CSIDS Exam Cram 2 (Exam Cram 623-531)

Description

Your resource to passing the Cisco CCSP CSIDS Certification Exam!

Join the ranks of readers who have trusted Exam Cram 2 to their certification preparation needs! The CCSP CSIDS Exam Cram 2 (Exam 642-531) is focused on what you need to know to pass the CCSP CSI exam. The Exam Cram 2 Method of Study provides you with a concise method to learn the exam topics. The book includes tips, exam notes, acronyms and memory joggers in order to help you pass the exam.

Included in the CCSP CSIDS Exam Cram 2:

• A tear-out "Cram Sheet" for last minute test preparation.
• Covers the current exam objectives for the 642-821 exam.
• The PrepLogic Practice Tests, test engine to simulate the testing environment and test your knowledge.

Trust in the series that has helped many others achieve certification success - Exam Cram 2.

Back Cover

Your resource to passing the Cisco CCSP CSIDS Certification Exam!

Join the ranks of readers who have trusted Exam Cram 2 to their certification preparation needs! The CCSP CSIDS Exam Cram 2 (Exam 642-531) is focused on what you need to know to pass the CCSP CSI exam. The Exam Cram 2 Method of Study provides you with a concise method to learn the exam topics. The book includes tips, exam notes, acronyms and memory joggers in order to help you pass the exam.

Included in the CCSP CSIDS Exam Cram 2:

• A tear-out "Cram Sheet" for last minute test preparation.
• Covers the current exam objectives for the 642-821 exam.
• The PrepLogic Practice Tests, test engine to simulate the testing environment and test your knowledge.

Trust in the series that has helped many others achieve certification success - Exam Cram 2.

Contents


Introduction.


Self-Assessment.


1. Introduction to Cisco Certification.
The Exam Situation. Exam Layout and Design. Using Cisco's Exam Software Effectively. Exam-Taking Basics. Question-Handling Strategies. Mastering the Inner Game. Additional Resources.

2. Introduction to Network Security.
The Need for Network Security. Network Security Policy. Cisco Security Wheel. Attack Types. Attack Tools and Methods (Attack Taxonomy). Summary. Exam Prep Questions. Need to Know More?

3. Intrusion Detection Overview.
IDS Triggers. Attack Response. Intrusion Detection Evasive Techniques. Cisco Secure IDS Environment. Cisco IDS Communication Overview. Summary. Exam Prep Questions. Need to Know More?

4. Capturing Network Traffic for Intrusion Detection Systems.
Traffic Capture Overview. Configuring SPAN for the Catalyst 2900XL, 3500XL, 2950, and 3550 Switch. Series. Configuring SPAN for Catalyst 4000, 4500, and 6500 Series Switches. Configuring Remote SPAN (RSPAN) for Catalyst 4000 and 6500. Configuring VACLs for Catalyst 6500 Traffic Capture. Using the mls ip ids Command for Catalyst 6500 Traffic Capture. Advanced Traffic Capture Configurations for the Catalyst 6500. Summary. Exam Prep Questions. Need to Know More?

5. Cisco IDS Architecture and Communications Protocols.
Cisco IDS Software Architecture. Cisco IDS Communications. Sensor User Accounts. Summary. Exam Prep Questions. Need to Know More?

6. Sensor Appliance Installation.
Sensor Placements. Cisco IDS Sensor Appliances. Cisco IDS Sensor Modules. Upgrading Sensors to IDS 4.0 Preparations. Upgrading Sensors to IDS 4.0. Cisco IDS Sensor Initialization. Summary. Exam Prep Questions. Need to Know More?

7. Cisco IDS Navigation and General Configuration Using the Command-Line Interface.
Accessing the CLI. Command CLI Features and Navigation Options. CLI Modes. Interface Configuration Modes (Level 3). Services Mode Configurations (Level 3). Practice Labs. Summary. Exam Prep Questions. Need to Know More?

8. Command-Line Interface Commands.
Current-Config and Backup-Config Files. Knowing the Basic Commands. User Account and Privilege Levels. User Commands. Show Commands. SSH Commands. IP Logging. Summary. Exam Prep Questions. Need to Know More?

9. Cisco IDS Signatures, Alarms, and Signature Series.
Cisco IDS Signatures. Cisco IDS Alarms. Cisco IDS Signature Engines. Signature Engine Selection. Summary. Exam Prep Questions. Need to Know More?

10. Global Sensing and Signature Configuration.
Global Sensing Configuration. Accessing Signatures Through Signature Groups. Signature Configuration and Tuning. Summary. Exam Prep Questions. Need to Know More?

11. IP Blocking Configuration.
Blocking Terminology. Blocking Devices, Requirements, and Guidelines. ACL Considerations. Blocking Sensor Configuration. Master Blocking Configuration. Summary. Exam Prep Questions. Need to Know More?

12. Cisco IDS Maintenance.
Cisco Secure IDS Maintenance. Software Updates. Sensor Maintenance. Summary. Exam Prep Questions. Need to Know More?

13. Monitor a Cisco IDS Protection Solution for Small and Medium. Networks Using Cisco IDM and Cisco IEV.
Cisco IDM and IEV Overview. Cisco IDM. Features and Benefits of IEV. Installing IEV Software and Configuring It to Monitor IDS Devices. Creating Custom IEV Views and Filters. Navigating IEV to View Alarm Details. NSDB. IEV Filters. Performing IEV Database Administration Functions. Configuring IEV Application Settings and Preferences. Summary. Exam Prep Questions. Need to Know More?

14. Enterprise IDS Management with the Cisco IDS Management Center for VMS.
Architecture. Installation. Getting Started. IDS Sensor Device and Sensor Groups. IDS Configuration. Deploying Sensor Configurations. Summary. Exam Prep Questions. Need to Know More?

15. Enterprise IDS Monitoring with the Cisco Security Monitor for VMS.
Installation. Getting Started. Configuring Security Monitor. Security Monitor Event Viewer. Reporting and Administration. Summary. Exam Prep Questions. Need to Know More?

16. Practice Exam 1.


17. Answer Key for Practice Exam 1.


18. Practice Exam 2.


19. Answer Key for Practice Exam 2.


Appendix A: Resources.


Appendix B: What's on the CD-ROM?
Using PrepLogic Practice Exams, Preview Edition. Exam Simulation. Question Quality. Interface Design. Effective Learning Environment. Software Requirements. Installing PrepLogic Practice Exams, Preview Edition. Using PrepLogic Practice Exams, Preview Edition. Get More Exams. Customer Service.

Glossary.


Index.

Author

Daniel P. Newman has been in the computer industry for more than 11 years, working as a consultant, systems integrator, programmer, development manager, and technical trainer for projects all over the world. As a systems integrator, Daniel has implemented several computer and network solutions to a wide variety of industries, ranging from titanium plants, diamond mines, robotic-control systems, and secure Internet banking. The exposure to countries such as Australia, Brazil, Canada, Chile, Malaysia, New Zealand, the United States, and the United Kingdom has given him expertise in presenting and implementing computer network solutions despite various cultural challenges and language barriers. Daniel is currently working as a senior technical trainer for Cisco and Microsoft products. He holds the following certifications: CCNP, CCDA, CSS1, CCSP, INFOSEC, MCSA, MCSE, MCDBA, MCT, A+, Network+, I-Net+, Server+, Security+, and Linux+. Daniel has also authored the Cisco PIX Firewall CSPFA 642-521 and has been a technical editor for CSI Safe 642-541 certification books in the CCSP Exam Cram 2 series. In his free time, when he is not trying to learn about the inside details of computing, Daniel enjoys hiking, scuba diving, Tai-Chi, and Aikido.

Kristina Maria Manalo has more than 12 years of experience writing for scientific, business, and information technology audiences. Having supported IT projects as technical writer, systems engineer, project manager, and strategy consultant, Kristina brings both breadth and depth to her work. Drawing from her experience with multinational organizations spanning the academic, pharmaceutical, finance, retail, and telecommunications industries, Kristina's work is both immediate and relevant. Her career in information and communications technology extends from North America to Europe, the Nordic region, North Africa, and Asia Pacific; it embraces both established and emerging terrestrial and wireless network technologies. She has earned certifications as MCSA, CCNA, CCDA, CCNP, Cisco Firewall Specialist, and Cisco IDS Specialist and is currently pursuing her CCSP. In addition to studying literature at Warwick University in Coventry, England, she holds a bachelor's of science degree in molecular biology from the University of Wisconsin-Madison. When she's not busy installing and configuring satellite wide-area networks, Kristina enjoys both technical and nontechnical writing, playing the piano, running, and exploring London and the English countryside.