CCNA 200-301 v1.1 reference — Security Fundamentals
Security concepts and program elements
Threats, vulnerabilities, exploits and mitigation techniques, plus user awareness, training and physical access control.
Objective 5.1Objective 5.2v1.1 exam target
Loading
Key security definitions
| Term | Definition | Example |
|---|---|---|
| Asset | Something worth protecting | Customer database, a router's config |
| Threat | Potential cause of harm to an asset | Malware, an intruder, a flood |
| Vulnerability | Weakness that could be exploited | Unpatched SSH, default password |
| Exploit | Technique/tool that uses a vulnerability | Brute-force script, buffer-overflow code |
| Risk | Likelihood × impact of a threat exploiting a vulnerability | High risk: unpatched internet-facing device |
| Mitigation | Control that reduces risk | Patch, ACL, MFA, physical lock |
Security program elements
| Element | Purpose | Examples |
|---|---|---|
| User awareness | Keep threats visible to users | Phishing simulations, security bulletins |
| Training | Build the skills to act correctly | Incident handling drills, admin certification |
| Physical access control | Stop unauthorized hands reaching gear | Badge readers, locked racks, console port policy, camera coverage |
Classify a scenario
- Event
- An attacker uses a leaked default password to log into a branch switch
- The leaked default password is the vulnerability.
- The attacker's login attempt is the threat realized via an exploit (credential reuse).
- Mitigation that would have stopped it: changed credentials at install, management ACL, or AAA with MFA.
One incident always chains vulnerability + exploit — mitigation breaks the chain anywhere.
Sources
- Cisco CCNA 200-301 v1.1 Exam Topics (official PDF) — reviewed 2026-11-02
Targets CCNA 200-301 v1.1 objectives. Supplemental blocks are labeled beyond exam scope.