Implement Secure Sockets Layer (SSL) VPN using ASA device manager Configure Cisco IOS IPS using

CCP Implement zone-based policy firewall using CCP Implement the Cisco Adaptive Security Appliance (ASA) Implement Network Address Translation (NAT) and Port Address Translation (PAT) Describe VLAN security Implement VLANs and trunking Implement spanning tree Describe IPv4 to IPv6 transition ======================================= The newer 640-554 IINS Exam has many areas which were covered in the previous ex am. The differences include support for the newer Cisco Configuration Professional ( CCP) tool which has replaced the Security Device Manager (SDM), support for basic ASA con figuration and a few added objectives that widen the technology base of the candidate. Here is the complete list of topics in IINS-640-554: (The topics starting with * have been newly added in 640-554) Common Security Threats Describe common security threats Security and Cisco Routers Implement security on Cisco routers Describe securing the control, data, and management plane Describe Cisco Security Manager *-Describe IPv4 to IPv6 transition AAA on Cisco Devices Implement AAA (authentication, authorization, and accounting) Describe TACACS+ Describe RADIUS Describe AAA Verify AAA functionality IOS ACLs Describe standard, extended, and named IP IOS access control lists (ACLs) to filter packets Describe considerations when building ACLs Implement IP ACLs to mitigate threats in a network Secure Network Management and Reporting Describe secure network management Implement secure network management Common Layer 2 Attacks Describe Layer 2 security using Cisco switches *-Describe VLAN security *-Implement VLANs and trunking *-Implement spanning tree

Cisco Firewall Technologies Describe operational strengths and weaknesses of the different firewall tech nologies Describe stateful firewalls Describe the types of NAT used in firewall technologies *_Implement zone-based policy firewall using CCP *-Implement the Cisco Adaptive Security Appliance (ASA) *-Implement Network Address Translation (NAT) and Port Address Translation ( PAT) Cisco IPS Describe Cisco Intrusion Prevention System (IPS) deployment considerations Describe IPS technologies *-Configure Cisco IOS IPS using CCP VPN Technologies Describe the different methods used in cryptography Describe VPN technologies Describe the building blocks of IPSec Implement an IOS IPSec site-to-site VPN with pre-shared key authentication Verify VPN operations *-Implement Secure Sockets Layer (SSL) VPN using ASA device manager