Network Engineer (CCNA/CCNP)

 

PROVIDENCE RI 02903

 

4 month contract

 

 

“Senior Network Engineer”

Participates in and provides leadership in the development, deployment and support of infrastructures, applications and technology initiatives, both from an architectural and operational perspective in conjunction with existing standards and methods of delivery. Candidate must have a strong understanding of Cisco routing and switching, as well as firewalls and general security. Collaborate with other technology teams and clients to deploy technology architectures and solutions. Research, escalate, and resolve, technology problems relating to the global technology environment. Perform and present technology performance analysis, capacity planning, and proactive health checks. Considered SME in technology field and has expert knowledge of equipment, protocols, technologies, services, and monitoring tools.

Basic Qualifications:
• Highly Skilled (5+ yrs) in Cisco routing and switching
• Extensive experience with OSPF, EIGRP, and BGP routing protocols
• Data center networking design and implementation experience
• Enterprise switch design and configuration, incl. 6500’s and Nexus platforms
• Enterprise router design and configuration, incl. 7200’s and ASR platforms
• Extensive experience with QoS design and troubleshooting
• Extensive experience with WAN design and troubleshooting – OC-3’s, MPLS, frame relay, and T-1’s
• CCNP in routing and switching

Additional Preferred Skill Requirements:
• CCIE R&S Candidate/Written Preferred
• CCNP-Wireless Preferred
• Design and configuration experience with Cisco WLC, WCS, and AP’s
• Leadership or “Team Lead” experience
• Ability to multi-task projects
• Strong interpersonal skills
• Strong analytical skills
• Strong written and oral communication skills
• Strong organizational skills
• Working knowledge of group dynamics

 

 

Certification Credential
Preference
Comments

Cisco Certified Network Associate (CCNA)
Required
CCNP Preferred

In thе еνеr changing IT market οf today, a certification іѕ thе аn іmрοrtаnt piece οf paper, fοr both experienced аnd fresh candidates. In thіѕ article, thе best IT certifications fοr 2011 аrе listed, wіth a short description οf each.

Whу іѕ аn IT Certification Needed?

Certifications provide thаt much needed edge, thаt differentiates one professional frοm thе οthеr. It gives experienced workers a chance tο update themselves іn thеіr respective areas οf expertise. Instead οf going іn fοr another degree, thеу саn add tο thеіr education wіth a certification. Certifications prove hοw dedicated a professional іѕ tο thе field thеу work іn.

Fοr freshers, іt gives thеm a hiring advantage over thеіr competition. It іѕ a given IT industry fact, thаt аn inexperienced bυt certified professional, іѕ a better сhοісе thаn аn uncertified one. A certificate саn bе used аѕ a proof οf competency. And fοr thе inexperienced, certification knowledge іѕ more valuable fοr a job, thаn whаt thеу mіght hаνе learned during thеіr education. Fοr example, during a four year degree course іn engineering, one learns a lіttlе bit οf different languages, lіkе Java οr SQL. Bυt аt thе hiring time, іf certified іn SQL, thаt individual іѕ more valuable, ѕіnсе hе іѕ already well versed іn thе specific technology.

Best In Demand IT Certifications fοr 2011

Microsoft Certified Technology Specialist (MCTS): Thіѕ certification tests уουr skills аnd expertise іn a specific technology. Fοr example, thе MCTS ASP.NET certification focuses οn thе .NET 3.5 ASP.NET suite. Thеrе аrе currently 20 specializations, wіth 5 broad subject categories whісh аrе Office, .NET framework, SQL Server, Windows аnd business intelligence. Thіѕ іѕ thе first level οf certification exams fοr Microsoft.

Microsoft Certified IT Professional (MCTIP): Thіѕ certification іѕ extremely useful fοr experienced professionals, аѕ іt validates thе skill set tο perform a particular job role. It tests thе ability οf thе candidate, tο υѕе Microsoft technologies іn performing аn IT job role, lіkе database administrator οr server administrator. Tο give thіѕ exam, one οr more compulsory MCTS certifications mυѕt bе obtained first.

A+: Thіѕ іѕ a vendor neutral certification, thаt covers multiple operating systems аnd technologies. Thіѕ certification ensures basic knowledge οf software аnd hardware components. It іѕ intended fοr professionals, wіth аt lеаѕt 500 hours οf hands-οn experience, аѕ thе qυеѕtіοnѕ аrе based οn practice, nοt theory. Thе A+ certification іѕ especially used аѕ a bench mаrk wіth computer support technicians, аѕ thе key exam areas аrе installation, networking, maintenance аnd troubleshooting.

Apple Certified Technical Coordinator (ACTC): Fοr those interested іn working wіth thе Mac OS X, thіѕ іѕ one rare аnd necessary certification. It targets entry level system administrators, whο provide support аnd maintain Mac OS X client server environments.

Red Hat Certified System Administrator (RHCSA): Red Hat certifications аrе thе best аnd mοѕt sought аftеr Linux certifications. Thеу carry out actual practical exams, instead οf thе normal multiple сhοісе qυеѕtіοnѕ. Thе RHCSA іѕ thе entry level exam tο pursue a Red Hat certification. It deals wіth basic system administration аnd thеrе іѕ nο experience prerequisite. It іѕ thе mandatory base fοr higher Red Hat certifications lіkе RHCE.

Certified Information Systems Security Professional (CISSP): A certification frοm thе non profit International Information Systems Security Certification Consortium (ISC2). It deals wіth information аnd network security, highly іmрοrtаnt subjects іn аnу industry аnd organization. Thіѕ particular certification іѕ accredited bу ANSI, аnd іѕ highly regarded аѕ аn information systems standard. It requires a minimum οf 5 years, full time, security work experience.

Certified Ethical Hacker (CEH): An ethical hacker οr penetration tester іѕ employed bу a company, tο attempt tο penetrate οr hack іntο thе network οr computer systems, tο dіѕрlау weaknesses аnd failings іn thеіr security system. Wіth illegal hacking being a serious threat іn аnу organization, ethical hacking іѕ quickly becoming a рοрυlаr testing method fοr network security. Thіѕ vendor neutral certification іѕ provided bу thе International Council fοr E-Commerce Consultants.

Global Information Assurance Certification (GIAC): One οf thе leading institutions handling information security certifications, іn a number οf security disciplines. GIAC measures аn individual’s specific knowledge areas іn thе field οf information security, fοr nearly 20 job specific responsibilities, lіkе firewall analyst, intrusion analyst οr security expert tο name a few. It іѕ a highly valued certification institute іn thе field οf information security.

Cisco Certifications: Thе networking field іѕ thе fastest аnd best IT field іn terms οf growth аnd opportunities. And Cisco іѕ thе brand leader іn networking certifications. Fοr аnу level οf networking expertise, bе іt entry οr experienced, Cisco hаѕ a certificate аnd іn a variety οf networking subjects lіkе security, installation аnd design. Here аrе ѕοmе οf thе best IT certifications fοr networking frοm Cisco:

• Cisco Certified Entry Networking Technician (CCENT)
• CCNA (Cisco Certified Network Associate) іn Security, Voice, Wireless, Routing аnd Switching
• Cisco Certified Security Professional (CCSP)
• Cisco Certified Wireless Professional (CCNP Wireless)
• Cisco Certified Network Professional (CCNP)

Project Management Professional (PMP): Thіѕ certifies thе management know-hοw аnd skills οf аn IT professional, іn handling projects аnd tasks аt a managerial level, within a budget аnd time limit. Itѕ prerequisite іѕ educational qualifications аnd experience. A PMP іѕ a renowned аnd internationally accepted certification іn thе management field.

Those wеrе ѕοmе οf thе best IT certifications available. IT certifications hаνе bееn a source οf debate fοr industry experts. In recruiters minds, thе key factor fοr deciding tο hire аn individual іѕ experience. And unfortunately, a certification саnnοt replace experience. Alѕο, уου саn gеt pigeonholed іntο thаt technology, аnd уουr company mіght hesitate tο promote уου. Find out іf a certification wіll result іn a pay raise οr mаkе уου considerable fοr a promotion. And see hοw flexible уουr timings аnd schedule іѕ, ѕο thаt уου саn actually study fοr thе exam. In thе long rυn, уουr talent аnd skills аrе thе key point tο уουr success іn thе IT field.

From the #1 Name in Professional Certification

“]

Mike Meyers' CompTIA A+ Certification Passport, Fourth Edition (Exams 220-701 & 220-702) [Paperback

INSIDE:

• Itineraries–List of official exam objectives covered
• ETAs–Amount of time needed to complete each lesson
• Travel Advisories–Expert advice on critical topics
• Local Lingo–Concise definitions of key terms and concepts
• Travel Assistance–Recommended resources for more information
• Exam Tips–Common exam pitfalls and solutions
• Checkpoints–End-of-chapter questions, answers, and explanations
• Career Flight Path–Career options mapped out to maximize the return from your IT journey

PRACTICE EXAMS:

• Practice exams for 220-701 & 220-702
• Hundreds of practice questions from the book
• Video training segment
• Mike’s favorite PC tools and utilities
• E-book

About the Author

• Provides 100% coverage of all exam objectives for Security+ exam SY0-301 including:
  • Network security
  • Compliance and operational security
  • Threats and vulnerabilities
  • Application, data and host security
  • Access control and identity management
  • Cryptography
• Features Deluxe-Edition-only additional practice exams, value-added hands-on lab exercises and study tools, and exclusive Security Administrator simulations, so you can practice in a real-world environment
• Covers key topics such as general security concepts, communication and infrastructure security, the basics of cryptography, operational security, and more
• Shows you pages of practical examples and offers insights drawn from the real world

Get deluxe preparation, pass the exam, and jump-start your career. It all starts with CompTIA Security+ Deluxe Study Guide, 2nd Edition.

From the Back Cover

The Deluxe Edition of CompTIA Security+ Study Guide, Fifth Edition

Prepare for CompTIA’s Security+ Exam SY0-301 with this Deluxe Edition of the top-selling CompTIA Security+ Study Guide, Fifth Edition. In addition to comprehensive coverage of exam topics and Sybex’s leading-edge exam prep software, this CompTIA Recommended Deluxe Study Guide includes bonus exercises and practice exams, sample videos, special Security+ training software, and more. Start your CompTIA Security+ preparation today with:

• Full coverage of all exam objectives in a systematic approach, so you can be confident you’re getting the instruction you need for the exam
• Practical, hands-on exercises and labs to reinforce critical skills, plus 50 bonus hands-on exercises in PDF format on CD
• Real-world scenarios that put what you’ve learned in the context of actual job roles
• Five complete practice exams as well as challenging review questions to prepare you for exam day
• Easy-to-follow videos that illustrate complex techniques
• A list of useful acronyms that any security professional should be familiar with
• Exam Essentials, a key feature in each chapter that identifies critical areas you must become proficient in before taking the exam
• A handy tear card that maps every official exam objective to the corresponding chapter in the book, so you can track your exam prep objective by objective

Look inside for complete coverage of all exam objectives.

www.sybex.com/go/securitydel2e

SYBEX TEST ENGINE

Test your knowledge with advanced testing software. Includes all chapter review questions and practice exams.

ELECTRONIC FLASHCARDS

Reinforce your understanding with electronic flashcards.

Also on the CD, you’ll find extra exercises and study tools, training software, videos, a special appendix on cabling, a useful list of acronyms, and more.

Includes Real-World Scenarios, Hands-On Exercises, and Leading-Edge Exam Prep Software Featuring:

• Custom Test Engine
• Hundreds of Sample Questions
• Five Complete Practice Exams
• Electronic Flashcards
• Bonus Videos, Study Tools, and More

First & foremost, install the latest version of GNS3 i.e GNS v 0.7.3 if you haven’t already done so. Next, Cisco IPS Recovery CD will be required. You should be able to get one from you CCO account on Cisco.com.

Disclaimer: This tutorial is for learning purposes only. You can download Cisco IPS Recovery image from CCO directly.Otherwise,it shouldn’t be hard to get one from internet using some googling skills I will NOT provide any images so, please refrain from asking me as i won’t entertain any such requests/emails.

Now, lets get started. I will be breaking it down into several steps.

Software Version Used in this tutorial:

• -> Platform : Windows 7 64bit edition (Tutorial will work on any OS )
• -> GNS3 Version : v0.7.3
• -> IPS Sensor Version : IPS 4235 v 6.0.6(E3)
• -> Qemu Version : 0.11.0
• -> Reference : http://inetpro.org/wiki/Using_qemu_to_run_Cisco_IPS

NOTE: Screenshots might get cropped on blog post so click on thumbnail to view full image.If you want to download tutorial , see end of this tutorial for GNS3 configuration file & PDF version of this tutorial.

Step 1 : Create 2 Disk Images (hda & hdb)

IPS disk creation

Step 2 : Load IPS CD image using qemu

IPS Image Recovery Process

When qemu boots, press ‘k’ to start the re-imaging process (image recovery). When reimaging is done, the software reloads, and qemu pauses in the BIOS screen complaining about boot issues. Exit the qemu process (using Ctrl-C)

Step 3 : Boot from the Re-Imaged Disks

Next step is to boot from the disk. When the system starts, you need to modify the grub boot entry to make sure the system starts at runlevel 1.

At the grub menu, press “e” to edit the first boot entry. In the following menu, select the 2nd line (that starts with “kernel=”) and press “e” again. Change the option init=/loadrc to init=1, then Enter followed by “b” to boot.

The IPS software now boots into runlevel 1. When prompted, press Enter and issue following commands:

 /loadrc
cd /etc/init.d
./rc.init
cp ids_functions ids_functions.orig
vi ids_functions

In the resulting file, search for the string “845″ (with /845),it will jump to the section which looks like this :

 elif [[ `isCPU 845` -eq $TRUE && $NUM_OF_PROCS -eq 1 ]]; then
       MODEL=$IDS4215
       HTLBLOW=8
       MEM_PAGES=${HTLBLOW}
       DEFAULT_MGT_OS="fe0_0"
       DEFAULT_MGT_CIDS="FastEthernet0/0"

Replace the first line (the elif statement) and the variables DEFAULT_MGT_OS and DEFAULT_MGT_CIDS to the following :

 elif [[ 1 -eq 1 ]]; then
       MODEL=$IDS4235
       HTLBLOW=32
       MEM_PAGES=${HTLBLOW}
       DEFAULT_MGT_OS="ma0_0"
       DEFAULT_MGT_CIDS="Management0/0"

Save and exit vi.

Step 4: Map the emulated NIC cards to the IPS interface

Now,lets adjust the process of mapping the emulated NIC cards to the IPS interfaces. Issue the following commands:

 cd /usr/cids/idsRoot/etc
cp interface.conf interface.conf.orig
vi interface.conf

Move forward to the section that deals with the 4235 sensor. You only need to make modifications at the [models/IDS-4250/interfaces/X] sections.

Edit the section. The result should look like following :

 [models/IDS-4250/interfaces/1]
name-template=Management0/0
port-number=0
pci-path=3.0
vendor-id=0x8086
device-id=0x100e
type=ge
mgmt-capable=yes
net-dev-only=yes
tcp-reset-capable=yes                              

[models/IDS-4250/interfaces/2]
name-template=GigabitEthernet0/0
port-number=1
pci-path=4.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes                                 

[models/IDS-4250/interfaces/3]
name-template=GigabitEthernet0/1
port-number=2
pci-path=5.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes

[models/IDS-4250/interfaces/4]
name-template=GigabitEthernet0/2
port-number=3
pci-path=6.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes

[models/IDS-4250/interfaces/5]
name-template=GigabitEthernet0/3
port-number=4
pci-path=7.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes

Follow the Screenshots :

Save the changes and exit vi. The system changes are done, now reload the device

reboot

Device will reload couple of times, followed by prompting you to change the password & that’s it!

GNS3 Specific Configuration :

Next, Edit Preferences Menu in GNS3 & make IPS Qemu Settings as shown [ Under Qemu Options, modify smbios settings to remove Unsupported platform error ] :

Create the Topology in GNS3 & boot the sensor. Access CLI & also access via IDM (IPS Device Manager) as shown.

Now , you have FULL-BLOWN IPS Sensor at your disposal. ENJOY !!!

In Next tutorial, i will help you fine tune the sensor e.g . Setup mutiple virtual sensors, reduce CPU load to less than 5% (Qemu Optimization), Tunning Signatures , Connecting & Configuring Sensing interfaces in GNS3 etc. Stay Tuned !

NOTE:Refer to the original wiki document mentioned in Reference if you want to understand the nitty gritty.Thanks to “tranzitwww” for his comments.

If you find this tutorial useful in your studies & want to download this tutorial for offline viewing, the link is provided below.Download package contains GNS3 Configuration File (.net) , PDF version of this tutorial , separate full resolution screenshots etc.

Reference to http://inetpro.org/wiki/Using_qemu_to_run_Cisco_IPS

Pass 70-649. Prove Your skill. Get Certified.

QUESTION 139:
You develop a Windows-based application by using Visual Studio .NET. The
application includes numerous method calls at startup. After optimizing your
application code, you test the application on a variety of client computers. However,
the startup time is too slow.
You must ensure that your application starts as quickly as possible the first time it
runs. What should you do?
A. Precompile your application by using the Native Image Generator (Ngen.exe):
Install the precompiled application on the client computers.
B. Install your application on the client computers.
Precompile your application by using the Native Image Generator (Ngen.exe).
C. Precompile your application by using the JIT compiler.
Install the precompiled application on the client computers.
D. Install your application on the client computers.
Precompile your application by using the JIT compiler.
Answer: B
Explanation: The Native Image Generator creates a native image from a managed
assembly and installs it into the native image cache on the local computer. Running
Ngen.exe on an assembly allows the assembly to load and execute faster, because it
restores code and data structures from the native image cache rather than
generating them dynamically.
The native image contains processor-specific machine code and in this scenario a variety
of client computers are used. We must therefore use the Ngen.exe utility at the client
computers after the installation, not at the Development computer..
Reference:
.NET Framework Tools, Native Image Generator (Ngen.exe)
70-306/70-316 Training kit, Installing a Native Assembly Image, Page 495
.NET Framework Developer’s Guide, Compiling MSIL to Native Code
Incorrect Answers
A: The Native Image produced by Ngen.exe is machine-specific and in this scenario a
variety of client computers are used. We cannot use the a single Native Image from once
computer on all the other computers..
C, D: JIT (just-in-time) compilation occurs at run-time, and cannot be precompiled.
Note: When you compile a .NET application, it is not compiled to binary machine code;
rather, it is converted to IL, which is a low-level set of instructions understood by the
common language run time. When execution starts, the first bit of code that needs to be

Actualtests.org – The Power of Knowing
executed is loaded into memory and compiled into native binary code from IL by the
common language run time’s Just-In-Time (JIT) compiler.
QUESTION 140:
You develop a Windows-based application by using Visual Studio .NET. The
application includes a form named Cerp4siller Form and a class named Contact.
testking Form includes a button named cmdCreateContact. You must ensure that
your application creates an instance of Contact when a user clicks this button. You
want to write the most efficient code possible.
Which code segment should you use?
A. Contact contact = new Object();
B. Contact contact = new Contact();
C. Object contact = new Contact();
D. Contact contact = new Object();
Answer: B
Explanation: We declare that contact should be of type Contact and we use the
Contact constructor.
Reference:
Incorrect Answers
A, D: The constructor of the class has the same name as the class, namely Contact.
C: We must specify that the object should be an instance of the Class object, not any
object.
Object contact = new Contact();
QUESTION 141:
Another developer in your company uses Visual Studio .NET to create a component
named CertK iComponent. You deploy CertK iComponent to a server. When you
execute CertK iComponent, you receive the following error message:
“System.Security.Policy.PolicyException: Failed to acquire required permissions.”
As quickly as possible, you need to discover which permissions are required by
CertK iComponent.
What should you do?
A. Request the source code from the developer who created My Component.
Examine the source code to find the required permissions.
B. Run the Microsoft CLR Debugger (DbgCLR.exe) on the server to view the
permissions requested by the application at run time.
C. Run the Runtime Debugger (Cordbg.exe) on the server to view the permissions
requested by the application at run time.
D. Run the Permissions View tool (Permview.exe) on the server to view the permissions

E. Run the MSIL Disassembler (IIdasm.exe) on the server to view permissions requested

Answer: D
Explanation: Developers can use Permview.exe to verify that they have applied
permission requests correctly to their code. Additionally, users can run
Permview.exe to determine the permissions an assembly requires to execute

Features of exam 642-545:

The following are the features of exam 642-545 and they are:

1) Identification of threats in the Cisco networks by learning the configuration, topology as well as the behavior of the environment
2) How to make the precise recommendations for the threat mitigations that includes the ability in analyzing the source of the threat as well as the visualizing the attacked path.
3) Simplification of incident management for managing the IPS, VPN, firewalls as well as deployment of email/ web security.

Exam objectives:

Installation and configuration of the Cisco security MARS product is the exam objective of 642-545. Simulation as well as adaptive questions can be asked during the examination. So, candidates are recommended to go for training classes in order to pass this examination.

Other details:

The examination comprises of multiple choices, drag- drop, built a tree, re- order type questions and it is assured that there are no case study type questions. Examination can be registered in any of the Pearson VUE centers or nearby Pearson VUE center or even in online by paying the exam fee. After the exam fee is being paid, candidates can schedule their examination date as well as exam session.

Cisco’s 642-533 is one of the Cisco certification examination. The exam name for exam 642-533 is Cisco IPS (Intrusion prevention system). As from the name itself it is clearly understandable that this examination will test the candidate’s knowledge in implementation of Cisco IPS products.

Exam 642-533 objectives:

The following are the exam 642-533 objectives and they are:

1) Upgrading and maintaining the sensors of 642-533
2) Describing the sensors of 642-533 exam in advanced system parameters
3) Installation of Cisco IPS modules/ sensors and configuring the essential system parameters
4) Describing how the sensors of 642-533 are used for mitigating network security threats
5) Tune the sensors of Cisco IPS Advanced system parameters that optimizes the performance of threat attack mitigation
6) Analyzing the events in sensors of Cisco IPS that determines the appropriate network attack responses

How Cisco IPS works best in the organizations?

This exam helps the organizations in certain ways by:

1) Protecting more than 30,000 threats
2) Frequent necessary updates that prevents from upcoming new versions of threats
3) It also prevents from other dangerous attacks like worms, botnets, directed attacks, application abuse and malwares etc
4) It stops the outbreaks In the network level before the desktop entry
5) They prevent losses from theft, defacement as well as in other disruptions.
6) It safeguards intellectual properties, protects brand reputation and decreases the legal abilities.

Other details:

The examination comprises of multiple choices, drag- drop, built a tree, re- order type questions and it is assured that there are no case study type questions. Examination can be registered in any of the Pearson VUE centers or nearby Pearson VUE center or even in online by paying the exam fee. After the exam fee is being paid, candidates can schedule their examination date as well as exam session.

You will need to take the time to register as a Cisco partner. You will need to fill out some light information about yourself in order to register a brand new account. Ensure that all of the information that you have provided is accurate and correct. This will help to keep the process going as fast as it can go. All names and phone numbers need to be accurate in the event that certain information needs to be verified.

Completing the application is a very important step. Those who do not fully complete the application will only stall the process and will not get to become a Cisco partner as fast as they would like. If you do get stuck with anything on the application, simply get in touch with some help and you should be all set!

There are many excellent benefits that come along with learning how to become Cisco partner. You will now have the opportunity to see more sales within your personal company. Simply with the affiliation of Cisco, you will see the boost that you are looking for within your own company. This shows your clients that you are working within the community in order to make things safer and easier.

Your overall relationship with the Cisco Company will improve and open new opportunities to expand. Look into becoming a Cisco partner today and start the registration process. From there, you can begin the application and become a true partner with Cisco!