• Define security terminology, explain the purpose and goals of network security policies, and outline various security threats.
• Understand the need for authentication and the development of authentication devices including Kerberos, CHAP, digital certificates, tokens, biometrics, mutual authentication, and multi-factor authentication.
• Identify the major types of attacks and malicious codes that commonly affect the confidentiality, integrity, and availability of networks; and discuss the business impact of security along with the countermeasures and best practices used to prevent or mitigate the effect of attacks and malicious codes.
• Understand the concepts and practices of remote access, including commonly used authentication protocols (IEEE 802.1X, RADIUS and TACACS+) and tunneling technologies (PPTP, L2TP, IPSec and Secure Shell).
• Discuss e-mail vulnerabilities and how to safeguard against them, and the benefits of PGP and S/MIME.
• Discuss Web security including SSL/TLC protocols; HTTPS as it relates to SSL; and the variety of mainstream Web tools such as JavaScript, Buffer Overflow, ActiveX, Cookies, Applets and SMTP that are commonly exploited by attackers on the Internet.
• Explain the benefits offered by centralized enterprise directory services such as LDAP over traditional authentication systems; discuss FTP vulnerabilities and alternatives to using FTP; and describe the threat posed to a network by unmonitored file shares.
• Identify aspects of security pertaining to wireless and instant messaging; explain WTLS and IEEE 802.11x vulnerabilities, site surveys, naming conventions and packet switching.
• Discuss the role of all major networking devices, including routers, switches, and firewall technology, in establishing a secure network; explain VPN and RAS technologies, discuss intrusion detection systems and perform network monitoring.

Prerequisites: A+ and Network+ certifications, or equivalent knowledge, and six to nine months experience in networking, including experience configuring and managing TCP/IP.

For more information about this program contact: Kristy Anthony, Program Manager.