CCNA 200 301 Volume 2 - LANTEC Of Louisiana

CCNA 200 – 301 Volume 2Days: 5Description: Trust the best-selling Official Cert Guide series from Cisco Press to help you learn, prepare,and practice for exam success. It is built with the objective of providing assessment, review, and practice tohelp ensure you are fully prepared for your certification exam. This book, combined with the CCNA 200301 Official Cert Guide Volume 1, cover all of exam topics on the CCNA 200-301 exam.CCNA 200-301 Official Cert Guide, Volume 2 presents you with an organized test-preparation routineusing proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter andenable you to decide how much time you need to spend on each section. Exam topic lists make referencingeasy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.· Master Cisco CCNA 200-301 exam topics· Assess your knowledge with chapter-opening quizzes· Review key concepts with exam preparation tasks· Practice with realistic exam questions in the practice test softwareCCNA 200-301 Official Cert Guide, Volume 2 from Cisco Press enables you to succeed on the exam thefirst time and is the only self-study resource approved by Cisco. Best-selling author Wendell Odom sharespreparation hints and test-taking tips, helping you identify areas of weakness and improve both yourconceptual knowledge and hands-on skills.OUTLINE:INTRODUCTIONTCP/IP APPLICATIONSPART I IP ACCESS CONTROL LISTS CHAPTER 1 INTRODUCTION TO TCP/IPTRANSPORT AND APPLICATIONS “DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSTCP/IP LAYER 4 PROTOCOLS: TCP AND UDP Transmission Control Protocolo Multiplexing Using TCP PortNumberso Popular TCP/IP Applicationso Connection Establishmentand Terminationo Error Recovery andReliabilityo Flow Control UsingWindowingUser Datagram ProtocolUniform Resource IdentifiersFinding the Web Server UsingDNSTransferring Files with HTTPHow the Receiving Host Identifiesthe Correct Receiving ApplicationCHAPTER REVIEWCHAPTER 2 BASIC IPV4 ACCESS CONTROLLISTS“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSIPV4 ACCESS CONTROL LIST BASICS ACL Location and DirectionMatching PacketsTaking Action When a MatchOccursTypes of IP ACLsBaton Rouge Lafayette New Orleanswww.lantecctc.com

CCNA 200 – 301 Volume 2STANDARD NUMBERED IPV4 ACLS List Logic with IP ACLsMatching Logic and CommandSyntaxo Matching the Exact IPAddresso Matching a Subset of theAddress with Wildcardso Binary Wildcard Maskso Finding the Right WildcardMask to Match a Subneto Matching Any/All AddressesImplementing Standard IP ACLso Standard Numbered ACLExample 1o Standard Numbered ACLExample 2Troubleshooting and VerificationTipsPRACTICE APPLYING STANDARD IP ACLS Practice Building access-listCommands Reverse Engineering from ACL toAddress RangeCHAPTER REVIEWCHAPTER 3 ADVANCED IPV4 ACCESSCONTROL LISTSEXTENDED NUMBERED IP ACCESS CONTROLLISTS PART I REVIEWPART II SECURITY SERVICESCHAPTER 4 SECURITY ARCHITECTURES“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSSECURITY TERMINOLOGYCOMMON SECURITY THREATS Attacks That Spoof Addresseso Denial-of-Service Attackso Reflection and AmplificationAttackso Man-in-the-Middle Attackso Address Spoofing AttackSummaryBUFFER OVERFLOW ATTACKSFOUNDATION TOPICS CHAPTER REVIEWRECONNAISSANCE ATTACKS“DO I KNOW THIS ALREADY?” QUIZ NAMED ACLS AND ACL EDITING Named IP Access Lists Editing ACLs Using SequenceNumbers Numbered ACL ConfigurationVersus Named ACL Configuration ACL ImplementationConsiderations Additional Reading on ACLsMatching the Protocol, Source IP,and Destination IPMatching TCP and UDP PortNumbersExtended IP ACL Configurationo Extended IP Access Lists:Example 1o Extended IP Access Lists:Example 2Practice Building access-listCommandsMALWAREHUMAN VULNERABILITIESPASSWORD VULNERABILITIES Password AlternativesCONTROLLING AND MONITORING USERACCESSDEVELOPING A SECURITY PROGRAM TOEDUCATE USERSCHAPTER REVIEWBaton Rouge Lafayette New Orleanswww.lantecctc.com

CCNA 200 – 301 Volume 2CHAPTER 5 SECURING NETWORK DEVICESCHAPTER 7 IMPLEMENTING DHCP“DO I KNOW THIS ALREADY?” QUIZ“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSFOUNDATION TOPICSSECURING IOS PASSWORDS Encrypting Older IOS Passwordswith service password-encryption Encoding the Enable Passwordswith Hasheso Interactions Between EnablePassword and Enable Secreto Making the Enable SecretTruly Secret with a Hasho Improved Hashes for Cisco’sEnable Secret Encoding the Passwords for LocalUsernames Controlling Password Attacks withACLsDYNAMIC HOST CONFIGURATIONFIREWALLS AND INTRUSION PREVENTIONIDENTIFYING HOST IPV4 SETTINGS Host Settings for IPv4 Host IP Settings on Windows Host IP Settings on macOS Host IP Settings on LinuxSYSTEMS Traditional Firewallso Security ZonesIntrusion Prevention Systems (IPS)Cisco Next-Generation FirewallsCisco Next-Generation IPSCHAPTER REVIEWCHAPTER 6 IMPLEMENTING SWITCH PORTSECURITY DHCP Conceptso Supporting DHCP forRemote Subnets with DHCPRelayo Information Stored at theDHCP ServerConfiguring DHCP Features onRouters and Switcheso Configuring DHCP Relayo Configuring a Switch asDHCP Cliento Configuring a Router asDHCP ClientCHAPTER REVIEWCHAPTER 8 DHCP SNOOPING AND ARPINSPECTION“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICS“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSPORT SECURITY CONCEPTS ANDCONFIGURATION Configuring Port Security Verifying Port Security Port Security MAC AddressesPORT SECURITY VIOLATION MODES Port Security Shutdown Model Port Security Protect and RestrictModesCHAPTER REVIEWPROTOCOL DHCP SNOOPING DHCP Snooping Conceptso A Sample Attack: A SpuriousDHCP Servero DHCP Snooping Logico Filtering DISCOVERMessages Based on MACAddresso Filtering Messages thatRelease IP Addresses DHCP Snooping Configurationo Configuring DHCP Snoopingon a Layer 2 Switcho Limiting DHCP MessageRateso DHCP SnoopingConfiguration SummaryBaton Rouge Lafayette New Orleanswww.lantecctc.com

CCNA 200 – 301 Volume 2DYNAMIC ARP INSPECTION DAI Conceptso Review of Normal IP ARPo Gratuitous ARP as an AttackVectoro Dynamic ARP InspectionLogic Dynamic ARP InspectionConfigurationo Configuring ARP Inspectionon a Layer 2 Switcho Limiting DAI Message Rateso Configuring Optional DAIMessage Checkso IP ARP InspectionConfiguration SummaryANALYZING TOPOLOGY USING CDP ANDCHAPTER REVIEWPERSPECTIVES ON IPV4 ADDRESSPART II REVIEWCHAPTER 9 DEVICE MANAGEMENTSCALABILITY CIDR Private AddressingPROTOCOLSNETWORK ADDRESS TRANSLATION“DO I KNOW THIS ALREADY?” QUIZCONCEPTS PART III IP SERVICESFOUNDATION TOPICSSYSTEM MESSAGE LOGGING (SYSLOG) Sending Messages in Real Time toCurrent Users Storing Log Messages for LaterReview Log Message Format Log Message Severity Levels Configuring and Verifying SystemLogging The debug Command and LogMessagesNETWORK TIME PROTOCOL (NTP) Setting the Time and Timezone Basic NTP Configuration NTP Reference Clock and Stratum Redundant NTP Configuration NTP Using a Loopback Interfacefor Better AvailabilityLLDP Examining Information Learnedby CDPConfiguring and Verifying CDPExamining Information Learnedby LLDPConfiguring and Verifying LLDPCHAPTER REVIEWCHAPTER 10 NETWORK ADDRESSTRANSLATION“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSStatic NATDynamic NATOverloading NAT with PortAddress TranslationNAT CONFIGURATION ANDTROUBLESHOOTING Static NAT Configuration Dynamic NAT Configuration Dynamic NAT Verification NAT Overload (PAT)Configuration NAT TroubleshootingCHAPTER REVIEWBaton Rouge Lafayette New Orleanswww.lantecctc.com

CCNA 200 – 301 Volume 2CHAPTER 11 QUALITY OF SERVICE (QOS)“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSINTRODUCTION TO QOS QoS: Managing Bandwidth,Delay, Jitter, and Loss Types of Traffico Data Applications Voice and Video Applications QoS as Mentioned in This Book QoS on Switches and RoutersCLASSIFICATION AND MARKING Classification Basics Matching (Classification) Basics Classification on Routers with ACLsand NBAR Marking IP DSCP and EthernetCoSo Marking the IP Headero Marking the Ethernet802.1Q Headero Other Marking Fields Defining Trust Boundaries DiffServ Suggested MarkingValueso Expedited Forwarding (EF)o Assured Forwarding (AF)o Class Selector (CS)o Guidelines for DSCPMarking ValuesQUEUING Round-Robin Scheduling(Prioritization)Low Latency QueuingA Prioritization Strategy for Data,Voice, and VideoSHAPING AND POLICING Policingo Where to Use Policing Shapingo Setting a Good ShapingTime Interval for Voice andVideoCONGESTION AVOIDANCE TCP Windowing Basics Congestion Avoidance ToolsCHAPTER REVIEWCHAPTER 12 MISCELLANEOUS IP SERVICES“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSFIRST HOP REDUNDANCY PROTOCOL The Need for Redundancy inNetworks The Need for a First HopRedundancy Protocol The Three Solutions for First-HopRedundancy HSRP Conceptso HSRP Failovero HSRP Load BalancingSIMPLE NETWORK MANAGEMENT PROTOCOL SNMP Variable Reading andWriting: SNMP Get and Set SNMP Notifications: Traps andInforms The Management InformationBase Securing SNMPFTP AND TFTP Managing Cisco IOS Images withFTP/TFTPo The IOS File Systemo Upgrading IOS Imageso Copying a New IOS Imageto a Local IOS File SystemUsing TFTPo Verifying IOS CodeIntegrity with MD5o Copying Images with FTP The FTP and TFTP Protocolso FTP Protocol Basicso FTP Active and PassiveModeso FTP over TLS (FTP Secure) TFTP Protocol BasicsCHAPTER REVIEWPART III REVIEWBaton Rouge Lafayette New Orleanswww.lantecctc.com

CCNA 200 – 301 Volume 2PART IV NETWORK ARCHITECTURECHAPTER 13 LAN ARCHITECTURE“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSANALYZING CAMPUS LAN TOPOLOGIES Two-Tier Campus Design(Collapsed Core)o The Two-Tier Campus Designo Topology Terminology SeenWithin a Two-Tier Design Three-Tier Campus Design (Core) Topology Design TerminologySMALL OFFICE/HOME OFFICEINTERNET VPNS Internet Accesso Digital Subscriber Lineo Cable Interneto Wireless WAN (3G, 4G,LTE, 5G)o Fiber (Ethernet) InternetAccess Internet VPN Fundamentalso Site-to-Site VPNs with IPseco Remote Access VPNs withTLS VPN ComparisonsCHAPTER REVIEWCHAPTER 15 CLOUD ARCHITECTUREPOWER OVER ETHERNET (POE) PoE Basics PoE Operation PoE and LAN Design“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSCHAPTER REVIEWCHAPTER 14 WAN ARCHITECTURE“DO I KNOW THIS ALREADY?” QUIZFOUNDATION TOPICSMETRO ETHERNET Metro Ethernet Physical Designand Topology Ethernet WAN Services andTopologieso Ethernet Line Service (Pointto-Point)o Ethernet LAN Service (FullMesh)o Ethernet Tree Service (Huband Spoke) Layer 3 Design Using MetroEtherneto Layer 3 Design with E-LineServiceo Layer 3 Design with E-LANServiceSERVER VIRTUALIZATION Cisco Server Hardware Server Virtualization Basics Networking with Virtual Switcheson a Virtualized Host The Physical Data CenterNetwork Workflow with a Virtualized DataCenterCLOUD COMPUTING SERVICES Private Cloud (On-Premise) Public Cloud Cloud and the “As a Service”Modelo Infrastructure as a Serviceo Software as a Serviceo (Development) Platform as aServiceMULTIPROTOCOL LABEL SWITCHING (MPLS) MPLS VPN Physical Design andTopology MPLS and Quality of Service Layer 3 with MPLS VPNBaton Rouge Lafayette New Orleanswww.lantecctc.com