Description

Introduction

Today's organizations are challenged with responding rapidly to emerging network security threats. Security  personnel configure and monitor various network security threat mitigation measures, such as device hardening, intrusion prevention systems, and firewalls, to protect data assets and network systems from attack. The purpose of this course is to provide skills and knowledge in the field of network security.

Target Audience

The Network Security course is designed for Cisco Networking Academy® students who are seeking career-oriented, entry-level network security skills. Target students include individuals enrolled in technology degree programs at institutions of higher education and IT professionals who want to pursue a career in the network security field. Learners in this course are exposed to the foundational knowledge required to respond to network security threats through various threat mitigation measures.

Inclusive Language

We are proud to join the technology community in evolving the language we use. Rethinking the words we use is just one of the ways to reduce barriers of equity and respect. As a matter of policy, Cisco Networking Academy content should be free of offensive or suggestive language, graphics, and scenarios. You may still see industry terms such as “black hat” in the course curriculum. Our team is working to modify these terms as well.

Prerequisites

While there are no set prerequisites for the Network Security course, it is RECOMMENDED that students have the following skills and knowledge:

•  PC and internet navigation skills
•  Familiarity with Cisco Packet Tracer
•   Basic understanding of computer networks (CCNA ITN and SRWE level)

Course Description

The course has many features to help students understand these concepts:

•   The course is comprised of twenty-two (22) modules. Each module is comprised of topics. 
•   Modules emphasize critical thinking, problem solving, collaboration, and the practical application of skills.
•   Many modules contain some way to practice and assess understanding, such as a lab or a Packet Tracer activity. These module-level activities provide feedback and are designed to indicate  the learner’s mastery of the skills needed for the course. Learners can ensure their evel of understanding well before taking a graded quiz or exam. 
•   Some topics may contain a Check Your Understanding interactive quiz. These topic-level assessments 

are designed to tell learners if they have a good grasp of the topic content, or if they need to review before continuing. Learners can ensure their level of understanding well before taking a graded quiz or exam. Check Your Understanding quizzes do not affect the learner’s overall grade.

•   Rich multimedia content, including activities, videos, and quizzes, addresses a variety of learning styles, 

helps stimulate learning, and increases knowledge retention. 

•   Hands-on labs help students develop critical thinking and complex problem-solving skills.

  Innovative assessments provide immediate feedback to support the evaluation of knowledge and acquired skills.

•   Technical concepts are explained using language that works well for learners at all levels and embedded interactive activities break up reading of the content and help reinforce understanding .
•   The curriculum encourages students to consider additional IT education, but also emphasizes applied

skills and hands-on experience.

•   Cisco Packet Tracer activities are designed for use with Packet Tracer v8.0 or later. 

Course Objectives

Network Security helps students develop the skills needed for entry-level network security career opportunities. It provides a theoretically rich, hands-on introduction to network security, in a logical sequence driven by technologies.

The goals of the Network Security course are as follows:

•   Provide an in-depth, theoretical understanding of network security.

  Provide students with the knowledge and skills necessary to design and support network security.

•   Provide an experience-oriented course that employs industry-relevant instructional approaches to prepare 

students for entry-level jobs in the industry.

•   Enable students to have significant hands-on interaction with IT equipment to prepare them for exams 

and career opportunities.

Upon completion of the Network Security course, students will be able to perform the following tasks:

•   Explain the various types of threats and attacks.
•   Explain the tools and procedures to mitigate the effects of malware and common network attacks.
•   Configure command authorization using privilege levels and role-based CLI.
•   Implement the secure management and monitoring of network devices.
•   Configure AAA to secure a network.
•   Implement ACLs to filter traffic and mitigate network attacks on a network.
•   Implement Zone-Based Policy Firewall using the CLI.
•   Explain how network-based Intrusion Prevention Systems are used to help secure a network.
•   Explain endpoint vulnerabilities and protection methods.

  Implement security measures to mitigate Layer 2 attacks.

•   Explain how the types of encryption, hashes, and digital signatures work together to provide 

confidentiality, integrity, and authentication.

•   Explain how a public key infrastructure is used to ensure data confidentiality and provide authentication.
•   Configure a site-to-site IPsec VPN, with pre-shared key authentication, using the CLI.
•   Explain how the ASA operates as an advanced stateful firewall.
•   Implement an ASA firewall configuration.
•   Implement an ASA firewall configuration using ASDM (optional).
•   Test network security. 
• 
  

Lab Equipment Requirements

This course requires no physical equipment other than the student’s lab PC. Practice activities for the technical and critical skills needed in this course are delivered using Cisco Packet Tracer.

Baseline Equipment Bundle:

•   PCs - minimum system requirements

o  CPU: Intel Pentium 4, 2.53 GHz or equivalent.

o  OS: Microsoft Windows, Linux, or macOS

o  RAM: 8 GB

o  Storage: 20GB of free disk space

o  Display resolution: 1024 x 768 

o  Language fonts supporting Unicode encoding (if viewing in languages other than English)

o  Latest video card drivers and operating system updates

•   Internet connection for lab and study PCs

Student PC Software:

  Cisco Packet Tracer v 8.0 or higher

  Latest stable version of Wireshark

•   SSH client software, such as PuTTy or Tera Term, for lab PCs.
•   Oracle VirtualBox
•   Security Workstation VM
• 
  

o  Download from the course

o  Requires 1 GB RAM, 15 GB disk space

Lab bundle requirements:

Detailed equipment information, including descriptions and part numbers, is available on Cisco netacad.com on the Equipment Information page. Please refer to that document for the latest information, which includes specifications for the following minimum equipment required:

•   3 Cisco ISR 4221 SEC Bundle with Security License
•   2 Cisco Catalyst 2960 Plus 24 10/100 + 2T/SFP LAN Base
•   (Optional) 1 Cisco ASA 5506-X with FirePOWER services, 8GE, AC, 3DES/AES)
•   Console cables
•   Assorted ethernet cables