added more notes and intro page
This commit is contained in:
@@ -0,0 +1,62 @@
|
||||
# Security Fundamentals
|
||||
|
||||
This section covers essential security concepts, including threats, vulnerabilities, security program elements, device access control, password policies, VPNs, access control lists, Layer 2 security, AAA concepts, wireless security, and configuring WLANs with WPA2 PSK.
|
||||
|
||||
## 5.1 Key Security Concepts
|
||||
|
||||
* **Threats:** Potential dangers to network security, such as malware, denial-of-service attacks, and phishing.
|
||||
* **Vulnerabilities:** Weaknesses in systems or applications that can be exploited by attackers.
|
||||
* **Exploits:** Methods used to take advantage of vulnerabilities.
|
||||
* **Mitigation Techniques:** Strategies to reduce or eliminate security risks, such as firewalls, intrusion prevention systems, and security awareness training.
|
||||
|
||||
## 5.2 Security Program Elements
|
||||
|
||||
* **User Awareness and Training:** Educating users about security threats and best practices.
|
||||
* **Physical Access Control:** Restricting physical access to network devices and facilities.
|
||||
|
||||
## 5.3 Device Access Control
|
||||
|
||||
* **Local Passwords:** Using passwords to control access to network devices.
|
||||
|
||||
## 5.4 Security Password Policies
|
||||
|
||||
* **Password Management:** Guidelines for creating, storing, and changing passwords.
|
||||
* **Password Complexity:** Requirements for password length, character types, and complexity.
|
||||
* **Password Alternatives:**
|
||||
* **Multifactor Authentication (MFA):** Requires multiple factors for authentication, such as something you know (password), something you have (token), or something you are (biometric).
|
||||
* **Certificates:** Digital certificates used for authentication.
|
||||
* **Biometrics:** Using unique biological traits for authentication, such as fingerprints or facial recognition.
|
||||
|
||||
## 5.5 VPNs (Virtual Private Networks)
|
||||
|
||||
VPNs create secure connections over public networks, such as the internet.
|
||||
|
||||
* **Remote Access VPNs:** Allow remote users to securely connect to the network.
|
||||
* **Site-to-Site VPNs:** Connect two or more networks securely over the internet.
|
||||
|
||||
## 5.6 Access Control Lists (ACLs)
|
||||
|
||||
ACLs filter network traffic based on criteria such as source/destination IP address, port number, and protocol.
|
||||
|
||||
## 5.7 Layer 2 Security Features
|
||||
|
||||
* **DHCP Snooping:** Prevents unauthorized DHCP servers from assigning IP addresses.
|
||||
* **Dynamic ARP Inspection (DAI):** Prevents ARP poisoning attacks.
|
||||
* **Port Security:** Limits the number of MAC addresses that can be learned on a port.
|
||||
|
||||
## 5.8 Authentication, Authorization, and Accounting (AAA)
|
||||
|
||||
* **Authentication:** Verifying the identity of a user or device.
|
||||
* **Authorization:** Determining what resources a user or device is allowed to access.
|
||||
* **Accounting:** Tracking user activity and resource usage.
|
||||
|
||||
## 5.9 Wireless Security Protocols
|
||||
|
||||
* **WPA (Wi-Fi Protected Access):** An older security protocol that is no longer considered secure.
|
||||
* **WPA2:** A more secure protocol that uses stronger encryption.
|
||||
* **PSK (Pre-Shared Key):** Uses a shared password for authentication.
|
||||
* **WPA3:** The latest and most secure protocol.
|
||||
|
||||
## 5.10 WLAN Configuration with WPA2 PSK
|
||||
|
||||
Wireless LAN controllers can be used to configure WLANs (wireless networks) with WPA2 PSK security.
|
||||
@@ -0,0 +1,47 @@
|
||||
# Automation and Programmability
|
||||
|
||||
This section delves into the impact of automation on network management, controller-based networking, software-defined architectures, AI and machine learning in network operations, REST-based APIs, configuration management tools, and JSON data.
|
||||
|
||||
## 6.1 Automation Impact
|
||||
|
||||
Network automation uses software and scripts to automate network configuration, management, and operations tasks. This leads to increased efficiency, reduced errors, and faster response times.
|
||||
|
||||
## 6.2 Traditional vs. Controller-Based Networking
|
||||
|
||||
* **Traditional Networks:** Devices are configured and managed individually.
|
||||
* **Controller-Based Networking:** A central controller manages the network devices. This allows for centralized configuration, management, and monitoring.
|
||||
|
||||
## 6.3 Software-Defined Architecture (SDN)
|
||||
|
||||
SDN separates the control plane (which makes decisions about how traffic is forwarded) from the data plane (which forwards the traffic).
|
||||
|
||||
* **Overlay Network:** A virtual network built on top of the physical network.
|
||||
* **Underlay Network:** The physical network infrastructure.
|
||||
* **Fabric:** The combination of the underlay and overlay networks.
|
||||
* **Northbound APIs:** Used for communication between the controller and applications.
|
||||
* **Southbound APIs:** Used for communication between the controller and network devices.
|
||||
|
||||
## 6.4 AI and Machine Learning in Network Operations
|
||||
|
||||
* **AI (Artificial Intelligence):** Enables networks to learn and adapt.
|
||||
* **Generative AI:** Can create new content or solutions.
|
||||
* **Predictive AI:** Can anticipate future events or trends.
|
||||
* **Machine Learning (ML):** A type of AI that allows systems to learn from data without explicit programming.
|
||||
|
||||
## 6.5 REST-based APIs
|
||||
|
||||
REST (Representational State Transfer) APIs are a common way to interact with web services.
|
||||
|
||||
* **Authentication Types:** Methods for verifying the identity of the client, such as API keys or OAuth.
|
||||
* **CRUD:** Create, Read, Update, Delete operations.
|
||||
* **HTTP Verbs:** GET, POST, PUT, DELETE used to perform CRUD operations.
|
||||
* **Data Encoding:** Formats for encoding data, such as JSON or XML.
|
||||
|
||||
## 6.6 Configuration Management Mechanisms
|
||||
|
||||
* **Ansible:** An open-source automation tool that uses playbooks to automate tasks.
|
||||
* **Terraform:** An infrastructure-as-code tool that allows you to define and manage your infrastructure in code.
|
||||
|
||||
## 6.7 JSON-Encoded Data
|
||||
|
||||
JSON (JavaScript Object Notation) is a lightweight data format that is easy for humans to read and write and for machines to parse.
|
||||
+10
-4
@@ -1,6 +1,12 @@
|
||||
# Summary
|
||||
|
||||
- [Chapter 1 Network Fundamentals](1-network-fundamentals.md)
|
||||
- [Chapter 2 Network Access](2-network-access.md)
|
||||
- [Chapter 3 IP Connectivity](3-ip-connectivity.md)
|
||||
- [Chapter 4 IP Services](4-ip-services.md)
|
||||
- [Introduction](introduction.md)
|
||||
- [Network Fundamentals](1-network-fundamentals.md)
|
||||
- [Network Access](2-network-access.md)
|
||||
- [VLANs](2-network-access.md#vlans)
|
||||
- [STP](2-network-access.md#stp)
|
||||
- [IP Connectivity](3-ip-connectivity.md)
|
||||
- [Static Routing](3-ip-connectivity.md#static-routing)
|
||||
- [Dynamic Routing](3-ip-connectivity.md#dynamic-routing)
|
||||
- [WAN Technologies](4-wan-technologies.md)
|
||||
- [Network Security](5-network-security.md)
|
||||
@@ -0,0 +1,32 @@
|
||||
# Welcome to Your CCNA Study Guide!
|
||||
|
||||
This guide is designed to help you prepare for the Cisco CCNA (200-301) exam. It covers all the key topics outlined in the official exam blueprint, including:
|
||||
|
||||
* Network Fundamentals
|
||||
* Network Access
|
||||
* IP Connectivity
|
||||
* IP Services
|
||||
* Security Fundamentals
|
||||
* Automation and Programmability
|
||||
|
||||
Whether you're new to networking or looking to refresh your knowledge, this guide will provide you with the information and practice you need to succeed on the exam.
|
||||
|
||||
**How to Use This Guide**
|
||||
|
||||
This guide is organized into chapters that correspond to the exam topics. Each chapter covers the essential concepts and provides examples and practice questions to help you solidify your understanding.
|
||||
|
||||
You can use this guide in several ways:
|
||||
|
||||
* **As a primary study resource:** Read through each chapter carefully and work through the examples and practice questions.
|
||||
* **As a quick reference:** Use the table of contents and index to quickly find the information you need.
|
||||
* **As a supplement to other study materials:** Use this guide to reinforce your learning from other resources, such as Cisco's official curriculum or online courses.
|
||||
|
||||
**Tips for Success**
|
||||
|
||||
* **Start early and study consistently.** The CCNA exam covers a lot of material, so it's important to give yourself plenty of time to prepare.
|
||||
* **Use a variety of study methods.** Don't just read the material; work through practice questions, labs, and simulations.
|
||||
* **Focus on your weak areas.** Identify the topics you're struggling with and spend extra time studying them.
|
||||
* **Get hands-on experience.** If possible, set up a lab environment where you can practice configuring and troubleshooting network devices.
|
||||
* **Join a study group or online forum.** Discussing the material with others can help you learn and retain information.
|
||||
|
||||
I hope this guide helps you achieve your CCNA certification goals!
|
||||
Reference in New Issue
Block a user