Pi's Website - Archived

3.1 Understand security concerns and concepts of the following types of devices

o Firewalls
o Routers
o Switches
o Wireless
o Modems
o RAS (Remote Access Server)
o Telecom / PBX (Private Branch Exchange)
o VPN (Virtual Private Network)
o IDS (Intrusion Detection System)
o Network Monitoring / Diagnostics
o Workstations
o Servers
o Mobile Devices

3.2 Understand the security concerns for the following types of media

o Coaxial Cable
o UTP / STP (Unshielded Twisted Pair / Shielded Twisted Pair)
o Fiber Optic Cable
o Removable Media

o Tape
o CD-R (Recordable Compact Disks)

o Hard Drives
o Diskettes
o Flashcards
o Smartcards 

3.3 Understand the concepts behind the following kinds of Security Topologies

o Security Zones

o DMZ (Demilitarized Zone)
o Intranet
o Extranet

o VLANs (Virtual Local Area Network)
o NAT (Network Address Translation)
o Tunneling

3.4 Differentiate the following types of intrusion detection, be able to explain the concepts of each type, and understand the implementation and configuration of each kind of intrusion detection system

o Network Based

o Active Detection
o Passive Detection

o Host Based

o Active Detection
o Passive Detection

o Honey Pots
o Incident Response

3.5 Understand the following concepts of Security Baselines, be able to explain what a Security Baseline is, and understand the implementation and configuration of each kind of intrusion detection system

o OS / NOS (Operating System / Network Operating System) Hardening

o File System
o Updates (Hotfixes, Service Packs, Patches)

o Network Hardening

 

• Updates (Firmware) 
• Configuration

•  Enabling and Disabling Services and Protocols 
• Access Control Lists

o Application Hardening

• Updates (Hotfixes, Service Packs, Patches)
• Web Servers
• E-mail Servers
• FTP (File Transfer Protocol) Servers
• DNS (Domain Name Service) Servers
• NNTP (Network News Transfer Protocol) Servers
• File / Print Servers
• DHCP (Dynamic Host Configuration Protocol) Servers
• Data Repositories

• Directory Services
• Databases