to top ]
Cisco CCDA®
Designing for Cisco Internetwork Solutions (DESGN)
The Designing Cisco Internetworking exam is the only exam required to achieve a CCDA (Cisco Certified Design Associate) certification.
Course Outline:
The following information provides general guidelines for the content likely to be included on the Designing Cisco Internetworking exam. However, other related topics may also appear on any specific delivery of the exam.
Analysis
- Gather and evaluate information regarding an organization's existing social requirements
- Gather and evaluate information regarding a network owner's current data network and future needs
- Gather and evaluate information regarding a network owner's current voice network and future needs
- Identify possible opportunities for network improvement
- Validate gathered information
- Document relevant findings
Modeling
- Given a network design or set of requirements evaluate a solution that meets IP addressing needs
- Given a network design or a set of requirements evaluate a solution that meets routing protocol needs
- Given a network design or a set of requirements evaluate a solution that meets network management needs
- Given a network design or a set of requirements evaluate a solution to incorporate equipment and technology within a Campus design
- Given a network design or a set of requirements evaluate a solution to incorporate equipment and technology within an Enterprise Edge design
- Design solutions to meet network owner needs applying the Enterprise Composite Network Model
- Evaluate solutions addressing the issues of delivering voice traffic over a data network
- Evaluate solutions for compliance with SAFE architecture
Planning
- Develop an implementation plan
- Develop a prototype testing plan
- Develop a verification plan
[ back to top ]
Cisco CCDP®
Designing Cisco Network Service Architecture (642-873 ARCH)
The 642-873 Designing Cisco Network Service Architectures (ARCH) exam is the exam associated with the CCDP certification. This exam tests a candidate's knowledge of the latest development in network design and technologies, including network infrastructure, intelligent network services and converged network solutions.
Course Objectives:
The following information provides general guidelines for the content likely to be included on the ARCH exam. However, other related topics may also appear on any specific delivery of the exam.
Design advanced core enterprise networks
- Design campus Infrastructure using best practices
- Design a High Availability enterprise network
- Design a high availability WAN
- Design network management services
- Design IP multicast services
- Describe enterprise VoWLAN design considerations
Design an enterprise data center
- Design a high availability data center network that is modular, flexible and meets standards
- Describe the components and technologies of a SAN network
- Design an effective E-Commerce module
Design security services
- Utilize firewalls
- Utilize the NAC appliance
- Utilize IPsec VPNs
[ back to top ]
Cisco CCNP®
Implementing Cisco IP Routing (ROUTE 642-902)
The Implementing Cisco IP Routing (ROUTE 642-902) is a qualifying exam for the Cisco Certified Network Professional CCNP®, Cisco Certified Internetwork Professional CCIP®, and Cisco Certified Design Professional CCDP® certifications. The ROUTE 642-902 exam will certify that the successful candidate has the knowledge and skills necessary to use advanced IP addressing and routing in implementing scalable and secure Cisco ISR routers connected to LANs and WANs. The exam also covers configuration of secure routing solutions to support branch offices and mobile workers.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam.
Implement an EIGRP based solution, given a network design and a set of requirements
- Determine network resources needed for implementing EIGRP on a network
- Create an EIGRP implementation plan
- Create an EIGRP verification plan
- Configure EIGRP routing
- Verify EIGRP solution was implemented properly using show and debug commands
- Document results of EIGRP implementation and verification
Implement a multi-area OSPF Network, given a network design and a set of requirements
- Determine network resources needed for implementing OSPF on a network
- Create an OSPF implementation plan
- Create an OSPF verification plan
- Configure OSPF routing
- Verify OSPF solution was implemented properly using show and debug commands
- Document results of OSPF implementation and verification plan
Implement an eBGP based solution, given a network design and a set of requirements
- Determine network resources needed for implementing eBGP on a network
- Create an eBGP implementation plan
- Create an eBGP verification plan
- Configure eBGP routing
- Verify eBGP solution was implemented properly using show and debug commands
- Document results of eBGP implementation and verification plan
Implement an IPv6 based solution, given a network design and a set of requirements
- Determine network resources needed for implementing IPv6 on a network
- Create an IPv6 implementation plan
- Create an IPv6 verification plan
- Configure IPv6 routing
- Configure IPv6 interoperation with IPv4
- Verify IPv6 solution was implemented properly using show and debug commands
- Document results of IPv6 implementation and verification plan
Implement an IPv4 or IPv6 based redistribution solution, given a network design and a set of requirements
- Create a redistribution implementation plan based upon the results of the redistribution analysis
- Create a redistribution verification plan
- Configure a redistribution solution
- Verify that a redistribution was implemented
- Document results of a redistribution implementation and verification plan
- Identify the differences between implementing an IPv4 and IPv6 redistribution solution
Implement Layer 3 Path Control Solution
- Create a Layer 3 path control implementation plan based upon the results of the redistribution analysis
- Create a Layer 3 path control verification plan
- Configure Layer 3 path control
- Verify that a Layer 3 path control was implemented
- Document results of a Layer 3 path control implementation and verification plan
- Implement basic teleworker and branch services
- Describe broadband technologies
- Configure basic broadband connections
- Describe basic VPN technologies
- Configure GRE
- Describe branch access technologies
[ back to top ]
Implementing Cisco IP Switched Networks (SWITCH 642-813)
Implementing Cisco IP Switched Networks (SWITCH 642-813) is a qualifying exam for the Cisco Certified Network Professional CCNP®, and Cisco Certified Design Professional CCDP® certifications. The SWITCH 642-813 exam will certify that the successful candidate has important knowledge and skills necessary to to plan, configure and verify the implementation of complex enterprise switching solutions using Cisco’s Campus Enterprise Architecture. The SWITCH exam also covers secure integration of VLANs, WLANs, voice and video into campus networks.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam.
Implement VLAN based solution, given a network design and a set of requirements
- Determine network resources needed for implementing a VLAN based solution on a network
- Create a VLAN based implementation plan
- Create a VLAN based verification plan
- Configure switch-to-switch connectivity for the VLAN based solution
- Configure loop prevention for the VLAN based solution
- Configure Access Ports for the VLAN based solution
- Verify the VLAN based solution was implemented properly using show and debug commands
- Document results of VLAN implementation and verification
Implement a Security Extension of a Layer 2 solution, given a network design and a set of requirements
- Determine network resources needed for implementing a Security solution
- Create a implementation plan for the Security solution
- Create a verification plan for the Security solution
- Configure port security features
- Configure general switch security features
- Configure private VLANs Configure VACL and PACL
- Verify the Security based solution was implemented properly using show and debug commands
- Document results of Security implementation and verification
Implement Switch based Layer 3 services, given a network design and a set of requirements
- Determine network resources needed for implementing a Switch based Layer 3 solution
- Create an implementation plan for the Switch based Layer 3 solution
- Create a verification plan for the Switch based Layer 3 solution
- Configure routing interfaces Configure Layer 3 Security
- Verify the Switch based Layer 3 solution was implemented properly using show and debug commands
- Document results of Switch based Layer 3 implementation and verification
Prepare infrastructure to support advanced services
- Implement a Wireless Extension of a Layer 2 solution
- Implement a VoIP support solution
- Implement video support solution
Implement High Availability, given a network design and a set of requirements
- Determine network resources needed for implementing High Availability on a network
- Create a High Availability implementation plan
- Create a High Availability verification plan
- Implement first hop redundancy protocols
- Implement switch supervisor redundancy
- Verify High Availability solution was implemented properly using show and debug commands
- Document results of High Availability implementation and verification
[ back to top ]
Troubleshooting and Maintaining Cisco IP Switched Networks (TSHOOT 642-832)
Troubleshooting and Maintaining Cisco IP Switched Networks (TSHOOT 642-832) is a qualifying exam for the Cisco Certified Network Professional CCNP®, certification. The TSHOOT 642-832 exam will certify that the successful candidate has important knowledge and skills necessary to (1) plan and perform regular maintenance on complex enterprise routed and switched networks and (2) use technology-based practices and a systematic ITIL-compliant approach to perform network troubleshooting.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam.
Maintain and monitor network performance
- Develop a plan to monitor and manage a network
- Perform network monitoring using IOS tools
- Perform routine IOS device maintenance
- Isolate sub-optimal internetwork operation at the correctly defined OSI Model layer
Troubleshoot Multi Protocol system networks
- Troubleshoot EIGRP
- Troubleshoot OSPF
- Troubleshoot eBGP
- Troubleshoot routing redistribution solution
- Troubleshoot a DHCP client and server solution
- Troubleshoot NAT
- Troubleshoot first hop redundancy protocols
- Troubleshoot IPv6 routing
- Troubleshoot IPv6 and IPv4 interoperability
- Troubleshoot switch-to-switch connectivity for the VLAN based solution
- Troubleshoot loop prevention for the VLAN based solution
- Troubleshoot Access Ports for the VLAN based solution
- Troubleshoot private VLANS
- Troubleshoot port security
- Troubleshoot general switch security
- Troubleshoot VACL and PACL
- Troubleshoot switch virtual interfaces (SVIs)
- Troubleshoot switch supervisor redundancy
- Troubleshoot switch support of advanced services (i.e., Wireless, VOIP and Video)
- Troubleshoot a VoIP support solution
- Troubleshoot a video support solution
- Troubleshoot Layer 3 Security
- Troubleshoot issues related to ACLs used to secure access to Cisco routers
- Troubleshoot configuration issues related to accessing the AAA server for authentication purposes
- Troubleshoot security issues related to IOS services (i.e.,finger, NTP, HTTP, FTP, RCP etc.)
[ back to top ]
*Cisco Credits can not be used for travel or expense costs.
CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, Cisco IOS, Cisco Systems, the Cisco Systems logo, and Networking Academy are registered trademarks or trademarks of Cisco Systems® and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this web site are the property of their respective owners.

CED Solutions is sponsored by Element K, a Cisco Learning (Solutions) Partner
Institute of Professional Learning is sponsored by Element K, a Cisco Learning (Solutions) Partner
MCSEClasses.com is your best choice for MCSE CCNP,
MCSE CCNP training,
MCSE CCNP certification,
MCSE CCNP certification boot camp,
MCSE CCNP boot camp,
MCSE CCNP certification training,
MCSE CCNP boot camp training,
MCSE CCNP boot camp certification,
MCSE CCNP certification course,
MCSE CCNP course,
training MCSE CCNP,
certification MCSE CCNP,
boot camp MCSE CCNP,
certification MCSE CCNP boot camp,
certification MCSE CCNP training,
boot camp MCSE CCNP training,
certification MCSE CCNP course.
|