ccna 200-301 exam objectives pdf

ccna 200-301 exam objectives pdf.Traditional network security relies on layering of products and the use of multiple filters. However, as threats become more sophisticated, these filters require a deeper understanding of traffic at the network and application layers. Network security needs include dynamic updating of information and rapid response to threats. For this reason, Cisco designed Security Intelligence Operation (SIO), a cloud-based service that connects global threat information, reputation-based services, and sophisticated analytics to Cisco network security appliances to provide stronger protection with shorter response times.1.1.1.4 Cyber ThreatsIn addition to dealing with threats from outside the network, cybersecurity practitioners must also be prepared to deal with threats from within the network. Insider threats, whether intentional or accidental, are likely to cause more damage than external threats because of their greater knowledge of, and direct access to, corporate networks and data. Despite this fact, tools and techniques for mitigating insider threats were developed more than 20 years after tools and techniques for mitigating external threats were generated.A common scenario for threats originating from inside the network is an employee with certain technical skills and a disgruntled attitude toward the company who intends to wreak havoc on the company network. Most threats from inside the network leverage protocols and technologies used on the LAN or switching infrastructure. These insider threats can basically be divided into two categories: spoofing and DoSoA spoofing attack is an attack in which a device pretends to be another device by forging data. There are several types of spoofing attacks. For example, MAC address spoofing occurs when a computer receives packets based on another computer's MAC address.DoS attacks make network resources unavailable to their intended users. An attacker can use different methods to launch a DoS attack.As a network security practitioner, it is important to understand the methods specifically designed to address these threat types, as well as to secure the LAN.4 Chapter 1 Modern Network Security Threats1.1.1.5 Encryption and CryptographyIn addition to preventing and denying malicious traffic, network security requires continuous protection of data. Cryptography, which studies and practices how to hide information, is widely used in modern network security. Today, each type of network communication has its own protocol or technique designed to hide that communication from users other than the intended user.