CCNA 200-301 v1.1 — Domain 5.0 — 15% of exam

Domain 05: Security Fundamentals

AAA, WPA2/WPA3, ACLs, DHCP snooping, DAI, port security, VPN basics.

10 Total Lessons
10 Live Now
15% of exam Exam Weight
Domain Progress 10 of 10 live

Lessons in This Domain

Click any live lesson to start reading. New lessons added weekly.

Live Coming Soon
Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques) 1 ✅ Live
Read Lesson

Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)

CCNA 200-301 · Read now →
Describe security program elements (user awareness, training, and physical access control) 2 ✅ Live
Read Lesson

Describe security program elements (user awareness, training, and physical access control)

CCNA 200-301 · Read now →
Configure and verify device access control using local passwords 3 ✅ Live
Read Lesson

Configure and verify device access control using local passwords

CCNA 200-301 · Read now →
Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics) 4 ✅ Live
Read Lesson

Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)

CCNA 200-301 · Read now →
Describe IPsec remote access and site-to-site VPNs 5 ✅ Live
Read Lesson

Describe IPsec remote access and site-to-site VPNs

CCNA 200-301 · Read now →
Configure and verify access control lists 6 ✅ Live
Read Lesson

Configure and verify access control lists

CCNA 200-301 · Read now →
Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security) 7 ✅ Live
Read Lesson

Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)

CCNA 200-301 · Read now →
Compare authentication, authorization, and accounting concepts 8 ✅ Live
Read Lesson

Compare authentication, authorization, and accounting concepts

CCNA 200-301 · Read now →
Describe wireless security protocols (WPA, WPA2, and WPA3) 9 ✅ Live
Read Lesson

Describe wireless security protocols (WPA, WPA2, and WPA3)

CCNA 200-301 · Read now →
Configure and verify WLAN within the GUI using WPA2 PSK 10 ✅ Live
Read Lesson

Configure and verify WLAN within the GUI using WPA2 PSK

CCNA 200-301 · Read now →

Module 5 Summary and Common Pitfalls

→ Every ACL has an implicit deny at the end, even though it's never visible in the running configuration — this single fact explains a huge share of real-world "why isn't my traffic passing" troubleshooting scenarios.
→ Standard ACLs near the destination, extended ACLs near the source — remember this placement guidance as a design principle, not just a rule to memorize.
→ DHCP snooping, DAI, and port security work together but solve distinct problems: rogue DHCP servers, ARP spoofing, and unauthorized device connections, respectively.
→ TACACS+ (whole-packet encryption, separates AAA steps, device admin) vs. RADIUS (password-only encryption, combines steps, network access) is one of the most reliably tested direct comparisons in this domain.
→ WPA3's SAE handshake specifically closes the offline dictionary attack vulnerability in WPA2-PSK — know this as the headline improvement, not just "WPA3 is newer and better." Content How Routers Make Forwarding Decisions — CCNA 3.2 2 module-4-ip-services.md 179 lines MD module-5-security-fundamentals.md 154 lines MD
Back to CCNA Study Guide
📡

Ready to test yourself?

Practice 10 domain-specific questions with timer, scoring, and explanations.

Take Practice Exam →
Subscribe
Subscribe