
Securing Cisco Networking Devices (SND) : 642-552 certified
Testking Product 642-552 Description:
Exam Number/Code: 642-552
Exam Name: Securing Cisco Networking Devices (SND)
VUE Code: 642-552
Vendor: cisco
Exam Language(s): English642-552 CSE
Cisco Sales Expert
Exam Number: 642-552
Associated Certifications: CCSP/Cisco Firewall Specialist/Cisco IPS Specialist/Cisco VPN Specialist
Duration: 75 minutes
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Cisco Network Devices 642-552 SND is the exam associated with the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certificationsns. Candidates can prepare for this exam by taking the Securing Cisco Network Devices v2.0 (SND) course. This exam tests a candidate’s knowledge of securing Cisco routers and switches and their associated networks. Topics covered include; Security threats facing modern network infrastructures, Securing Cisco routers, Implementing basic AAA, Using ACLs to mitigate router and network threats, Implementing secure management and reporting, Mitigating common Layer 2 attacks, and Implementing Cisco IOS Firewall features, Cisco IOS IPS features, and IPsec VPN features using Cisco Security Device Manager
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Describe the security threats facing modern network infrastructures
Describe and mitigate the common threats to the physical installation
Describe and list mitigation methods for common network attacks
Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks
Describe the main activities in each phase of a secure network lifecycle
Explain how to meet the security needs of a typical enterprise with a comprehensive security policy
Describe the Cisco Self Defending Network architecture
Secure Cisco routers
Secure Cisco routers using the SDM Security Audit feature
Use the One-Step Lockdown feature in SDM to secure a Cisco router
Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements
Secure administrative access to Cisco routers by configuring multiple privilege levels
Secure administrative access to Cisco routers by configuring role based CLI
Secure the Cisco IOS image and configuration file
Implement basic AAA using Cisco routers
Explain the functions and importance of AAA
Describe the features of TACACS+ and RADIUS AAA protocols
Describe the methods of authentication that are used to provide access through a router (packet mode) and to provide access to the router (character mode)
Mitigate threats to Cisco routers and networks using ACLs
Explain the functionality of standard, extended, and named IP ACLs used by routers to filter packets
Configure and verify IP ACLs to mitigate given threats (filter IP traffic destined for Telnet, SNMP, and DDoS attacks) in a network using CLI
Configure IP ACLs to prevent IP address spoofing using CLI
Discuss the caveats to be considered when building ACLs
Implement secure network management and reporting
Describe the factors to be considered when planning for secure management and reporting of network devices
Use CLI to configure SSH on Cisco routers to enable secured management access
Use CLI to configure Cisco routers to send Syslog messages to a Syslog server
Describe SNMPv3 and NTPv3
Mitigate common Layer 2 attacks
Describe the common Layer 2 attacks and how to mitigate them (VLAN hopping, STP attacks, ARP spoofing, MAC spoofing, CAM overflow)
Describe the function and benefit of the security features in Cisco Catalyst switches (IBNS, PVLAN, SPAN port)
Describe common threats to WLANs
Describe the security features of the 802.11 protocol
Implement the Cisco IOS firewall feature set using SDM
Describe the operational strengths and weaknesses of the different firewall technologies
Explain stateful firewall operations and the function of the state table
Explain the types of NAT that can be implemented in a firewall
Configure and verify basic and advanced firewall on a Cisco router using SDM
Implement the Cisco IOS IPS feature set using SDM
Define network based vs. host based intrusion detection and prevention
Explain IPS technologies, attack responses, and monitoring options
Enable and verify Cisco IOS IPS operations using SDM
Implement IPsec VPN on Cisco routers using SDM
Explain IKE protocol functionality and phases
Describe the building blocks of IPsec and the security functions it provides
Explain hash-based message authentication code (HMAC) operations
Explain the different methods of encryption
Explain the purpose of the Diffie-Hellman key agreement protocol
Describe how IPsec establishes origin authentication
Describe the PKI environment at a high level
Describe the different types of IPsec VPN implementations
Configure and verify an IPsec site-to-site VPN with pre-shared key authentication using SDM
Explain Cisco Easy VPN Server and Cisco Easy VPN Remote
Configure and verify remote access VPNs using the Cisco Easy VPN Server feature of Cisco SDM
Recommended Training
Securing Cisco Network Devices (SND) is the recommended training for this exam.
Courses listed are offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the List of Learning Partners for a Cisco Learning Partner near you.
Additional Resources
A variety of Cisco Press titles may be available for this exam. These titles can be purchased through the Cisco Marketplace Bookstore, directly from Cisco Press.
CNSS 4011 Training Standard
Free Sample 642-552 Printable PDF Download:
Testking offers free demo for 642-552 (Securing Cisco Networking Devices (SND)). You can check out the interface, question quality and usability of our 642-552 Simulation exams before you decide to buy it. We are the only one site can offer demo for almost all products.
Testking cisco 642-552 Braindumps Introduction: Ultimate resource for 642-552 Bible:
Acquiring new cisco certifications are becoming a huge task in the field of I.T. These certificationsns are not easy to attain as they require professionalism and a complete dedication towards the study. More over these exams are now continuously updating and accepting this challenge is itself a task.
This cisco 642-552 braindumps exam is an important part of cisco certificationsns and at Securing Cisco Networking Devices (SND) testking 642-552 txt braindumps we have the resources to prepare you for this. The 5 exam is essential and core part of cisco certificationsns and once you clear the exam you will be able to solve the real time problems yourself.
642-552 Study Guide
Testking publishes 642-552 online Guide in order to response the customers demand. With many online resources for preparing for the 642-552 exam, you will notice when you read the below information that testking is your premier source for your 642-552 exam. With our 642-552 practice tests with explanations, no other vendor will be able to compare to testking for quality 642-552 study guides.
642-552 Preparation Labs
1:No matter in which part of the world you are, our cisco 642-552 study notes lab are equally helpful to you for a cisco 642-552 Preparation Experience like never before. Besides a lot of accurate information and explanations, you will get the knowledge of actual cisco 642-552 Exam Objectives as well. Whether you are a professional or an amateur, you will be able to succeed in your coming 642-552 Securing Cisco Networking Devices (SND) Exam on your first attempt by using our cisco 642-552 Preparation Lab. Select Preparation Labs for your cisco 642-552 Tutorial needs
2: Technology itself is boring, but actual application is of fun. The discovery-and-solving process of problems will often bring us unexpected pleasure. A group of experts gathered by Testking, after in-depth study and analysis of exam 642-552, has built a set of labs for exam 642-552 which include all labs you may encounter in exam 642-552 documents and some common troubleshootings application, as well as steps to solve problems. We hope this will be helpful for those customers who are currently preparing for exam 642-552.
T’K'S 642-552 Questions Answers

642-552 Interactive Testing Engine Included!
Test Simulation:435 Q&As
Last Update : 2009-04-03
Testking Exams 642-552 Practice Test with Full Explanations Includes:
1:Comprehensive Practice Test Questions with Full Explanations:
2:Detailed Explanations of all the questions
3:Practice 642-552 Test Questions accompanied by exhibits
4:Verified Answers Researched by Industry Experts
5:Drag and Drop questions as experienced in the Actual Exams
6:Best Test Questions with Explanations updated on regular basis
7:Free Testking Practice Test Questions with 642-552 Explanations are backed by our 100% MONEY BACK GUARANTEE.
8:Like actual certificationsn exams, our Practice Tests with Explanations are in multiple-choice (MCQs)
9:Testking is the best cisco 642-552 Certification Prep Braindumps
Some features about Testking 642-552:
Quality and Value for the 642-552 Exam
cisco 642-552 (Securing Cisco Networking Devices (SND)) will provide you with exam questions and verified answers that reflect the actual exam. Furthermore, we are constantly updating our exam 642-552. Each candidate who decides to take the 642-552 exam can receive the most reliable and up-to-date study materials here.
100% Guarantee to Pass Your 642-552 Exam
If you do not pass the 642-552 exam on your first attempt using our PassGuide testing engine, we will give you a FULL REFUND of your purchasing fee. Free Testking target is Pass 642-552 For Sure.
642-552 Downloadable, Interactive Testing engines
We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Testking Exam Preparation Material provides you everything you will need to take a certificationsn examination. Details are researched and produced by Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books,Study notes,Online Course . but logic is the key. Testking Product will help you not only pass in the first try, but also save your valuable time.
Commitment to Your Success:
At Testking.la we are committed to you ongoing success. Free Testking exams and questions are constantly being updated and compared to industry standards.
You are not about to purchase a disposable product. 642-552 practice exam updates are supplied free of charge. Regardless of how soon you decide to take the actual 642-552 examination certificationsn, you will be able to walk into the testing room as confident as the Certification Administrator.
we can take advantage of the TestKing 642-552 Value Pack and save time and money while developing your skills to pass your exam. This value pack will provide all the training materials you need to build your learning foundation and ensure your success on the exam, for one low price.
PassGuide cisco 642-552 dumps

Pass4sure 642-552
Testking 642-552
Actualtest 642-552
Search Help For Free PassGuide 642-552 Testking dumps
642-552 real exams
642-552 rapidshare 4shared sadikhov upload links
642-552 cbt testout Train Signal PrepLogic ciscoKits audio and video
| Testking Free Downloads |
|
Type |
Exam Bible | New Questions & Answers |
Latest Updated |
Download link |
![]() |
All Testking ’s value Pack |
986 |
1 days ago | Download |
Popularity: unranked [?]
Dwonload Free Latest Testking Certification Dumps
- Free Testking Cisco Certification
- Free Testking 642-551
- Free Testking 642-566
- Free Testking 642-504
- Free Testking 642-503
- Free Testking 642-502
- Free Testking 640-822
- Free Testking 640-802
- Free Testking 642-531
- Free Testking 642-523
- Free Testking 642-522
- Free Testking 642-565
- Free Testking 642-513
- Free Testking 642-532
- Free Testking 646-202




