CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

b,d

a,e

a

d

b

b,d

b,c,e

a

b,e

What modules are found within the small network design?

Corporate Internet module

Campus module

Where are private VLANs used in the small network design?

On the public services segment

Optionally within the Campus module

What two security devices can be used in the Corporate Internet module to connect to the ISP module?

Firewall

Cisco IOS Firewall router

Where would you use intrusion detection in the small network design?

A host-based IPS is used on servers located on the public services segment and can also be used on corporate internal servers, if required.

It is also possible to use a limited form of an NIDS with the PIX Firewall or Cisco IOS Firewall router.

VPN functionality is provided by what devices in the small network design?

Firewall

Cisco IOS Firewall router

It is also possible to place a dedicated VPN device, such as the Cisco VPN 3000 Series Concentrator, if desired.

The Corporate Internet module connects to which modules?

ISP module

Campus module

What are the two configuration types available in the small network design?

Headend or standalone configuration

Branch configuration

The Campus module provides functionality to what components?

Corporate servers

Corporate users

Management server

Layer 2 switch

Because no Layer 3 services are available in the Campus module, an increased emphasis is placed on ___________ and ____ security.

Application, host

What is a common design deviation in the Corporate Internet module?

To use dedicated devices to provide the functional components of the module rather than having the functionality in a single box.

The Corporate Internet module provides what services?

Internet, corporate public servers, VPN connectivity