640-553 IINS

640-553 IINS

Implementing Cisco IOS Network Security

Exam Number:	640-553
Associated Certifications:	CCNA Security
Duration:	90 minutes (55-65 questions)
Available Languages:	English, Japanese, Chinese, Russian, Portuguese, Korean, French, Spanish
Click Here to Register:	Pearson VUE
Exam Policies:	Read current policies and requirements
Exam Tutorial:	Review type of exam questions
Register for Course:	IINS course and other offerings

Exam Description

The 640-553 Implementing Cisco IOS Network Security (IINS) exam is associated with the CCNA Security certification. This exam tests a candidate's knowledge of securing Cisco routers and switches and their associated networks. It leads to validated skills for installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in the technologies that Cisco uses in its security infrastructure.

Candidates can prepare for this exam by taking the Implementing Cisco IOS Network Security (IINS) course.

Exam Topics

The following topics are general guidelines for the content likely to be included on the Implementing Cisco IOS Network Security exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

640-553 IINS Exam Topics

Recommended Training

The following course is the recommended training for this exam:

• Implementing Cisco IOS Network Security (IINS) v1.0

The course listed is offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the Global Learning Partner Locator for a Cisco Learning Partner near you.

Additional Resources

A variety of Cisco Press titles may be available for this exam. These titles can be purchased through the Cisco Marketplace Bookstore,or directly from Cisco Press.

640-721 CCNA-Wireless

640-721 IUWNE Exam Topics (Blueprint)

Exam Description

The 640-721 Implementing Cisco Unified Wireless Network Essential (IUWNE) exam is the exam associated with the CCNA Wireless certification. This exam tests a candidate's knowledge of installing, configuring, operating, and troubleshooting small to medium-size WLANs. Candidates can prepare for this exam by taking the Implementing Cisco Unified Wireless Network Essential (IUWNE) course.

Exam Topics

The following information provides general guidelines for the content likely to be included on the Implementing Cisco Unified Wireless Networking Essentials (IUWNE) exam. However, other related topics may also appear on any specific delivery of the exam.

Describe WLAN fundamentals

• Describe basics of spread spectrum technology (modulation, DSS, OFDM, MIMO, Channels reuse and overlap, Rate-shifting, CSMA/CA)
• Describe the impact of various wireless technologies (Bluetooth, WiMAX, ZigBee, cordless phone)
• Describe wireless regulatory bodies, standards and certifications (FCC, ETSI, 802.11a/b/g/n, WiFi Alliance)
• Describe WLAN RF principles (antenna types, RF gain/loss, EIRP, refraction, reflection, ETC)
• Describe networking technologies used in wireless (SSID --> WLAN_ID --> Interface -- >VLAN, 802.1q trunking)
• Describe wireless topologies (IBSS, BSS, ESS, Point-to-Point, Point-to-Multipoint, basic Mesh, bridging)
• Describe 802.11 authentication and encryption methods (Open, Shared, 802.1X, EAP, TKIP, AES)
• Describe frame types (associated/unassociated, management, control, data)

Install a basic Cisco wireless LAN

• Describe the basics of the Cisco Unified Wireless Network architecture (Split MAC, LWAPP, stand-alone AP versus controller-based AP, specific hardware examples)
• Describe the Cisco Mobility Express Wireless architecture (Smart Business Communication System -- SBCS, Cisco Config Agent -- CCA, 526WLC, 521AP - stand-alone and controller-based)
• Describe the modes of controller-based AP deployment (local, monitor, HREAP, sniffer, rogue detector, bridge)
• Describe controller-based AP discovery and association (OTAP, DHCP, DNS, Master-Controller, Primary-Secondary-Tertiary, n+1 redundancy)
• Describe roaming (Layer 2 and Layer 3, intra-controller and inter-controller, mobility groups)
• Configure a WLAN controller and access points WLC: ports, interfaces, WLANs, NTP, CLI and Web UI, CLI wizard, LAG AP: Channel, Power
• Configure the basics of a stand-alone access point (no lab) (Express setup, basic security)
• Describe RRM

Install Wireless Clients

• Describe client OS WLAN configuration (Windows, Apple, and Linux.)
• Install Cisco ADU
• Describe basic CSSC
• Describe CCX versions 1 through 5

Implement basic WLAN Security

• Describe the general framework of wireless security and security components (authentication, encryption, MFP, IPS)
• Describe and configure authentication methods (Guest, PSK, 802.1X, WPA/WPA2 with EAP- TLS, EAP-FAST, PEAP, LEAP)
• Describe and configure encryption methods (WPA/WPA2 with TKIP, AES)
• Describe and configure the different sources of authentication (PSK, EAP-local or -external, Radius)

Operate basic WCS

• Describe key features of WCS and Navigator (versions and licensing)
• Install/upgrade WCS and configure basic administration parameters (ports, O/S version, strong passwords, service vs. application)
• Configure controllers and APs (using the Configuration tab not templates)
• Configure and use maps in the WCS (add campus, building, floor, maps, position AP)
• Use the WCS monitor tab and alarm summary to verify the WLAN operations

Conduct basic WLAN Maintenance and Troubleshooting

• Identify basic WLAN troubleshooting methods for controllers, access points, and clients methodologies
• Describe basic RF deployment considerations related to site survey design of data or VoWLAN applications, Common RF interference sources such as devices, building material, AP location Basic RF site survey design related to channel reuse, signal strength, cell overlap
• Describe the use of WLC show, debug and logging
• Describe the use of the WCS client troubleshooting tool
• Transfer WLC config and O/S using maintenance tools and commands
• Describe and differentiate WLC WLAN management access methods (console port, CLI, telnet, ssh, http, https, wired versus wireless management)

CCNA

CCNA Overview The CCNA certification (Cisco Certified Network Associate) indicates a foundation in and apprentice knowledge of networking. CCNA certified professionals can install, configure, and operate LAN, WAN, and dial access services for small networks (100 nodes or fewer), including but not limited to use of these protocols: IP, IGRP, Serial, Frame Relay, IP RIP, VLANs, RIP, Ethernet, Access Lists. Official courseware, Authorized Training, Cisco Learning Credits Accepted This class uses the official Cisco Courseware book Interconnecting Cisco Network Devices. This CCNA bootcamp is the only offering in Alaska that utilizes the Authorized courseware from Cisco Systems Inc (NBS is partnered with CCPrep who is a Sponsored Organization of Sunset Learning, A Cisco Learning Solutions Partner.)   Only Cisco Learning Solutions Partners can accept your Cisco credits for class payment. Router for each Student Students will each have their own router to work on during all the labs. There will be no sharing of routers to guarantee each student gets the hands on necessary to work with Cisco Routers in the real world.  Pre-requisites This class is designed for individuals new to working with Cisco® products, yet have a clear understanding of the OSI model. Students are guaranteed to pass the CCNA Exam, provided prerequisite knowledge / experience is met or exceeded.  Prior to enrolling in the CCNA Boot Camp, it is vitally important that each student have a clear understanding of the OSI model including naming of the seven layers and the function of each layer.  Also required is base line knowledge of TCP/IP.  If you do NOT meet these prerequisites, we recommend that you enroll in our 5 day CCNA Prep class (Network +). Exams Included This course will take the SINGLE exam approach.  Students will not take the Intro or ICND exam, rather the CCNA 640-801 exam (which is the latest CCNA Exam).  We guarantee students will pass the CCNA Exam after completing each respective Bootcamp. CCNA bootcamp includes up to three test attempts. Please note that there is a 5 day waiting period between exams.  If the student does not pass the exam, they have a one year window to use their test attempts which were included with the class tuition.   This guarantee is contingent upon the student meeting the pre-requisites of each course.

Material Covered:

Planning & Designing Design a simple LAN using Cisco Technology Design an IP addressing scheme to meet design requirements Select an appropriate routing protocol based on user requirements Design a simple internetwork using Cisco technology Develop an access list to meet user specifications Choose WAN services to meet customer requirements Implementation & Operation Configure routing protocols given user requirements Configure IP addresses, subnet masks, and gateway addresses on routers and hosts Configure a router for additional administrative functionality Configure a switch with VLANS and inter-switch communication Implement a LAN Customize a switch configuration to meet specified network requirements Manage system image and device configuration files Perform an initial configuration on a router Perform an initial configuration on a switch Implement access lists Implement simple WAN protocols Troubleshooting Utilize the OSI model as a guide for systematic network troubleshooting Perform LAN and VLAN troubleshooting Troubleshoot routing protocols Troubleshoot IP addressing and host configuration Troubleshoot a device as part of a working network Troubleshoot an access list Perform simple WAN troubleshooting Technology Describe network communications using layered models Describe the Spanning Tree process Compare and contrast key characteristics of LAN environments Evaluate the characteristics of routing protocols Evaluate TCP/IP communication process and its associated protocols Describe the components of network devices Evaluate rules for packet control Evaluate key characteristics of WANs

Labs:
	Lab 1: Build a network
	Lab 2: User and Privileged Modes
	Lab 3: Router initial configuration and enable IP
	Lab 4: Verify initial configuration using setup command
	Lab 5: Use the Context sensitive help facility
	Lab 6: Command history and editing features
	Lab 7: Examine Router Elements
	Lab 8: Using Cisco Discover Protocol
	Lab 9: Copy and manipulate configuration files
	Lab 10: Config passwords/identification/banners
	Lab 11: Config Router to be a TFTP Server
	Lab 12: Loading the IOS from ROM, TFTP, or flash
	Lab 13: Working with an IOS software image
	Lab 14: Configure IP Addresses
	Lab 15: Configure IP Host Table
	Lab 16: Verify IP Addresses
	Lab 17: Add RIP routing protocol to configuration
	Lab 18: Add IGRP routing protocol to configuration
	Lab 19: Configuring Standard Access-Lists
	Lab 20: Configuring Extended Access Lists
	Lab 21: Configuring Frame Relay
	Lab 21: Monitoring Frame Relay