CCIE Security试验考试考点(*表示考试中已经预配) Bridging and Switching
Basic frame relay configuration *
Catalyst VLAN configuration *
Catalyst VTP configuration *
Port-VLAN assignments *
Catalyst management and security
802.1x
Traffic control and congestion management
Catalyst features and advanced catalyst configuration
IGP Routing
OSPF, EIGRP and RIP configurations *
OSPF, EIGRP and RIP security *
PIX routing
VPN3000 routing
Route filtering, redistribution, summarization and other advanced IGP features
PIX Firewall
Basic PIX configuration
Management
Address translation (NAT, global, static)
ACL, conduit
Routing
Object groups
VLANs
AAA
VPN
DHCP
PPPoE
Filtering
Fixup protocols
Other advanced PIX features
BGP
Basic IBGP, EBGP and BGP backbone configurations *
BGP security
Summarization, filtering and advanced BGP features
IP/IOS Features
IP services
QoS
NAT/PAT
NTP
DHCP
SNMP
IOS features and user interfaces
File management, system management and advanced IP/IOS features
AAA
Tacacs+
Radius
Switch and router management
PIX management
VPN3000 management
Proxy authentication
Service authentication FTP, telnet, HTTP, other
Advanced AAA features
VPN
IPSec LAN-to-LAN (IOS/ PIX/ VPN3000) (ok IOS)
DMVPN
Pre-shared (ok)
CA (PKI)
Remote access VPN (IOS/ PIX/ VPN3000)
VPN3000 concentrator
Unity client
WebVPN
EzVPN Hardware client (IOS/ PIX)
Xauth, split-tunnel, RRI, NAT-T
High availability
IPSec redundancy
QoS for VPN
GRE, mGRE
L2TP
PPTP
Advanced VPN features
IOS Firewall
CBAC(ok)
Audit (ok)
Auth Proxy(ok)
PAM (ok)
Access control
Performance tuning
Advanced IOS firewall features
Advanced Security
DoS/DDoS attacks
Network/ Host attacks
Packet marking techniques
Mitigation techniques
Security RFCs
Service provider security
Black holes, sink holes
Access lists (standard, extended, named)
Lock-and-Key access-list
Reflexive access-list
TCP intercept
uRPF (OK)
CAR
NBAR
Netflow
802.1x
PBR
Flooding
Spoofing
Policing
Fragmentation
Sniffer traces
Device security and management (telnet, SSH, pwd, priv lvls) (OK)
Other advanced features
Intrusion Detection System
IDS sensor appliance 42XX
Sensor configuration
Signature tuning
Shunning
TCP resets
Sensor features
IDM
IEV
IOS IDS
PIX IDS
SPAN, RSPAN
Advanced IDS features
|