The firewall protects an internal network from malicious hackers or software on an external network. Firewalls filter potentially harmful incoming or outgoing traffic. Firewalls are used to subdivide internal networks on the Internet. It also protects individual computers. The five services that firewalls provide are packet filtering, application filtering, proxy server, circuit-level, and stateful inspection.

” Packet Filtering: A packet filtering firewall checks each packet crossing the device. It also inspects the packet headers of all network packets going through the firewall.

Source IP Address: It identifies the host that is sending the packet. Attackers can modify this field in an attempt to conduct IP spoofing. Firewalls are configured to reject packets that arrive at the external interface, that is either an erroneous host configuration or an attempt at IP spoofing. Destination IP Address: This is the IP address that the packet is trying to reach.

IP Protocol ID: Each IP header has a protocol ID that follows. For example, Transmission Control Protocol (TCP) is ID 6, User Datagram Protocol UDP) is ID 17, and Internet Control Message Protocol (ICMP) is ID 1.

Fragmentation Flags: Firewalls examine and forward or reject fragmented packets. A successful fragmentation attack can allow an attacker to send packets that could compromise an internal host.

IP Options Setting: This field is used for diagnostics. The firewall is configured to drop network packets that use this field. Attackers can use this field in conjunction with IP spoofing to redirect network packets to their systems.

” Application Filtering: This device will intercept connections and performs security inspections. The firewall acts as a proxy for connections between the internal and external network. The firewall enforce access control rules specific to the application. It is also use to check incoming e-mails for virus attachments. These firewalls are often called e-mail gateways.

” Proxy Server: A proxy server takes on responsibility for providing services between the internal and external network. Proxy server can be used to hide the addressing scheme of the internal network. It can also be used to filter requests based on the protocol and address requested.

” Circuit-Level: A circuit-level firewall controls TCP and UDP ports, but doesn’t watch the data transferred over them. If a connection is established, the traffic is transferred without any further checking.

” Stateful Inspection: An inspection firewall works at the Network layer. It assesses the IP header information. It also monitors the state of each connection. Connections are rejected if they attempt any actions that are not standard for the given protocol. These listed firewall features can be implemented in combination by a given firewall implementation. Placing a lot of firewalls in series is a common practice to increase security at the network perimeter.

Whether you’re preparing to pass the Network+ or Cisco CCNA certification exam or not, you must not underestimate the importance of antivirus programs and virus definition updates. With all the attention we pay to viruses and their prevention, I feel a little silly even saying that. But….

If there’s one thing you must have working at full capacity in your network, it’s the antivirus programs.

If there’s one thing that is commonly overlooked when it comes to updates, it’s the antivirus programs.

In today’s world, your network must be protected from both internal and external antivirus threats. By implementing and executing an aggressive antivirus strategy, you can greatly reduce your network’s chances of being hit with a virus. Literally hundreds of millions of dollars in productivity are lost every year due to virus attacks, along with a few jobs. Make sure both your network and career are protected!

You may be asking yourself what this has to do with the CompTIA Network+ certification exam. To earn this important computer certification, you’ve got to display knowledge of threats to your network and how to stop them – and viruses are at the top of that list.

Before we discuss how to stop viruses, let’s discuss exactly what a virus is. All of the following are bad, but they’re not all viruses.

Just as a human virus is spread through contact, so is a computer virus. A virus is a program that gets onto a computer without a user’s knowledge and then performs an action that can range from mischievous to destructive. For a virus to be spread, there has to be some kind of contact between an infected user and another user – generally, that contact is the forwarding of an email that has an attachment that contains a virus.

A worm is a type of virus, but a worm can spread on its own without any “help” from the infected host. Even worse, a worm can replicate on its own, resulting in many more worms attacking other hosts. A common worm attack involves the worm sending a copy of itself to every single user listed in the infected host’s email address book.

A third, more insidious attacker is the Trojan Horse. In history, the Trojan Horse was presented as a gift to Troy by the Greeks, and it was filled with Greek soldiers who attacked once the Horse was taken inside the city’s defenses. Today’s Trojan Horses attack in much the same fashion. The program installed by the user may look legitimate and innocent, but there’s another program inside just waiting to attack the user’s computer.

It’s a good idea to periodically remind your end users about some basic steps they can take to help prevent unleashing a virus:

Don’t open email attachments from anyone outside the company.

Don’t download software and install it, especially what I call “fun and free” software such as gaming programs, animated cursors, etc. Most of that software is safe, but a minority of those programs contain adware and could unleash a virus on your network.

Don’t open email from anyone you don’t know, especially if the subject line doesn’t make any sense. Just trash it.

End user education is important, but we have to face facts – it’s not perfect. That’s true for virus protection as well as network security. I personally wish I had a dime for every password I’ve seen written on a sticky note that was attached to the monitor! As network admins and engineers, we’ve got to be aggressive in the fight against viruses and not depend on others.

While we should certainly have an antivirus program on every server in our network, there is one point of communication that we’ve got to be particularly sensitive to, since this is where most viruses and worms make their way into our network – the email server.

We’ve got to be particularly vigilant about the email server’s antivirus protection, since this is where users come in contact the email attachments that can lead to so much trouble. When a host is receiving email from an email server, the antivirus program on the client should scan that email even before it’s opened.

Attachments are a major source of viruses, and many networks now have a firewall strip attachments off before they even get to the email server. Firewalls are devices used to filter traffic, and a firewall can be set to remove incoming attachments. If attachments aren’t allowed to enter the network, end users can’t launch them and their potential viral payload.

This common configuration also gives you the option to reject incoming email that has an attachment, along with the option of notifying the sender that the email was filtered for that reason.

Bottom line: every email attachment is a virus threat.

So how do you best protect your network against viruses, Trojan horses, and the like? We’ll discuss that in tomorrow’s CompTIA Network+ certification exam tutorial! Until then, keep studying! ]]> http://www.examdream.com/virus-attacks-and-antivirus-programs-of-comptia-network-certification/1910/feed/ 0 http://www.examdream.com/a-brief-of-comptia-a-certification/1900/ http://www.examdream.com/a-brief-of-comptia-a-certification/1900/#comments Sat, 19 Jun 2010 00:46:25 +0000 admin http://www.examdream.com/?p=1900

For many Information Technology professionals, moving on up the IT certification ladder includes some form of formal network and computer security training. Although this is often not a full fledged certification path, it is quite essential in today’s Internet connected world. A few of these people decide to actually acquire certifications to formally prove to those who have a vested interest that they have passed difficult tests and earned respected credentials by doing so.

The Security+ exam is an excellent introduction into the world of computer and network security. It is a vendor neutral certification. This means it is not tied to one computer or network brand or platform. Once an individual has earned their A+ and Network+ certifications a next logical step is to explore the CompTIA Security+ certification.

If you have the Security+ credential on your resume, prospective employers will see that you are serious about your quest to be a knowledgeable and competent IT professional. The knowledge of computer and network security will benefit not only you, but your employer as well.

As a  networking  professional you will need to have wrapped your brain around some of the fairly complex topics such as a thorough understanding of how a Microsoft server domain infrastructure works, server authentication, server lock down concepts, TCP/IP protocols, DNS, DHCP, MAC addresses, and to some extent packet analysis.

These are all topics you will likely be somewhat familiar with if you already work in an IT security or administrative related position. Most companies are increasing their focus on protecting their business from black hat hackers, and knowing the basics about computer and network security could give you the edge you need in your career.

As far as knowledge goes, you should probably be at the Network+, or MCP on XP Pro level before you begin a Security+ certification training program. You should also have actually worked in a networking role, although this is not required.

There are many excellent technical schools and colleges which offer courses geared toward the CompTIA Security+ objectives. There is also a lot of self-study material available. The self study method will require a good deal of discipline, but it is very possible to accomplish this on your own, and earn the cert.

Once you as a candidate feel you are ready to sit for the exam you will need to schedule an appointment with either a Pearson VUE or Prometric testing facility.

The Computing Technology Industry Association (CompTIA) offers a number of IT certifications that can help you qualify for a well paying job. CompTIA certifications cover a wide variety of disciplines including computer basics, IT security, computer networking, Linux programming, and more. But before you begin your CompTIA study, you should decide which certification best fits your expertise and career goals.

If you are just starting out in the IT industry, then the CompTIA A+ certification is probably right for you. CompTIA A+ certification is designed to demonstrate competency as a computer technician. It covers topics such as installation, preventative maintenance, networking, security and troubleshooting. The exam is also vendor neutral and internationally accepted, so many employers see it as credible evidence of your ability to work with computers. The A+ certification is a stepping stone to more advanced CompTIA certifications, so if you are just starting out in the information technology industry, it’s a must have.

For people more interested in an important and up and coming field, CompTIA Security+ certification is the way to go. This certification proves your ability to manage system security, network infrastructure, and organizational security. Computer security threats are increasing in number and severity, so this certification is in high demand among employers in the business, healthcare, and government sectors. Pursuing a CompTIA Security+ certification is bound to ensure job security for years to come.

Another important CompTIA certification is CompTIA Network+. This certification exhibits competence in managing, maintaining, troubleshooting, installing, and configuring computer network infrastructures. This is especially important for companies with large computer networks connecting hundreds of employees. There is consistent demand for IT networking professionals, so getting your CompTIA Network+ certification is a good next step after you complete your A+ certification.

If you have a passion for open-source technology and some Linux experience under your belt, you should consider pursuing your CompTIA Linux+ certification. This exam covers the management of Linux systems, user administration, file permissions, software configuration, and the management of Linux-based clients. With many companies moving to open-source software as a method to cut costs, qualified Linux professionals are sure to be in high demand. Prove your ability with the right CompTIA certification, and you show potential employers a clear indicator that you are right for the job.

There are many more CompTIA certifications that deal with more specialized fields. You can find more information at CompTIA’s website, Once you decide on a certification, you can prepare for the test by taking CompTIA training classes at a qualified IT training school. Regardless of which CompTIA certification you decide on, you will be obtaining a valuable credential that will help you get a job in the information technology field. Many employers rely on third-party certifications such as the CompTIA exams as a clear indicator of future employee success. Prove your worth with the right certification, and you will have a definite edge in the job market.

Comp TIA certifications are a renowned credential all over the IT industry, validating ground level IT knowledge and skills. Comp TIA provides twelve certification programs in main technology fields. To aid complete the alterations, CompTIA sent out surveys to help in the exam growth process and to describe the substance for the CompTIA A+ Essentials Exam. There were two reviews: one for the future “Essentials” exam necessities and the next for the projected “Technician” exam requirements. All those two surveys talked about the existing draft of the exam needs and asked for an opinion on how essential each topic was, and how frequently a borderline fit candidate would do each task.

The surveys enclosed two of the four obtainable CompTIA A+ exams: CompTIA A+ Essentials and CompTIA IT Technician. Comp TIA A+ Essentials authenticates knowledge of fundamental computer hardware and operating systems. The CompTIA IT Technician exam is besieged for those who work or intend to an effort in a mobile or corporate technical atmosphere with a high point of personally client communication. Those may contribute in both surveys. Because the A+ certification exam will attribute new knowledge requirements, a number of CompTIA A+ certification training would be extremely helpful learning the fresh requirements.

Whereas the existing certification requirement composition was a draft edition that is under construction, some things stood out from the study. The innovative draft was not actually that much diverse from the existing main category domain arrangement, but there were many various fresh technologies registered, like SD cards, TV tuner cards, Blu-ray, DDR3, and Bluetooth. Windows XP, Windows 2000, and Windows Vista were also enrolled as workings, as well as a number of the latest Vista technologies. Some of the elder networking technologies were going down and the newest cabling standards were added, while cellular networking was stated often. The security part was updated to comprise encryption, authentication technologies, and updated biometric technologies.

Because nothing is actually set in stone yet, there is many times stuck between now and the overture of the updated exam needs’ list, but still make known yourself with several of the newest technologies so that you are prepared when the new listing does come out. Having an A+ training course will absolutely help you initiate thinking and learning regarding what you might meet on the new requirements’ catalog, as well as educate you the essentials that never alters on the exam.

CompTIA Certification Programs

CompTIA certifications are a recognized credential throughout the IT industry, validating foundation-level IT knowledge and skills. CompTIA offers twelve certification programs in key technology areas.

CompTIA A+ Certification

CompTIA A+ certification validates the latest skills needed by today’s computer support professionals. It is an international, vendor-neutral certification recognized by major hardware and software vendors, distributors and resellers. CompTIA A+ certification confirms a technician’s ability to perform tasks such as installation, configuration, diagnosing, preventive maintenance and basic networking. The exams also cover domains such as security, safety and environmental issues and communication and professionalism.

CompTIA A+ ensures the right people have the right skills. While many of the essential skills are universal, there are additional skills required to support the needs of businesses. By offering certification options for specific job scenarios, CompTIA A+ gives individuals the ability to grow their careers in a certain area, and employers the flexibility to choose the exam combination that best fits their needs.

CompTIA Network+ Certification

CompTIA Network+ validates the knowledge and skills of networking professionals. It is an international, vendor-neutral certification that recognizes a technician’s ability to describe the features and functions of networking components and to manage, maintain, troubleshoot, install, operate and configure basic network infrastructure. Although not a prerequisite, it is recommended that CompTIA Network+ candidates have at least nine months of experience in network support or administration or adequate academic training, along with a CompTIA A+ certification.

The demand for skilled networking support professionals continues to grow, and CompTIA Network+ is a valuable credential to help launch or enhance a networking career. In fact, many IT certifications integrate CompTIA Network+ into their curriculums. Microsoft added CompTIA Network+ into their Microsoft Certified Systems Administrator (MCSA) program, and other corporations such as Novell, Cisco and HP also recognize CompTIA Network+ as part of their certification tracks.

CompTIA Network+ and Related CompTIA Certifications

CompTIA Network+ prepares networking professionals to earn vendor-neutral certifications in other areas of expertise. CompTIA Network+ certified professionals who want to diversify their base knowledge in other areas should also consider pursuing CompTIA Security+, Server+ or Convergence+.

CompTIA Server+ Certification

CompTIA Server+ validates the knowledge and skills of advanced IT technicians. It is an international, vendor-neutral certification for individuals with 18-24 months of experience with Industry Standard Server Architecture (ISSA) technology. CompTIA Server+ certifies technical knowledge in areas such as RAID, SCSI and multiple CPUs, as well as capabilities with server issues, including disaster recovery. Although not a prerequisite, it is recommended that CompTIA Server+ candidates hold a CompTIA A+ certification.

Many corporations recognize the importance of staffing technicians who can competently perform basic server support. Companies such as CDW Computer Centers and CompuCom value the CompTIA Server+ certification and require it of their IT employees.

CompTIA Security+ Certification

CompTIA Security+ validates knowledge of systems security, network infrastructure, access control, assessments and audits, cryptography and organizational security. It is an international, vendor-neutral security certification that is taught at colleges, universities and commercial training centers around the world.

Although not a prerequisite, it is recommended that CompTIA Security+ candidates have at least two years of on-the-job technical networking experience, with an emphasis on security. The CompTIA Network+ certification is also recommended.

Because human error is the number one cause for a network security breach, CompTIA Security+ is recognized by the technology community as a valuable credential that proves competency with information security.

CompTIA RFID+ Certification

CompTIA Radio Frequency Identification (RFID+) certification validates the knowledge and skills of professionals who work with RFID technology. It is an international, vendor-neutral credential that recognizes a technician’s ability to install, maintain, repair, and troubleshoot the hardware and software functionality of RFID products. Although not a prerequisite, it is recommended that CompTIA RFID+ candidates have a minimum of six to 24 months of RFID or other auto-id technology experience.

RFID is quickly becoming the standard technology for tracking goods in the supply chain, but it will only be effective if it is executed by properly trained and certified individuals. CompTIA RFID+ provides a baseline for the knowledge and skills required of RFID workers, giving business owners the opportunity to hire qualified professionals, and individuals a credential to prove their ability.

CompTIA CTT+ Certification

CompTIA CTT+ (Certified Technical Trainer) certification validates excellence in instruction. It is a vendor-neutral certification that is applicable to training professionals in all industries. CompTIA CTT+ recognizes the mastery of core instructor skills, including preparation, presentation, communication, facilitation and evaluation in both a classroom and virtual classroom environment.

Certified instructors are essential for students who want to receive top-notch training, and employers agree that a professional training staff is valuable to the company. Adobe, Dell, Microsoft, Novell and Ricoh recommend that their trainers be CompTIA CTT+ certified. The Training Associates also look for CompTIA CTT+ certification when hiring trainers.

CompTIA CDIA+ Certification

CompTIA Certified Document Imaging Architech (CDIA+) validates the knowledge of professionals who deliver document imaging solutions. It is a vendor-neutral certification that proves expertise in the technologies and best practices used to plan, design, and specify a document imaging, management system.

CompTIA Linux+ Certification

CompTIA Linux+ is a vendor-neutral certification, generic across distributions, that validates the knowledge of individuals with a minimum of six to 12 months of practical Linux experience. Professionals holding the current CompTIA Linux+ credential can explain fundamental management of Linux systems from the command line, demonstrate knowledge of user administration, understand file permissions, software configurations, and management of Linux-based clients, server systems and security.

Because of the growing popularity of enterprise-ready platforms such as Linux, both employers and professionals realize the importance of skill validation. The industry recognizes that CompTIA Linux+ certification is a good indicator of foundational proficiency in everyday management of Linux-based clients and basic management of server systems.

CompTIA Project+ Certification

CompTIA Project+ is a globally recognized project management certification that provides validation of fundamental project management skills. It covers the entire project life cycle from initiation and planning through execution, acceptance, support and closure. Unlike some project management certifications, CompTIA Project+ can be acquired in a quick and cost-effective manner. There are no prerequisites, and candidates are not required to submit an application or complete additional hours of continuing education.

CompTIA Project+ gives project managers the skills necessary to complete projects on time and within budget, and creates a common project management language among project team members.

CompTIA Convergence+ Certification

CompTIA Convergence+ validates the knowledge and skills in the area of Communications Technologies (CT), where datacomm, telephony/telecommunications, video and broadcast multimedia technologies combine into a single IP-based delivery system. It is an international, vendor-neutral certification that recognizes a technician’s ability to design, implement and manage both data and voice networking. Although not a prerequisite for CompTIA Convergence+ certification, it is recommended that CompTIA Convergence+ candidates are CompTIA Network+ certified and have 18 to 24 months of work experience in areas that include data networking, VoIP, and other convergence related technologies.

The demand for skilled technology professionals with knowledge in convergence technology continues to grow, as more businesses adopt IP Telephony Solutions. CompTIA Convergence+ is a valuable credential to enhance a career with convergence technology. Corporations such as Avaya recognize CompTIA Convergence+ as part of their certification tracks.

CEA-CompTIA DHTI+ Certification

CEA-CompTIA Digital Home Technology Integrator (DHTI+) validates the knowledge and skills of home technology professionals. It is an international, vendor-neutral certification that recognizes a technician’s ability to configure, integrate, maintain, troubleshoot, and comprehend the basic design concepts of electronic and digital home systems. It is recommended that CEA-CompTIA DHTI+ candidates have 18-24 months experience in some area of home integration technology.

CompTIA PDI+ Certification

CompTIA Printing and Document Imaging (PDI+) validates the knowledge and skills necessary to support printing and document imaging devices including printers, copiers, scanners, multi-functional devices and fax machines. It is a vendor-neutral certification that recognizes a technician’s understanding of basic electromechanical components and tools, print engine and scan processes and components, color theory and connectivity/networking. The exam also covers soft skills such as customer service, professionalism, safety and environment. While there are no prerequisites for the CompTIA PDI+ certification exam, it is recommended that entry-level candidates have foundation-level knowledge or hands-on experience working with printing and document imaging devices.

CompTIA PDI+ provides a solid foundation for a career involving the service and support of printing and document imaging devices. Original Equipment Manufacturers (OEMs) and service providers find that CompTIA PDI+ certification ensures that their technicians have the core knowledge and skill sets to provide effective repair activities

The rapid development of the network make the demand of network engineers increase at an unprecedented rate. The needs of the computer certification education and exam of the network engineers are also soared. So, up till now what kinds of CompTIA certification exams exist? How to participate in a CompTIA certification exam?

Those who have passed the international certification of computer exam probably have heard about the Prometric Exam Company. The Prometric Test Company is the world’s largest company of computerized certification examination services. It has set up more than 4,000 Authorized Prometric Testing Center (APTC) around the world responsible for providing IT industry certification examinations. The company has set up the licensing Examination Center (ATPC) in major cities of many countries all the world and is responsible for providing IT industry certification exams. It can provide students the certification examinations of world’s famous IT companies including Microsoft, Oracle, Cisco, Sun HP, Linux, Adobe, IBM / Lotus, Intel, Lucent, SCO, Novell, Compaq and so on.

CompTIA Certificate test is carried under computer networking environment. CompTIA System has input its tests into the system of Prometric and then such system will make them into different kinds of exams for the exam – takers who have enrolled. The existing knowledge update fast, so the exam treasuries of CompTIA update constantly along with the products updating.

For instance, CompTIA Project+ is divided into standard test and self-adapting test. Because the adaptive test is an item of new test technology, it makes the computer become not only the information receiver in the exam any more. It also has a certain degree of intelligence, ie it can decide the difficulty of the next question by real-time analysing of the examinee’s current result, judging the examinee’s knowledge scope and how much he has grasped. In CompTIA pk0-002 exams, a question with medium difficulty will be given first. If the candidate answers it right, next question will be more difficult; if the candidate answers it wrong, next question will be easier. However, checking answered questions is now allowed. This test greatly avoids the rote memorization and the leak of examination questions. It really examines the examinees’ understanding about concepts. Now, more and more certification exams use this test form.

Now, IT certification test mainly focuses on choice questions (single choice, multiple choices, and variable choice), scenario-based questions, drag and drop questions and experimental questions. pk0-002 is no exception. As soon as the exam is finished, there will be “Pass” or “No Pass” on the screen and the report will be printed immediately, on which lists your scores of your different parts in the exam to let you know your strong and weak points so that you can improve your skills.

You may like these Exam:

Pass4sure pk0-002 : IT Project+ Certification Exam(2003 Objectives)
Pass4sure pk0-002 : pk0-002 HardCopy

Related Exams:
642-373 – Cisco-Express-Foundation-for-Systems-Engineers
000-200 – IBM-Storage-Sales-V1
310-202 – Sun-Certified-System-Administrator-for-Solaris-10-OS.Part-2
642-105 – Implementing-Cisco-Unified-Messaging
350-029 – CCIE-Service-Provider-Written-exam

Related Exams:
SK0-002 – SERVER+-EXAM-2004-Objectives
640-816 – Interconnecting-Cisco-Networking-Devices-Part-2
642-812 – BCMSN—Building-Converged-Cisco-Multilayer-Switched-Networks
640-460 – IIUC-Implementing-Cisco-IOS-Unified-Communications-(IIUC)
642-892 – Composite

Related Exams:
642-415 – Unified-Communications-Architecture-and-Design
650-393 – LCSE-Cisco-Lifecycle-Services-Express
642-654 – WAASSE—Wide-Area-Application-Services-for-System-Engineers
640-721 – Implementing-Cisco-Unified-Wireless-Networking-Essentials-(IUWNE)
BI0-112 – Cognos-8-BI-Author-v2