CCSE考试回忆

network

CCSE考试回忆


从联盟down了不少资料，甚是感激，暂时无以回报，写篇小东东，表示捧场吧。
数日前参加了CCSE考试。直到按下END EXAM的那一刻，依然不能确定自己是能否pass,最后以70分的成绩险过。考试有点难，有两道是非题不会做，都是靠抛硬币决定的，看来那硬币还救了我；）。没有依靠什么Bible，只是做了下Boson.
1. You are setting up an IKE VPN between two VPN-1/Firewall-1 modules protecting two
networks.
One network is using a RFC 1918 compliant address range of 10.15.0.0 and the other network is
using a RFC1818 compliant address range 192.168.9.0. What method of address translation would
you use?
A. Static Source
B. Static destination
C. Dynamic source
D. Dynamic
E. None
2. If the Persistent Server mode check box is selected in the Logical Server Properties window,
which of the following is TRUE?
A. Once a client is connected to a physical server, the client will continue to connect to that server
for the duration of the session.
B. Once the server is connected to a client, the server will continue to connect to that client for the
duration defined in the Logical Server Properties window.
C. Once the client is connected to a physical server, the client will only connect to that server for a
single session.
D. Once a server is connected to a client, the server will only connect to that client for a single
session.
E. After a client has connected to a physical server, the client disconnects from the server.
3. The AES algorithm (Rjindal) is used with IKE encryption; VPN-1/Firewall-1 supports which
version of AES?
A. 256-bit
B. 168 and 256-bit
C. 112-, 168- and 256-bit
D. 40- and 56-bits
E. 25- and 112-bit
4. If the Persistent Server mode check box is selected in the Logical Server Properties window,
which of the following is TRUE?
A. Once a client is connected to a physical server, the client will continue to connect to that server
for the duration of the session.
B. Once the server is connected to a client, the server will continue to connect to that client for the
duration defined in the Logical Server Properties window.
C. Once the client is connected to a physical server, the client will only connect to that server for a
single session.
D. Once a server is connected to a client, the server will only connect to that client for a single
session.
E. After a client has connected to a physical server, the client disconnects from the server.
5. You are using a 56-bit encryption key called DES. Your client is concerned that this is
insufficient security.
You reconfigure the VPN to use the strongest encryption used by the VPN-1/Firewall-1
software. Which of the following would you use?
A. AES 256
B. BlowFish
C. RC4
D. CAST
E. 3DES 68
以上五道确为考试真题，是我后来才在网上一个文档发现的。
另有三四道考题出自CCSE EXAM PPT的培训文档，看这个文档是有用的。一会就准备upload上这个文档。
如果是windows平台的用户，注意Soliars下的内容也要看一下，考了两三道。
题目数量是99道，比CCSA考试多了一道。时间依然是两小时，通过分数依然是69分。个人觉得考试比较难，比CCSA更难些，如果说ccsa考试还可以列出哪些是考试的重点，ccse则可以说是没有重点可循了，考试题目非常灵活，而且覆盖了教纲及教材的每一细微之处。熟读Checkpoint的培训教材，反复实验,相信是通过考试的较好办法。
至于是否参加培训，有钱的话或是公费可以去一下。对于初学者有些帮助；但培训所讲对考试帮助是不大的，只有看Checkpoint的原版培训教材最有用；但可惜我在网上好象还没见过电子版的。
Good luck.