Continuous network monitoring is instrumental in obtaining peak performance. Explore monitoring concepts, including event logs, alerts, and patch management. Also, discover remote access methods, such as VPNs, RDP, SSH, VNC, and telnet.
Learning Objectives
Scanning, Monitoring, and Patching
- start the course
- describe common processes such as log reviewing, port scanning, and vulnerability scanning
- describe common maintenance tasks such as patch management, rollback, reviewing baselines, and packet/traffic analysis
- describe common event management processes such as notifications, alerts, and SIEM
- recognize and describe common SNMP monitor processes such as MIB
- describe common metrics such as error rate, utilization, packet drops, and bandwidth/throughput
Practice: Maintenance and Monitoring
- implement patch management, event monitoring, and notifications
Remote Access Methods
- use a VPN including IPsec, SSL/TLS/DTLS, site-to-site, and client-to-site in a scenario
- use RDP in a scenario
- use SSH in a scenario
- use VNC in a scenario
- use telnet in a scenario
- use an HTTPS management URL in a scenario
- use remote file access such as FTP/FTPS, SFTP, and TFTP
- use out-of-band management such as a modem or console router
Practice: Configuring Remote Access
- configure remote access methods in a given scenario
Framework Connections
Specialty Areas
- Cyber Defense Analysis
- Network Services
- Systems Administration
- Technology R&D
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.