CCNA Security (640-554 IINS - Implementing Cisco IOS

Network Security)
The Cisco CCNA Security certification title is an entry level network security certification
offered by Cisco Systems. The Cisco CCNA Security certification provides a stepping
stone for IT Security professionals who want to enhance their CCNA-level skills can fill
the huge demand for network security professionals.
The Cisco CCNA Security certification curriculum provides an introduction to the core
security concepts. The Cisco CCNA Security certification also provides the tools and
skills needed for an IT security beginner for installation, troubleshooting, and monitoring
of network devices to maintain the integrity, confidentiality, and availability of data and
devices.
CCNA Security (640-554 IINS - Implementing Cisco IOS Network Security) covers the
following topics.
The candidates who wish to attend CCNA Security training and examination should have
a thorough knowledge in Basic Networking, TCP/IP, CCNA and basics of Network
Security. Please visit the below links to study Basic Networking, TCP/IP, CCNAand basics of
Network Security

Common Security Threats

Describe common security threats

Security and Cisco Routers

Implement security on Cisco routers

Describe securing the control, data, and management plane
Describe Cisco Security Manager
Describe IPv4 to IPv6 transition

AAA on Cisco Devices

Implement AAA (authentication, authorization, and accounting)

Describe TACACS+
Describe RADIUS
Describe AAA
Verify AAA functionality

IOS ACLs
Describe standard, extended, and named IP IOS access control lists (ACLs) to filter
packets
Describe considerations when building ACLs
Implement IP ACLs to mitigate threats in a network

Secure Network Management and Reporting

Describe secure network management
Implement secure network management

Common Layer 2 Attacks

Describe Layer 2 security using Cisco switches

Describe VLAN security
Implement VLANs and trunking
Implement spanning tree

Cisco Firewall Technologies

Describe operational strengths and weaknesses of the different firewall technologies

Describe stateful firewalls
Describe the types of NAT used in firewall technologies
Implement zone-based policy firewall using CCP
Implement the Cisco Adaptive Security Appliance (ASA)
Implement Network Address Translation (NAT) and Port Address Translation (PAT)

Cisco IPS
Describe Cisco Intrusion Prevention System (IPS) deployment considerations
Describe IPS technologies
Configure Cisco IOS IPS using CCP

VPN Technologies

Describe the different methods used in cryptography

Describe VPN technologies
Describe the building blocks of IPSec
Implement an IOS IPSec site-to-site VPN with pre-shared key authentication
Verify VPN operations
Implement Secure Sockets Layer (SSL) VPN using ASA device manager

Table 45: IP Address Class Network and Host Capacities

First
Octet of
IP
Address

# Of
Network
ID Bits
Used To
Identify
Class

Usable #
Of
Network
ID Bits

8 / 24

0xxx xxxx

8-1 = 7

27-2 = 126

224-2 =
16,277,214

Class B

16 / 16

10xx xxxx

16-2 = 14

214 =
16,384

216-2 =
65,534

Class C

24 / 8

110x xxxx

24-3 = 21

221 =

28-2 = 254

IP
Address
Class

Total # Of
Bits For
Network
ID / Host
ID

Class A

Number of
# Of Host
Possible
IDs Per
Network
Network ID
IDs

2,097,152