ccna certification book

ccna certification book.Protects network endpoints such as workstations and servers against viruses, Trojans, and worms using CiscoNAC and CiscoIronPort.Use the CiscoIOS firewall and associated ACLs to protect sources from the inside and to protect those resources from external attacks.Complement the CiscoIOS firewall with CiscoIPS technology to evaluate traffic using a library of attack signatures.Protect the LAN by adhering to Layer 2 and VLAN recommendations and by using a variety of techniques, including BPDU protection, root protection, PortFast, and SPAN.Despite these security techniques, network security systems are still not completely immune to security threats to their resources. Newly developed attacks and newly discovered vulnerabilities can be used to bypass security solutions. In addition, systems that are technically, administratively, and physically secure can still be breached if end users do not follow security practices and protocols. A comprehensive security policy must be maintained, and that security policy needs to be able to identify an organization's assets, establish the security hardware and software requirements to protect those assets, clarify employee roles and responsibilities, and establish appropriate protocols for responding to security breaches. When security policies are developed and followed, organizations can minimize loss and damage due to an attack. These policies secure the network by imposing a structured, well-informed, and consistent path.When deploying a security policy, the following questions must be answered.Business needs - What does the organization use the network for? What are the organization's needs? Regardless of the impact of security, business needs must take precedence.Threat Identification (Threat Identification)----------- What types of threats are most likely to occur based on the organization's purpose? For example, the threats faced by a financial institution are different from those faced by a university.Riskanalysis (Riskanalysis)-------------- What is the cost vs. benefit analysis for implementing different security technologies? How do the latest security technologies affect the cyber environment? What are the risks of not using these technologies?Security needs - What are the strategies, standards, and guidelines for addressing business needs and risks?