Curriculum topic
Security
FullAccess control lists, stateful filtering, port-based rules, segmentation, device access control and common attack types.
- lesson
- 7 lessons
- quiz
- 5 quizzes
- question
- 18 questions
- lab
- 21 labs
Taught, assessed and practised in a lab.
Why this matters
Writing a rule is easy; scoping it correctly and verifying it in both directions is the skill, and it is where ACLs go wrong.
Learn
Modules covering this topic
7 lessons on this topic, sequenced inside these modules alongside their quizzes and labs.
- Diagnosis in practiceNetwork operations and design
- Monitoring and file transferNetwork operations and design
- Direction and stateNetwork security and acls
- Filtering by addressNetwork security and acls
- Filtering by serviceNetwork security and acls
- Least privilege in practiceNetwork security and acls
- Protecting the devicesNetwork security and acls
- Security foundationsNetwork security and acls
- Translation and publishingNetwork services
- Layers and protocolsNetworking fundamentals
- Nat and aclsNetworking fundamentals
Practice
Hands-on labs
Real virtual networks with device consoles, graded automatically. Addressing is regenerated on every attempt.
- ACL Fundamentals - Block a Single Host #1
- ACL: Block a Whole Subnet #1
- ACL Fundamentals - Implicit Deny #1
- Egress Filter on the Records Server
- Permit One Service, Not One Host
- ACL Stateful Return Traffic
- The Firewall That Never Saw the Request
- Slow, Not Broken
- DHCP Hands Out the Wrong Gateway
- The Config Backup Server Everyone Can Reach
- Segment the Guest Network
- Publish Server Port Forwarding
- Overly Broad Firewall Rule
- Contractor Limited Access
- Web Tier Bypasses App Tier
- Audit IoT VLAN Internet Scope
- Lock Down Management Access
- Finance Subnet Default Deny
- Divested Business Firewall Separation
- One Server, Wrong Exit Interface
- Allow Access to Wiki Replica
Assess
Graded quizzes
18 graded questions across 5 quizzes, taken inside the modules above. Wrong answers explain the specific misconception behind the option you chose.
Review
Spaced repetition
Security is tracked on the review ladder. Once you have answered a question on it, it comes back on a schedule that stretches as you keep getting it right - and resets if you don't. See your review queue.
Certification
Exam objectives this topic covers
- 1.5 Compare TCP to UDP
- 4.1 Configure and verify inside source NAT using static and pools
- 4.6 Configure and verify DHCP client and relay
- 4.8 Configure network devices for remote access using SSH
- 4.9 Describe the capabilities and function of TFTP/FTP in the network
- 5.1 Define key security concepts (threats, vulnerabilities, exploits, mitigation)
- 5.2 Describe security program elements
- 5.3 Configure and verify device access control using local passwords
- 5.4 Describe security password policies elements
- 5.6 Configure and verify access control lists
- 1.4 Explain common networking ports, protocols, services, and traffic types
- 3.5 Compare and contrast network access and management methods
- 4.1 Explain the importance of basic network security concepts
- 4.2 Summarize various types of attacks and their impact to the network
- 4.3 Given a scenario, apply network security features, defense techniques, and solutions
- 4.3 Apply network security features, defense techniques, and solutions
- 5.3 Troubleshoot common issues with network services
- 5.4 Given a scenario, troubleshoot common performance issues
- 5.5 Given a scenario, troubleshoot and resolve general networking issues