Exam Essentials

Describe a DoS attack. A denial-of-service attack is a flood of packets that are requesting a TCP connection to a server.

Know what the first part of a comprehensive network security plan is. The first part of your comprehensive network security plan is to physically secure network equipment from potential access by unauthorized individuals.

List the recommended ways of protecting network devices from outside network security threats. Use a firewall to restrict access from the outside to the network devices, and use SSH or another encrypted and authenticated transport to access device configurations.

Know the command placed under the VTY lines to enable SSH. The command to enable SSH on your router and switch under the VTY lines is transport input ssh.

Remember the switchport port-security commands. Switch port security is very important on the CCENT exam. You must remember how to enable switch port security, the options you can configure, and why you'd use switch port security.