NLI’s Study Guide for the Cisco CCIE Security Written Exam

(1)

(2)

NLI’s Study Guide for the Cisco CCIE Security Written Exam Authors: Colby LeMaire, Farrukh Haroon, and Brad Ellis

Published by:

Network Learning Inc (Cisco Learning Partner) 1997 Whitney Mesa Dr

Henderson, NV 89014 USA

All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review.

Printed in the United States of America

First printing August 2006 ISBN: 1-931881-17-0 UPC: 82251881170

Warning and Disclaimer

This book is designed to provide information the Cisco Security written exam.

Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied.

The information is provided on an “as is” basis. The authors, editors, and Network Learning Inc., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the

information contained in this book or from the use of the discs or programs that may accompany it.

The opinions expressed in this book belong to the author and are not necessarily those of Network Learning Inc.

Trademark Acknowledgements

All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Network Learning Inc. cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

(3)

Feedback Information

At Network Learning Inc, our goal is to create advanced technical material of the highest quality and value. Each book is authored with attention to detail,

undergoing strenuous development that involves input from a variety of technical experts.

For technical support on this book, please visit: www.securityie.com

Readers’ feedback is a natural part of this process. If you have any comments regarding how we could improve the quality of our materials, or otherwise change it to better suit your needs, you can contact us through e-mail at [email protected]. Please make sure to include the book title and ISBN number in your message. Also, feel free to visit our website:

www.ccbootcamp.com for information on many more great products!

Thank you for your input

(4)

About the contributors:

Author – Colby LeMaire

Colby LeMaire (CCIE #12968, CISSP, CCDP, CCNP, MCSE, MCDBA) is a Network Consulting Engineer with Cisco Systems. He has over 12 years of experience in networking and security with most of that time spent with the Department of Defense and other Government agencies. He holds a BS degree in Computer Information Systems and has most recently focused on Network Management and Security projects.

Author – Farrukh Haroon

Farrukh Haroon (CCDA, CCSP, CARLSS, CSEP) is a network engineer currently employed with a Cisco Systems Silver Partner in the Middle East. Farrukh is currently focussing on network security and is preparing for his CCIE Security Lab Exam.

Author – Brad Ellis

Brad Ellis (CCIE #5796, CCSI #30482, CSS1, CCDP, CCNP, MCNE, MCSE) works as a network engineer and is CEO of Network Learning Inc. He has been

dedicated to the networking industry for over 12 years. Brad has worked on large scale security assessments and infrastructure projects. He is currently focusing his efforts in the security and voice fields. Brad is a dual CCIE (R&S / Security) #5796.

(5)

(this page intentionally left blank)

(6)

i

NLI’s Study Guide for the Cisco CCIE Security Written Exam

About the contributors:

Table of Contents

Chapter 1 Security Protocols ... 1

Table of Contents (Continued)

Table of Contents (Continued)

Chapter 2 Application Protocols... 91

Chapter 3 General Networking ... 118

Table of Contents (Continued)

Chapter 4 Security Technologies ... 201

Table of Contents (Continued)

Table of Contents (Continued)

Chapter 5 Security Applications... 289

Table of Contents (Continued)

Table of Contents (Continued)

Chapter 6 Security General... 432

Chapter 7 Cisco General ... 461

Table of Contents (Continued)