640-554 CCNA Security syllabus

Exam Topics (CCNA Security) 640-554

Common Security Threats

    Describe common security threats

Security and Cisco Routers

    Implement security on Cisco routers

    Describe securing the control, data, and management plane

    Describe Cisco Security Manager

    Describe IPv4 to IPv6 transition


AAA on Cisco Devices

    Implement AAA (authentication, authorization, and accounting)

    Describe TACACS+

    Describe RADIUS

    Describe AAA

    Verify AAA functionality


IOS ACLs

    Describe standard, extended, and named IP IOS access control lists (ACLs) to filter packets

    Describe considerations when building ACLs

    Implement IP ACLs to mitigate threats in a network


Secure Network Management and Reporting

    Describe secure network management

    Implement secure network management


Common Layer 2 Attacks

    Describe Layer 2 security using Cisco switches

    Describe VLAN security

    Implement VLANs and trunking

    Implement spanning tree

Exam 70-413 Designing and Implementing a Server Infrastructure (MCSE SYLLABUS NEW 2013)

Plan and deploy a server infrastructure (20–25%)

        Design an automated server installation strategy

            Design considerations including images and bare metal/virtual deployment; design a server implementation using Windows Assessment and Deployment Kit (ADK); design a virtual server deployment

        Plan and implement a server deployment infrastructure

            Configure multicast deployment; configure multi-site topology and distribution points; configure a multi-server topology; configure autonomous and replica Windows Deployment Services (WDS) servers

        Plan and implement server upgrade and migration

            Plan for role migration; migrate server roles; migrate servers across domains and forests; design a server consolidation strategy; plan for capacity and resource optimization

        Plan and deploy Virtual Machine Manager services

            Design Virtual Machine Manager service templates; define operating system profiles; configure hardware and capability profiles; manage services; configure image and template libraries; manage logical networks

        Plan and implement file and storage services

            Planning considerations include iSCSI SANs, Fibre Channel SANs, Virtual Fibre Channel, storage spaces, storage pools, and data de-duplication; configure the iSCSI Target server; configure the Internet Storage Name server (iSNS); configure Network File System (NFS); install Device Specific Modules (DSMs)

Exam 70-412 Configuring Advanced Windows Server 2012 Services (MCSE SYLLABUS NEW 2013)

Configure and manage high availability (15–20%)

        Configure Network Load Balancing (NLB)

            Install NLB nodes; configure NLB prerequisites; configure affinity; configure port rules; configure cluster operation mode; upgrade an NLB cluster

        Configure failover clustering

            Configure Quorum; configure cluster networking; restore single node or cluster configuration; configure cluster storage; implement Cluster Aware Updating; upgrade a cluster

        Manage failover clustering roles

            Configure role-specific settings including continuously available shares; configure VM monitoring; configure failover and preference settings

        Manage Virtual Machine (VM) movement

            Perform Live Migration; perform quick migration; perform storage migration; import, export, and copy VMs; migrate from other platforms (P2V and V2V)

Configure file and storage solutions (15–20%)

       Configure advanced file services

            Configure NFS data store; configure BranchCache; configure File Classification Infrastructure (FCI) using File Server Resource Manager (FSRM); configure file access auditing

        Implement Dynamic Access Control (DAC)

            Configure user and device claim types; implement policy changes and staging; perform access-denied remediation; configure file classification

        Configure and optimize storage

            Configure iSCSI Target and Initiator; configure Internet Storage Name server (iSNS); implement thin provisioning and trim; manage server free space using Features on Demand

Implement business continuity and disaster recovery (15–20%)

        Configure and manage backups

            Configure Windows Server backups; configure Windows Online backups; configure role-specific backups; manage VSS settings using VSSAdmin; create System Restore snapshots

        Recover servers

            Restore from backups; perform a Bare Metal Restore (BMR); recover servers using Windows Recovery Environment (Win RE) and safe mode; apply System Restore snapshots; configure the Boot Configuration Data (BCD) store

        Configure site-level fault tolerance

            Configure Hyper-V Replica including Hyper-V Replica Broker and VMs; configure multi-site clustering including network settings, Quorum, and failover settings