We're so confident of our products that we provide no hassle product exchange.
Cisco 640-553 Exam Overview:
| Certification Vendor: | Cisco |
|---|---|
| Exam Name: | Implementing Cisco IOS Network Security (IINS) |
| Exam Number: | 640-553 |
| Real Exam Qty: | 55-65 |
| Available Languages: | English |
| Related Certifications: | CCNA Security |
| Exam Format: | Multiple Choice, Configuration-Based Questions, Simulation |
| Exam Duration: | 90 minutes |
| Sample Questions: | Cisco 640-553 Sample Questions |
| Exam Way: | Computer-based exam delivered at authorized Cisco/Pearson VUE testing centers. |
| Pre Condition: | Valid CCNA certification was recommended/required for earning the CCNA Security certification associated with this exam. |
| Official Syllabus URL: | https://learningnetwork.cisco.com/ |
Cisco 640-553 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Secure Cisco Routers | - Secure routers using SDM Security Audit - Configure privilege levels and role-based CLI - Protect Cisco IOS image and configuration files - Secure administrative access with passwords and login enhancements - Use One-Step Lockdown |
| Implement Secure Network Management and Reporting | - Configure SSH for secure management - Configure Syslog reporting |
| Mitigate Common Layer 2 Attacks | - Configure basic Catalyst switch security features |
| Mitigate Threats Using Access Control Lists | - Explain standard, extended, and named ACLs - Identify ACL design considerations - Configure and verify ACLs to mitigate threats - Prevent IP address spoofing using ACLs |
| Implement AAA on Cisco Routers | - Configure AAA authorization - Describe TACACS+ and RADIUS features - Configure AAA authentication - Configure AAA accounting - Explain the functions and importance of AAA |
| Implement Site-to-Site VPNs | - Explain IKE functionality and phases - Configure and verify IPsec site-to-site VPNs with pre-shared keys - Describe IPsec building blocks and security functions - Explain cryptographic methods |
| Implement Cisco IOS IPS Features | - Differentiate network-based and host-based intrusion prevention - Explain IPS technologies and monitoring options - Enable and verify Cisco IOS IPS using SDM |
| Implement Cisco IOS Firewall Features | - Implement Zone-Based Firewall using SDM - Explain stateful firewall operations - Describe firewall technologies |
By Bertram
