Security LAB Test Preparation Guide

Version 2
Revision History

Revision Date Revision Content Revised By

Number
1 2009/6/20 First Release N/A
2 2010/6/23 •Format change Sonic Yang
•Append LAB Test Rules and
covered topic
3
4
5

2
LAB Test Rules and Policies
• The DCP-Security lab test consists of two sessions: troubleshooting
session in the morning and Configuration session in the afternoon.
• This practice lab consists of two sections totaling 100 points. A
score of 70 points is required to achieve a passing score.
• If any section is rated 0 point, the candidate would fail anyhow. A
section must work 100% with the requirements given in order to be
awarded the points for that section. No partial credit is awarded.
• If a section has multiple possible solutions, choose the solution that
best meets the requirements.
• Talking, eating and discussion are not allowed during the lab test
session.
• All mobile devices must be switched off during the session.
• If a candidate has a question, the candidate should raise his or her
hand and signal the proctor for help.
3
LAB Test Rules and Policies
• If a candidate needs to go to the restroom during the session, the
candidate must first seek the proctor’s consent. Time of absence
from the session is counted in the total test time.
• All DCP LAB Test materials, including but not limited to the test
sheet, work sheet and answer sheet, must not be taken out from
the lab testing area.
• If any event occurs during the lab test session, follow the proctor’s
instruction.
• The proctor retains the right to cancel and stop a candidate’s lab
test.

4
LAB Test Rules and Policies
Before ending the test session …
• Please review your answers carefully
• Remember to save all the configurations
• Raise your hand to signal the proctor if you want to end the
session
• LEAVE the test sheets on the table

Please Note:
Candidates who violate any rule or policy of this test will
automatically fail the test.

5
Time Distribution
• A full day session
– Troubleshooting Session 09:30-12:00
– Lunch 12:00-13:30
– Configuration Session 13:30-18:00
• The morning session starts with a 15-minute lab test overview
beginning at 09:15.

Point Values
Item Section Marks Score
1 Troubleshooting 30
2 Configuration 70
Total 100
6
DCP Security LAB Test Topics to Be Covered
Please note that this topic list is not an all-inclusive list of D-Link DCP Security
lab exam subjects. Instead, we provide this outline to help candidates to
prepare for their lab exams. Other topics may also appear in the actual lab
exam.

All the test topics can be found in user manual and DCP material. We also
provide additional setting examples for some test topics on the D-track KM
system. Those examples can be searched in the following link,
http://dtrack.dlink.com.tw/portal_KM2.asp with the KM number

Topic KM Nun Topic KM Nun

User Authentication DK0700670 GRE VPN DK0800767
DHCP Server PPTP/L2TP VPN DK0600063, DK0700533
DHCP Rely Anti Virus
VLAN Port Forwarding
IGMP DK0800768 Zone Defense
OSPF DK1000035 IPRule Setting
Policy Based Routing DK0800180 High Availablity
DK0700460, DK0700461, Transparent Mode
IPSec VPN
DK0700462 Traffic Management DK0800162
DCP-Security

Sample Troubleshooting LAB

8
 Troubleshooting Quiz Example 1

#1. Connection Issues:

Web Server:
192.168.1.5/24

WAN1: FW1
1.1.1.1/24

LAN1:
192.168.1.1/2
4

PC2 IP: PC1 IP:

1.1.1.5/24 192.168.1.100/24
PC2 GW: PC1 GW:
1.1.1.1/24 192.168.1.1/24

Connection Issues.rar
Quiz configuration and answer
 Troubleshooting Quiz Example 2

#2. VPN Issues:

WAN1:
LAN1:
1.1.1.2/24
192.168.1.1/24
FW1 FW2

FW2
PC2 IP: LAN1: WAN1:
3.3.3.2/24 PC1 IP:
3.3.3.3/24 1.1.1.1/24
192.168.1.99/24
PC2 GW: PC1 GW:
3.3.3.2/24 192.168.1.1/24

VPN Issues.rar
Quiz configuration and answer
DCP-Security

Sample Configuration LAB

11
 Configuration Quiz Example 1

#1. ZoneDefense:

WAN 1:
1.1.1.2/24
FW1
FTP/Web
Server
1.1.1.101/24 LAN 1:
192.168.1.1/24

DGS-3427
192.168.1.2/24

PC1 IP: PC2 IP:

192.168.1.10/24 192.168.1.110/24
PC1 GW: PC2 GW:
192.168.1.1 192.168.1.1
 Configuration Quiz Example 1

#1. ZoneDefense Answer:

1. Check Ethernet cables connection

2. Setup DGS-3427 ZoneDefense configuration

DGS-3427:5#config ipif System ipaddress 192.168.1.2/24 vlan default state enable
DGS-3427:5#create snmp community dlink view CommunityView read_write
DGS-3427:5#enable snmp

3. Setup DFL-1600 ZoneDefense configuration

•Add a switch
 Configuration Quiz Example 1

#1. ZoneDefense Answer:

4. Check switch status

5. Setup Threshold rules

 Configuration Quiz Example 1

#1. ZoneDefense Answer:

6. Add Threshold Action from the Threshold rules
 Configuration Quiz Example 1

#1. ZoneDefense Answer:

7. Try to use PC1 connect to HTTP/FTP server:1.1.1.101 with multiple sessions.
Example: Download multiple files from FTP

8. Check DFL-1600 ZoneDefense state.

 Configuration Quiz Example 1

#1. ZoneDefense Answer:

9. Check DGS-3427 ACL state
 Configuration Quiz Example 2

#3. User Authentication:

WAN1:
1.1.1.1/24 FW3 FTP Server
LAN: 192.168.1.5/24
192.168.1.1/24
DMZ:
192.168.2.1/24

Sales People
PC1 IP: PC2 IP:
1.1.1.10/24 192.168.2.10/24
PC1 GW: PC2 GW: Engineering People
1.1.1.1/24 192.168.2.1/24