CCNP Security IPS 642-627 Official Cert Guide

CCNP Security IPS 642-627 Official Cert Guide is a best-of-breed Cisco exam study guide that focuses specifically on the objectives for the CCNP Security IPS exam. Senior security engineers David Burns, Odunayo Adesina, and Keith Barker share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

CCNP Security IPS 642-627 Official Cert Guide presents you with an organized test-preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

The companion CD-ROM contains the powerful Pearson IT Certification Practice Test engine that enables you to focus on individual topic areas or take a complete, timed exam. The assessment engine also tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most.

Well-regarded for its level of detail, assessment features, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

CCNP Security IPS 642-627 Official Cert Guide is part of a recommended learning path from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

The official study guide helps you master all the topics on the CCNP Security IPS exam, including

• Cisco IPS software, hardware, and supporting applications
• Network IPS and IDS deployment architecture
• Installing and maintaining Cisco IPS physical and virtual sensors
• Traffic analysis
• IPS signatures and responses
• Anomaly-based operations
• Improving alarm response and quality
• Managing and analyzing events
• High availability and performance
• IPS modules for ASAs, routers, and switches

Table of Contents

Part I: Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices
Chapter 1 Intrusion Prevention and Intrusion Detection Systems
Chapter 2 Cisco IPS Software, Hardware, and Supporting Applications
Chapter 3 Network IPS Traffic Analysis Methods, Evasion Possibilities, and Anti-evasive Countermeasures
Chapter 4 Network IPS and IDS Deployment Architecture

Part II: Installing and Maintaining Cisco IPS Sensors
Chapter 5 Integrating the Cisco IPS Sensor into a Network
Chapter 6 Performing the Cisco IPS Sensor Initial Setup
Chapter 7 Managing Cisco IPS Devices

Part III: Applying Cisco IPS Security Policies
Chapter 8 Configuring Basic Traffic Analysis
Chapter 9 Implementing Cisco IPS Signatures and Responses
Chapter 10 Configuring Cisco IPS Signature Engines and the Signature Database
Chapter 11 Deploying Anomaly-Based Operation

Part IV: Adapting Traffic Analysis and Response to the Environment
Chapter 12 Customizing Traffic Analysis
Chapter 13 Managing False Positives and False Negatives
Chapter 14 Improving Alarm and Response Quality

Part V: Managing and Analyzing Events
Chapter 15 Installing and Integrating Cisco IPS Manager Express with Cisco IPS Sensors
Chapter 16 Managing and Investigating Events Using Cisco IPS Manager Express
Chapter 17 Using Cisco IPS Manager Express Correlation, Reporting, Notification, and Archiving
Chapter 18 Integrating Cisco IPS with CSM and Cisco Security MARS
Chapter 19 Using the Cisco IntelliShield Database and Services

Part VI: Deploying Virtualization, High Availability, and High-Performance Solutions
Chapter 20 Using Cisco IPS Virtual Sensors
Chapter 21 Deploying Cisco IPS for High Availability and High Performance

Part VII: Configuring and Maintaining Specific Cisco IPS Hardware
Chapter 22 Configuring and Maintaining the Cisco ASA AIP SSM Modules
Chapter 23 Configuring and Maintaining the Cisco ISR AIM-IPS and NME-IPS Modules
Chapter 24 Configuring and Maintaining the Cisco IDSM-2

Part VIII: Final Exam Preparation
Chapter 25 Final Preparation

Part IX: Appendixes
Appendix A: Answers to the “Do I Know This Already?” Quizzes
Appendix B: CCNP Security IPS 642-627 Exam Updates, Version 1.0