ENARSI 3.0 Infrastructure Security (20%)¶
Infrastructure Security is a troubleshoot domain, with one describe objective (IPv6 first hop security). Expect exhibits: a method list and a login symptom, show access-lists counters, a uRPF drop counter beside a routing table, or show policy-map control-plane output where one protocol has landed in the wrong class. Your job is to find the single line that is wrong. Learn what healthy output looks like so the fault stands out.
| Objective | Verb | Page |
|---|---|---|
| 3.1 Device security using IOS AAA: TACACS+, RADIUS, local database, method lists and fallback | Troubleshoot | AAA |
| 3.2.a IPv4 access control lists: standard, extended, time-based | Troubleshoot | ACLs and IPv6 traffic filters |
| 3.2.b IPv6 traffic filter | Troubleshoot | ACLs and IPv6 traffic filters |
| 3.2.c Unicast reverse path forwarding (uRPF) | Troubleshoot | uRPF |
| 3.3 Control plane policing (CoPP): Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP | Troubleshoot | CoPP |
| 3.4 IPv6 first hop security: RA guard, DHCP guard, binding table, ND inspection and snooping, source guard | Describe | IPv6 First Hop Security |
Time budget: week 20 of the study plan. A workable split is AAA on days 1 and 2, ACLs and uRPF on days 3 and 4, CoPP on day 5, IPv6 first hop security and the quiz on day 6, and the break/fix labs plus Sim 11 on day 7.
Every page has a break/fix lab. Build the baseline, save it, inject the faults, and prove each one with show output before fixing it. The faults in these labs are the ones exam exhibits are built around: an AAA lockout, an ACL with the wrong name or direction, strict uRPF on an asymmetric link, and CoPP dropping OSPF.
Related practice¶
- Sim 11: Infrastructure security: CoPP, uRPF and AAA, a three-fault trouble ticket
- Diagram library: N25 AAA method list fallback, N26 uRPF strict vs loose, N27 CoPP classes, N28 RA guard and DHCPv6 guard, N29 ACL placement
- ENARSI question bank part 2, questions 56 to 75
When you finish, take the Infrastructure Security practice questions. Aim for 80% or better before moving on.
Unlock the full question banks and cram sheets
A free account opens every question bank, the timed practice exams, the printable cram sheets, all the simulations and the lab files. Without one you see a 5-question sample of each.
No card needed. Study tips by email are optional and off unless you tick the box. Your address is never sold or shared. Privacy policy ยท Terms
Signed in as . Your account
You're on the free account, so lessons after the first module, question banks, exams and cram sheets show a sample. See Track Pass and All-Access
Also from NetManager Systems: NetManager, network monitoring for multi-vendor networks. Try the NetManager, NetDiag, PCAP Analyzer and OpsDash demos: every new account gets a free 7-day read-only login to each.