CCSP SNPA Official Exam Certification Guide, 3/e
Greg Bastien, Earl Carter, Christian Degu, Michael Gibbs
- 出版商: Cisco Press
- 出版日期: 2006-05-04
- 售價: $2,510
- 貴賓價: 9.5 折 $2,385
- 語言: 英文
- 頁數: 768
- 裝訂: Hardcover
- ISBN: 1587201526
- ISBN-13: 9781587201523
海外代購書籍(需單獨結帳)
買這商品的人也買了...
-
$1,320Peer Reviews in Software: A Practical Guide (Paperback) -
輕快的好 Java (Better, Faster, Lighter Java)$760$600 -
CCSP SNRS Exam Certification Guide$2,510$2,385 -
鳥哥的 Linux 私房菜基礎學習篇, 2/e$780$702 -
Microsoft SQL Server 2005 設計實務$680$578 -
ASP.NET 2.0 深度剖析範例集$650$507 -
PHP + MySQL 快速入門$680$578 -
Microsoft SQL Server 2005 管理實務$680$578 -
SQL 語法範例辭典$550$468 -
初探 VoIP (Voice over IP First-step)$390$351 -
Microsoft Office SharePoint Server 2007 新一代企業 Web 解決方案(第一集)$690$587 -
Visual C# 2005 建構資訊系統實戰經典教本$650$507 -
操作介面設計模式 (Designing Interfaces)$880$695 -
向世界最 TOP 的網站學 CSS 網頁設計$490$382 -
Ajax 實戰手冊 (Ajax in Action)$680$537 -
$750CompTIA Security+ Study Guide: Exam SY0-101, 3/e (Paperback) -
Ajax 技術手冊 (Foundations of Ajax)$450$356 -
Ajax 快速上手 (Head Rush Ajax)$780$616 -
聖殿祭司的 ASP.NET 2.0 專家技術手冊─使用 C#$720$569 -
Ruby Programming－向 Ruby 之父學程式設計$550$429 -
SQL Server 2005 資料庫管理$680$578 -
Spring 2.0 技術手冊$620$490 -
精通 Java 網路程式$625$563 -
ASP.NET AJAX 應用剖析立即上手$580$452 -
Android 案例開發完全講義$580$458
相關主題
商品描述
Description
Assessment, review, and practice for CCSP SNPA exam 642-522
The official study guide helps you master all the topics on the SNPA exam, including:
- Firewall technologies
- Cisco Security Appliance translation and connection
- Access control configuration
- Modular policy framework
- Security contexts
- Syslog
- Routing protocol support
- Failover
- Virtual private networks (VPN)
- Adaptive Security Device Manager (ASDM)
- Content filtering
- Authentication, authorization, and accounting (AAA) configuration
- Intrusion Prevention Systems (IPS) and advanced protocol handling
CCSP SNPA Official Exam Certification Guide, Third Edition, is a best-of-breed Cisco® exam study guide that focuses specifically on the objectives for the Securing Networks with PIX and ASA (SNPA) exam. Network security consultant, Michael Gibbs, shares preparation hints and test-taking tips, helping you identify areas of weakness and improve your knowledge of firewall and Adaptive Security Appliance (ASA) security. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.
This guide presents you with an organized test preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and allow you to decide how much time you need to spend on each section. Exam topic lists and Foundation Summary tables make referencing easy and give you a quick refresher whenever you need it. Challenging chapter-ending review questions help you assess your knowledge and reinforce key concepts.
The companion CD-ROM contains a powerful testing engine that allows you to focus on individual topic areas or take complete, timed exams. The assessment engine also tracks your performance and provides feedback on a module-by-module basis, presenting question-by-question remediation to the text.
Well-regarded for its level of detail, assessment features, and challenging review questions and exercises, this book helps you master the concepts and techniques that will enable you to succeed on the exam the first time.
CCSP SNPA Official Exam Certification Guide, Third Edition, is part of a recommended learning path from Cisco Systems® that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, visit www.cisco.com/go/authorizedtraining.
Companion CD-ROM
The CD-ROM contains an electronic copy of the book and more than 200 practice questions for the SNPA exam, all available in study mode, test mode, and flash card format.
This volume is part of the Exam Certification Guide Series from Cisco Press®. Books in this series provide officially developed exam preparation materials that offer assessment, review, and practice to help Cisco Career Certification candidates identify weaknesses, concentrate their study efforts, and enhance their confidence as exam day nears.
Table of Contents
Chapter 1 Network Security
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation and Supplemental Topics
Overview of Network Security
Vulnerabilities, Threats, and Attacks
Vulnerabilities
Threats
Types of Attacks
Security Policies
Step 1: Secure
Step 2: Monitor
Step 3: Test
Step 4: Improve
Network Security as a “Legal Issue”
Defense in Depth
Cisco AVVID and Cisco SAFE
Cisco AVVID?
Cisco SAFE
Foundation Summary
Network Security
Vulnerabilities, Threats, and Attacks
Vulnerabilities
Threats
Attacks
Security Policies
Network Security as a Process
Defense in Depth
Cisco AVVID
Cisco SAFE
Key Terms
Q&A
Chapter 2 Firewall Technologies and‡the‡Cisco Security Appliance
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Firewall Technologies
Packet Filtering
Proxy
Stateful Packet Inspection
Cisco PIX Firewall
Secure Real-Time Embedded System
Adaptive Security Algorithm
Cut-Through Proxy
Security Contexts (Virtual Firewall)
Redundancy
Foundation Summary
Firewall Technologies
Cisco Security Appliance
Q&A
Chapter 3 Cisco Security Appliance
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Overview of the Cisco Security Appliance
ASA
Cut-Through Proxy
Cisco PIX Firewall Models and Features
Intrusion Protection
AAA Support
X.509 Certificate Support
Modular Policy Framework
Network Address Translation/Port Address Translation
Firewall Management
Simple Network Management Protocol
Syslog Support
Security Contexts
Transparent Firewalls
Virtual Private Networks
Optional Firewall Components
PIX Firewall Model Capabilities
Cisco PIX 501
Cisco PIX 506E
Cisco PIX 515E
Cisco PIX 525
Cisco PIX 535
Cisco ASA Security Model Capabilities
Cisco ASA 5510 Security Appliance
Cisco ASA 5520 Security Appliance
Cisco ASA 5540 Security Appliance
Foundation Summary
Adaptive Security Algorithm
Cut-Through Proxy
Cisco PIX Firewall Models and Features
Cisco ASA Security Appliance Models and Features
Intrusion Protection
AAA Support
X.509 Certificate Support
Modular Policy Framework
NAT/PAT
Firewall Management
SNMP
Syslog Support
Virtual Private Networks
Security Context
Cisco Security Appliance Models
Q&A
Chapter 4 System Management/Maintenance
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Accessing Cisco Security Appliance
Accessing a Cisco Security Appliance with Telnet
Accessing the Cisco Security Appliance with Secure Shell
Command-Level Authorization
Installing a New Operating System
Upgrading Your Activation Key
Upgrading the Cisco Security Appliance Operating System
Upgrading the Operating System Using the copy tftp flash‡Command
Upgrading the Operating System Using Monitor Mode
Upgrading the OS Using an HTTP Client
Creating a Boothelper Disk Using a Windows PC
Password Recovery
Cisco PIX Firewall Password Recovery: Getting Started
Password Recovery Procedure for a PIX Firewall with a Floppy Drive (PIX‡520)
Password Recovery Procedure for a Diskless PIX Firewall
(PIX 501, 506, 506E, 515E, 515, 525, and 535)Password Recovery Procedure for the ASA Security Appliance
Overview of Simple Network Management Protocol
on the PIX FirewallConfiguring Simple Network Management Protocol
on Security ApplianceTroubleshooting Commands
Foundation Summary
Q&A
Chapter 5 Understanding Cisco Security Appliance Translation and Connection
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
How the Cisco Security Appliance Handles Traffic
Interface Security Levels and the Default Security Policy
Transport Protocols
Address Translation
Translation Commands
NAT
PAT
Static Translation
Using the static Command for Port Redirection
Configuring Multiple Translation Types on the Cisco Security Appliance
Bidirectional NAT
Translation Versus Connection
Configuring DNS Support
Foundation Summary
Q&A
Chapter 6 Getting Started with the Cisco Security Appliance Family of Firewalls
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Access Modes
Configuring a Cisco Security Appliance
interface Command
security-level Command
nameif Command
ip address Command
nat Command
speed Command
duplex Command
nat-control Command
global Command
route Command
Routing Information Protocol
Testing Your Configuration
Saving Your Configuration
Support for Domain Name System Messages
Configuring Dynamic Host Configuration Protocol on the Cisco Security Appliance
Using the Cisco Security Appliance DHCP Server
Configuring the Security Appliance DHCP Client
Configuring Time Settings on the Cisco Security Appliance
NTP
Cisco Security Appliance System Clock
Configuring Login Banners on the Cisco Security Appliance
Configuring Transparent Mode
Enabling Transparent Mode
Traffic Management in Transparent Mode
Monitoring in Transparent Mode
Sample Security Appliance Configuration
Foundation Summary
Q&A
Chapter 7 Configuring Access
How Best to Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Configuring Inbound Access Through a Cisco Security Appliance
Static NAT
Static PAT
TCP Intercept Feature
nat 0 Command
Policy NAT
Access Lists
Object Grouping
network Object Type
protocol Object Type
service Object Type
icmp-type Object Type
Nesting Object Groups
ACL Logging
Advanced Protocol Handling
FTP
DNS
Simple Mail Transfer Protocol
Foundation Summary
Q&A
Chapter 8 Modular Policy Framework
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Modular Policy Framework Overview
Traffic Flow Matching
Step 1: Create a Class Map
Step 2: Define Class Map Matches
Viewing the Class Map Configuration
Assigning Actions to a Traffic Class
Step 1: Create a Policy Map
Step 2: Assign Traffic Classes to the Policy Map
Step 3: Assign Policies for Each Class
Viewing the Policy Map Configuration
Assigning Policies to an Interface
Service Policy Matching Logic
Viewing the Service Policy Configuration
Viewing the Service Policy Statistics
Foundation Summary
Q&A
Chapter 9 Security Contexts
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Security Context Overview
Multiple Context Modes
Administration Context
Configuring Security Contexts
Creating a New Context
Assigning Interfaces to a Context
Uploading a Configuration Using the config-url Command
Managing Security Contexts
Deleting Contexts
Navigating Multiple Contexts
Viewing Context Information
Step-by-Step Configuration of a Security Context
Foundation Summary
Q&A
Chapter 10 Syslog and the Cisco Security Appliance
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
How Syslog Works
Logging Facilities
Logging Levels
How Log Messages Are Organized
How to Read System Log Messages
Configuring Syslog on a Cisco Security Appliance
Configuring the ASDM to View Logging
Configuring Syslog Messages at the Console
Sending Syslog Messages to a Telnet Session
Configuring the Cisco Security Appliance to Send Syslog Messages to a Log Server
Configuring SNMP Traps and SNMP Requests
Configuring a Syslogd Server
PIX Firewall Syslog Server
Foundation Summary
Q&A
Chapter 11 Routing and the Cisco Security Appliance
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics and Supplemental Topics
General Routing Principles
Ethernet VLAN Tagging
Understanding VLANs
Understanding Trunk Ports
Understanding Logical Interfaces
Managing VLANs
IP Routing
Static Routes
Dynamic Routes
Multicast Routing
Multicast Commands
Inbound Multicast Traffic
Outbound Multicast Traffic
Debugging Multicast
Foundation Summary
Q&A
Chapter 12 Cisco Security Appliance Failover
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
What Causes a Failover Event?
What Is Required for a Failover Configuration?
Failover Monitoring
Configuration Replication
Stateful Failover
LAN-Based Failover
Active-Active Failover
Configuring Failover
Foundation Summary
Q&A
Chapter 13 Virtual Private Networks
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
Overview of Virtual Private Network Technologies
Internet Protocol Security
Internet Key Exchange
Perfect Forward Secrecy
Certification Authorities
Overview of WebVPN
WebVPN Portal Interface
Port Forwarding
Configuring the Security Appliance as a VPN Gateway
Selecting the Configuration
Configuring IKE
Configuring IPSec
Troubleshooting the VPN Connection
Configuring the Security Appliance as a WebVPN Gateway
WebVPN Global Configuration
Configuring URLs and File Servers
Configuring Port Forwarding
Configuring E-Mail Proxies
Setting Up Filters and ACLs
Configuring Security Appliances for Scalable VPNs
Foundation Summary
Q&A
Scenario
VPN Configurations
Completed PIX Configurations
How the Configuration Lines Interact
Chapter 14 Configuring Access VPNs
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation and Supplemental Topics
Introduction to Cisco Easy VPN
Easy VPN Server
Easy VPN Remote Feature
Overview of the Easy VPN Server
Major Features
Server Functions
Supported Servers
Overview of Easy VPN Remote Feature
Supported Clients
Easy VPN Remote Connection Process
Extended Authentication Configuration
Easy VPN Remote Modes of Operation
Client Mode
Network Extension Mode
Overview of Cisco VPN Software Client
Features
Specifications
Cisco VPN Client Manual Configuration Tasks
Security Appliance Easy VPN Remote Configuration
Basic Configuration
Client Device Mode
Secure Unit Authentication
Individual User Authentication
Point-to-Point Protocol over Ethernet and the Security Appliance
Configuring the VPDN Group
Configuring VPDN Group Authentication
Assigning the VPDN Group Username
Configuring the VPDN Username and Password
Enabling the Point-to-Point over Ethernet Client
Monitoring the Point-to-Point over Ethernet Client
Dynamic Host Configuration Protocol Server Configuration
DHCP Overview
Configuring the Security Appliance DHCP Server
DHCP Server Auto Configuration
DHCP Debugging Commands
Foundation Summary
Q&A
Chapter 15 Adaptive Security Device Manager
How to Best Use This Chapter
“Do I Know This Already?” Quiz
Foundation Topics
ASDM Overview
Security Appliance Requirements to Run ASDM
ASDM Workstation Requirement
ASDM Installation
Using ASDM to Configure the Cisco Security Appliance
Monitoring
Using ASDM for VPN Configuration
Using ASDM to Create a Site-to-Site VPN
&nbs
商品描述(中文翻譯)
評估、回顧和練習 CCSP SNPA 考試 642-522
官方學習指南幫助您掌握 SNPA 考試的所有主題，包括：
- 防火牆技術
- Cisco Security Appliance 的翻譯和連接
- 存取控制配置
- 模組化政策框架
- 安全上下文
- Syslog
- 路由協定支援
- 故障轉移
- 虛擬私人網路 (VPN)
- 自適應安全設備管理器 (ASDM)
- 內容過濾
- 認證、授權和會計 (AAA) 配置
- 入侵防護系統 (IPS) 和進階協定處理
《CCSP SNPA 官方考試認證指南》第三版，是一本最佳的 Cisco® 考試學習指南，專注於 Securing Networks with PIX and ASA (SNPA) 考試的目標。網路安全顧問 Michael Gibbs 分享準備提示和考試技巧，幫助您識別弱點並提高對防火牆和自適應安全設備 (ASA) 安全的知識。材料以簡潔的方式呈現，專注於增強您對考試主題的理解和記憶。
本指南通過使用經驗證的系列元素和技術，為您提供有組織的考試準備例行程序。“我已經知道這些了嗎？”測驗在每章開頭，讓您決定需要在每個部分花多少時間。考試主題列表和基礎摘要表使參考變得簡單，並在您需要時提供快速的複習。具有挑戰性的章節結尾回顧問題幫助您評估自己的知識並加強關鍵概念。
隨附的 CD-ROM 包含一個強大的測試引擎，讓您專注於個別主題區域或進行完整的計時考試。評估引擎還會跟蹤您的表現，並提供模組逐一的反饋，針對每個問題提供文本的補救措施。
這本書因其詳細程度、評估功能以及具有挑戰性的回顧問題和練習而受到好評，幫助您掌握能夠讓您第一次就成功通過考試的概念和技術。
《CCSP SNPA 官方考試認證指南》第三版，是 Cisco Systems® 推薦學習路徑的一部分，包括來自授權 Cisco 學習夥伴的模擬和實作訓練，以及來自 Cisco Press 的自學產品。要了解更多有關授權 Cisco 學習夥伴在全球提供的講師主導訓練、電子學習和實作教學的資訊，請訪問 www.cisco.com/go/authorizedtraining。
