Chapter 6 of 6 · Cisco CCST 100-150 Networking
Security
Firewalls, CIA and AAA, encryption, certificates, common threats and wireless security for a home router.
- 5topics
- 21 minfast track
- 1diagrams and exhibits
Topics in this chapter
Take them in order, or jump to the one you need.
- 1How Firewalls Filter TrafficLearn how firewalls permit or deny traffic using rules on addresses, protocols and ports, stateless and stateful filtering, and…Diagram5 min
- 2CIA, AAA, MFA and Identity StoresLearn the CIA triad, how AAA works, what multifactor authentication adds, and how Active Directory stores user identities for a…4 min
- 3Encryption, Certificates and Password ComplexityLearn how encryption protects data in transit and at rest, symmetric and asymmetric keys, what certificates prove, and what makes…4 min
- 4Threats, Vulnerabilities, Spam, Phishing, Malware and DoSLearn the difference between a threat and a vulnerability, and recognise spam, phishing, malware and denial of service attacks…4 min
- 5Wireless Security with WPA, WPA2 and WPA3Compare WPA, WPA2 and WPA3, choose between Personal and Enterprise modes, and follow the basic steps to secure the wireless…4 min
About this chapter
What this chapter covers
Security is about protecting networks, devices and data from misuse, loss and attack.
The chapter starts with the firewall, the basic tool for filtering traffic. It then explains the core ideas of security, the ways of protecting data and proving identity, the common attacks, and how to secure a home wireless network.
At this level, the aim is to understand the terms and to recognise good and poor practice. You are not expected to design a secure network.
How the topics fit together
The pages move from controlling traffic, to controlling people, to protecting data, to knowing the enemy.
The first page covers firewalls and how their rules permit or deny traffic. The second page covers the security concepts of CIA, AAA, MFA and identity stores.
The third page covers encryption, certificates and passwords. The fourth page covers threats and vulnerabilities, including spam, phishing, malware and denial of service.
The last page covers wireless security with WPA, and the steps for a home router.
Many of these ideas appear again in other chapters. The protocol page in the first chapter explains why HTTPS is safer than HTTP, and the access page in the problems chapter explains why SSH beats telnet.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams, tables and examples.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Many security questions test whether you can pick the right term for a short description. Make your own flash cards for the terms, and say each definition in your own words.
Ready for more practice?
The full Cisco CCST 100-150 Networking question bank has 749 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Cisco. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.