考试代号： 642-552 涉及认证： CCSP、思科防火墙专业化认证、思科IPS专业化认证、思科VPN专业化认证 时间考试： 提供语言: 英文 考试中心： Prometric考试中心、VUE考试中心 考试说明 思科网络设备实现了642-552原来是考核安全与专业公司、思科防火墙专家、专业投资公司、思科VPN专家认证. 筹备这次考试的考生可以获得思科网络设备中又一(新区). 这一考试检验考生的知识获得思科交换机、路由器及相关网络. 主题包括: 安全面临威胁现代网络基础设施,实现思科路由器、实施基本能力,ACLs以减轻路由器和网络威胁实施安全管理和报告,共同减少2层的攻击,实现思科IOS防火墙特性、思科初步投资特点,IPSecVPN的特点利用思科安全设备管理 考点大纲 介绍现代网络基础设施面临的安全威胁 Describe and mitigate the common threats to the physical installation Describe and list mitigation methods for common network attacks Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks www.itexamprep.com Describe the main activities in each phase of a secure network lifecycle Explain how to meet the security needs of a typical enterprise with a comprehensive security policy Describe the Cisco Self Defending Network architecture 思科路由器安全 Secure Cisco routers using the SDM Security Audit feature Use the One-Step Lockdown feature in SDM to secure a Cisco router Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements Secure administrative access to Cisco routers by configuring multiple privilege levels Secure administrative access to Cisco routers by configuring role based CLI Secure the Cisco IOS image and configuration file