diff --git a/src/5-security-fundamentals.md b/src/5-security-fundamentals.md new file mode 100644 index 0000000..330981d --- /dev/null +++ b/src/5-security-fundamentals.md @@ -0,0 +1,62 @@ +# Security Fundamentals + +This section covers essential security concepts, including threats, vulnerabilities, security program elements, device access control, password policies, VPNs, access control lists, Layer 2 security, AAA concepts, wireless security, and configuring WLANs with WPA2 PSK. + +## 5.1 Key Security Concepts + +* **Threats:** Potential dangers to network security, such as malware, denial-of-service attacks, and phishing. +* **Vulnerabilities:** Weaknesses in systems or applications that can be exploited by attackers. +* **Exploits:** Methods used to take advantage of vulnerabilities. +* **Mitigation Techniques:** Strategies to reduce or eliminate security risks, such as firewalls, intrusion prevention systems, and security awareness training. + +## 5.2 Security Program Elements + +* **User Awareness and Training:** Educating users about security threats and best practices. +* **Physical Access Control:** Restricting physical access to network devices and facilities. + +## 5.3 Device Access Control + +* **Local Passwords:** Using passwords to control access to network devices. + +## 5.4 Security Password Policies + +* **Password Management:** Guidelines for creating, storing, and changing passwords. +* **Password Complexity:** Requirements for password length, character types, and complexity. +* **Password Alternatives:** + * **Multifactor Authentication (MFA):** Requires multiple factors for authentication, such as something you know (password), something you have (token), or something you are (biometric). + * **Certificates:** Digital certificates used for authentication. + * **Biometrics:** Using unique biological traits for authentication, such as fingerprints or facial recognition. + +## 5.5 VPNs (Virtual Private Networks) + +VPNs create secure connections over public networks, such as the internet. + +* **Remote Access VPNs:** Allow remote users to securely connect to the network. +* **Site-to-Site VPNs:** Connect two or more networks securely over the internet. + +## 5.6 Access Control Lists (ACLs) + +ACLs filter network traffic based on criteria such as source/destination IP address, port number, and protocol. + +## 5.7 Layer 2 Security Features + +* **DHCP Snooping:** Prevents unauthorized DHCP servers from assigning IP addresses. +* **Dynamic ARP Inspection (DAI):** Prevents ARP poisoning attacks. +* **Port Security:** Limits the number of MAC addresses that can be learned on a port. + +## 5.8 Authentication, Authorization, and Accounting (AAA) + +* **Authentication:** Verifying the identity of a user or device. +* **Authorization:** Determining what resources a user or device is allowed to access. +* **Accounting:** Tracking user activity and resource usage. + +## 5.9 Wireless Security Protocols + +* **WPA (Wi-Fi Protected Access):** An older security protocol that is no longer considered secure. +* **WPA2:** A more secure protocol that uses stronger encryption. + * **PSK (Pre-Shared Key):** Uses a shared password for authentication. +* **WPA3:** The latest and most secure protocol. + +## 5.10 WLAN Configuration with WPA2 PSK + +Wireless LAN controllers can be used to configure WLANs (wireless networks) with WPA2 PSK security. \ No newline at end of file diff --git a/src/6-automation-and-programmability.md b/src/6-automation-and-programmability.md new file mode 100644 index 0000000..6f5ad7f --- /dev/null +++ b/src/6-automation-and-programmability.md @@ -0,0 +1,47 @@ +# Automation and Programmability + +This section delves into the impact of automation on network management, controller-based networking, software-defined architectures, AI and machine learning in network operations, REST-based APIs, configuration management tools, and JSON data. + +## 6.1 Automation Impact + +Network automation uses software and scripts to automate network configuration, management, and operations tasks. This leads to increased efficiency, reduced errors, and faster response times. + +## 6.2 Traditional vs. Controller-Based Networking + +* **Traditional Networks:** Devices are configured and managed individually. +* **Controller-Based Networking:** A central controller manages the network devices. This allows for centralized configuration, management, and monitoring. + +## 6.3 Software-Defined Architecture (SDN) + +SDN separates the control plane (which makes decisions about how traffic is forwarded) from the data plane (which forwards the traffic). + +* **Overlay Network:** A virtual network built on top of the physical network. +* **Underlay Network:** The physical network infrastructure. +* **Fabric:** The combination of the underlay and overlay networks. +* **Northbound APIs:** Used for communication between the controller and applications. +* **Southbound APIs:** Used for communication between the controller and network devices. + +## 6.4 AI and Machine Learning in Network Operations + +* **AI (Artificial Intelligence):** Enables networks to learn and adapt. + * **Generative AI:** Can create new content or solutions. + * **Predictive AI:** Can anticipate future events or trends. +* **Machine Learning (ML):** A type of AI that allows systems to learn from data without explicit programming. + +## 6.5 REST-based APIs + +REST (Representational State Transfer) APIs are a common way to interact with web services. + +* **Authentication Types:** Methods for verifying the identity of the client, such as API keys or OAuth. +* **CRUD:** Create, Read, Update, Delete operations. +* **HTTP Verbs:** GET, POST, PUT, DELETE used to perform CRUD operations. +* **Data Encoding:** Formats for encoding data, such as JSON or XML. + +## 6.6 Configuration Management Mechanisms + +* **Ansible:** An open-source automation tool that uses playbooks to automate tasks. +* **Terraform:** An infrastructure-as-code tool that allows you to define and manage your infrastructure in code. + +## 6.7 JSON-Encoded Data + +JSON (JavaScript Object Notation) is a lightweight data format that is easy for humans to read and write and for machines to parse. \ No newline at end of file diff --git a/src/SUMMARY.md b/src/SUMMARY.md index 4592fda..82c1ed6 100644 --- a/src/SUMMARY.md +++ b/src/SUMMARY.md @@ -1,6 +1,12 @@ # Summary -- [Chapter 1 Network Fundamentals](1-network-fundamentals.md) -- [Chapter 2 Network Access](2-network-access.md) -- [Chapter 3 IP Connectivity](3-ip-connectivity.md) -- [Chapter 4 IP Services](4-ip-services.md) +- [Introduction](introduction.md) +- [Network Fundamentals](1-network-fundamentals.md) +- [Network Access](2-network-access.md) + - [VLANs](2-network-access.md#vlans) + - [STP](2-network-access.md#stp) +- [IP Connectivity](3-ip-connectivity.md) + - [Static Routing](3-ip-connectivity.md#static-routing) + - [Dynamic Routing](3-ip-connectivity.md#dynamic-routing) +- [WAN Technologies](4-wan-technologies.md) +- [Network Security](5-network-security.md) \ No newline at end of file diff --git a/src/introduction.md b/src/introduction.md new file mode 100644 index 0000000..1ba4db0 --- /dev/null +++ b/src/introduction.md @@ -0,0 +1,32 @@ +# Welcome to Your CCNA Study Guide! + +This guide is designed to help you prepare for the Cisco CCNA (200-301) exam. It covers all the key topics outlined in the official exam blueprint, including: + +* Network Fundamentals +* Network Access +* IP Connectivity +* IP Services +* Security Fundamentals +* Automation and Programmability + +Whether you're new to networking or looking to refresh your knowledge, this guide will provide you with the information and practice you need to succeed on the exam. + +**How to Use This Guide** + +This guide is organized into chapters that correspond to the exam topics. Each chapter covers the essential concepts and provides examples and practice questions to help you solidify your understanding. + +You can use this guide in several ways: + +* **As a primary study resource:** Read through each chapter carefully and work through the examples and practice questions. +* **As a quick reference:** Use the table of contents and index to quickly find the information you need. +* **As a supplement to other study materials:** Use this guide to reinforce your learning from other resources, such as Cisco's official curriculum or online courses. + +**Tips for Success** + +* **Start early and study consistently.** The CCNA exam covers a lot of material, so it's important to give yourself plenty of time to prepare. +* **Use a variety of study methods.** Don't just read the material; work through practice questions, labs, and simulations. +* **Focus on your weak areas.** Identify the topics you're struggling with and spend extra time studying them. +* **Get hands-on experience.** If possible, set up a lab environment where you can practice configuring and troubleshooting network devices. +* **Join a study group or online forum.** Discussing the material with others can help you learn and retain information. + +I hope this guide helps you achieve your CCNA certification goals! \ No newline at end of file