Understand ports, ACLs, logs and least privilege.
Security monitoring and incident investigation
Cybersecurity work includes preventing misuse, investigating events and improving recovery. Networking helps you interpret addresses, ports, routes and packet paths. An unusual packet is not automatically an attack, and a blocked packet is not automatically proof that every important control is working.
Defensive security lab project
Design a fictional office with guest and staff networks. Document which traffic should be allowed. Apply an exercise ACL in an isolated lab, then test permitted and denied cases. Collect relevant logs with synchronised time. Explain the difference between an intentional policy block, a service outage and a missing route.
Write an incident timeline with observations separated from hypotheses. For example, “five SSH failures from this lab IP” is an observation; “an attacker stole a password” needs additional evidence. Keep sensitive material out of a public portfolio.
Additional skills for security operations
Add operating-system basics, identity, secure configuration, vulnerability management and log analysis. Practise recovery as well as prevention. Only scan or attack systems you own or are explicitly authorised to test. Training here uses fictional networks and defensive checks, rather than instructions to probe public targets.
Practical exercise
A denied connection appears in a log. List two non-malicious explanations to consider before reporting an attack.
Show the answer and explanation
A legitimate client may be using an incorrect destination or port, or a recent policy change may be blocking expected traffic. Confirm context, timestamps and the intended policy.
QUICK KNOWLEDGE CHECK
Check your understanding
Related labs and exercises
Sources & content checks
Technical references checked on 25 October 2026. These are original teaching explanations, not official Cisco course material. See how content and lab validation are described.
Project documentation and verification results
Download the project brief and evidence worksheet. Fill in the actual tools, versions, observations and limitations; leave nothing labelled tested without evidence.
Your progress
Mark this complete when you can explain the example and do the exercise.