CCNA Security Chapter 2 Quiz

Chapter 2: Securing Network Devices

• This chapter focuses on securing network devices, specifically Cisco routers.
• The CCNA Security v2.0 curriculum is being used.
• Dr. Nadhir Ben Halima is the instructor.
• The course follows a structured chapter outline, covering topics from introduction to summary.

Chapter Outline

• The chapter is organized into subsections, including:
  • Introduction
  • Securing Device Access
  • Assigning Administrative Roles
  • Monitoring and Managing Devices
  • Using Automated Security Features
  • Securing the Control Plane
  • Summary

Section 2.1: Securing Device Access

• Upon completion of this section, students should be able to explain securing a network perimeter, configure secure administrative access to Cisco routers, configure enhanced security for virtual logins, and configure an SSH daemon for secure remote management.

Topic 2.1.1: Securing the Edge Router

• This section focuses on edge router security.
• Approaches outlined include:
  • Single Router Approach
  • Defense in Depth Approach
  • DMZ Approach
  • IP addresses are given for LAN 1 (e.g., 192.168.2.0)

Three Areas of Router Security

• Physical Security
• Router Operating System and Configuration File Security
• Router Hardening

Secure Administrative Access

• Tasks for securing administrative access include:
  • Restricting device accessibility
  • Logging and accounting for all access
  • Authenticating access
  • Authorizing actions
  • Presenting legal notification
  • Ensuring data confidentiality

Secure Local and Remote Access

• Diagrams illustrate local access methods (vty, console, aux ports) and remote access using Telnet/SSH, and modem/aux port. Different types of local and remote connections are shown.

Topic 2.1.2: Configuring Secure Administrative Access

• This section details techniques for configuring secure administrative access, including strong password guidelines.

Strong Passwords

• Strong passwords are crucial and include:
  • Length of 10 or more characters
  • Mix of uppercase and lowercase letters, numbers, symbols, and spaces
  • Avoiding passwords based on easily identifiable information
  • Deliberately misspelling words as passwords
  • Changing passwords frequently
  • Avoiding writing down passwords in obvious places
  • Examples of weak and strong passwords are provided.

Increasing Access Security

• Demonstrates configuring password encryption and setting timeouts for console and vty lines. Specific configuration commands are given (e.g., security passwords min-length 10, service password-encryption).

Secret Password Algorithms

• Describes configuring different password types (type 8 and type 9). Syntax for enabling unencrypted passwords is provided (e.g., enable algorithm-type {md5|scrypt|sha256}).

Securing Line Access

• Provides commands for securing console, aux, and vty lines (e.g., disabling passwords, enabling SSH). Specific commands are shown (e.g., username Bob algorithm-type scrypt secret cisco54321).

Topic 2.1.3: Configuring Enhanced Security for Virtual Logins

• This section discusses enhancements to virtual login security.

Enhancing the Login Process

• Enhancements for virtual login security include:
  • Implementing delays between successive login attempts
  • Enabling login shutdown if DoS attacks are suspected
  • Generating system-logging messages for login detection

Enable Login Enhancements

• Includes commands for login delay, preventing excessive login attempts, and setting time limits for login attempts. Example commands are given (e.g., login block-for 120 attempts 5 within 60, login delay 3).

Logging Failed Attempts

• Shows examples of generating login syslog messages. Example commands are provided (login on-success log [every login], security authentication failure rate threshold-rate log).

Topic 2.1.4: Configuring SSH

• Describes steps for configuring SSH access. This includes key generation, and using the show crypto key command to verify key details.

Steps for Configuring SSH

• Details the process of creating and using SSH configuration.
• Includes the 'show crypto key' command and checking if SSH 1.99 is enabled.

Connecting to an SSH-Enabled Router

• Describes how to connect, either as a server or a client using SSH. Supported client tools are mentioned (e.g., PuTTY, OpenSSH, TeraTerm).

Section 2.2: Assigning Administrative Roles

• Upon completing this section, students should be able to configure administrative privilege levels and role-based CLI access to control command availability.

(and so on, continuing with the rest of the existing study notes, each section updated with details and additional information)