- 积分
- 139
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 最后登录
- 1970-1-1
- 阅读权限
- 20
- 听众
- 收听
助理工程师
|
Sorry it is in english:
" `6 I, T O, A$ h/ {/ e0 W$ w8 |2 j3 o+ ~* `( J9 s& a& L
I passed the exam, were exactly 14 new questions maybe 15 with wording in question changed but options were the same.5 W1 J, N6 m1 u/ @9 _9 ~! z
7 t+ \2 F* u; qBrief of what i can remember from questions:- b% M7 q% A" J5 p6 ^, h
" P; K7 c) ]6 e2 Y6 _4 H
Question about adding custom intrusion rule and a hex string if you wanted to search it by payload options were like:# d6 f; d' N6 v# |9 ?5 y
A) Metadata
6 F1 }; m. ?3 C4 |6 Y5 @! _B) Data3 i+ G* J6 w1 ]# a4 P6 F. G
C) Content& {& i3 t0 a; \" N% c
D) forgot+ b# K/ L2 q" P! @
* H( `3 h, n+ _1 d! w' D$ r0 {
Another question about dhcp already running on end users and without impacting end users how should it be implemented:/ S, ^$ Q0 i& `5 X, e
Options were about routed or transparent modes, i chose option with transparent mode but access list allowing dhcp
5 A7 b. d. G0 P/ Q- a6 R
2 B K" D' m# C1 RDrag and drop about multi-instances config, there were 5 steps which i got completely wrong but you can look it up
; Q: F' e" f2 [! c; n$ l
5 v# [# ]7 X5 U" A- ]" a9 aThe Badsite question we currently have except they want to make interactive block for it, how is it done choose 2+ K4 W) V }# t# e1 D+ k% p" w
; A2 k* y& k' |4 X4 {1 |
Question about how capture was too much data in gui and how analyst cant see it all. What format can he export it as so he can analyze it further:; o! H" h% F$ O3 J) j. h
A) Netflow v9' S8 p3 k7 h- C$ C2 I$ C, m
B) Netflow v5' h0 e) a- D+ M
C) PCAP
# y2 R% z; I* yD) IPFIX6 S4 }! n* ]1 W: C" R
' d b- D- ^, |) g; U
There were a lot of rules of "how do i implement this without impacting the end user" (mostly means transparent is the answer). l. G# t, L# \
" b- K' G d+ C5 WImplementing IRB with dynamic routing, which protocols are supported:# d3 {6 u3 x# I- `, G9 e
A) Link State" w9 q% ?9 P, [0 W5 v; ^. C
B) Distance Vector
1 @7 }( a. ?. k, q$ iC) Bridge Protocols, p. Y/ X; v, B" `/ ?5 V! O6 [
D) EtherChannel. C! Y$ a& M3 l: m y8 a* a
9 x! T+ o# J. G, S6 }
There were a couple more but were either stupid easy or stuff I didn't want to remember.( v8 A) W6 C" \0 y+ @6 z
0 O' P4 M6 a! P
I'll be around for couple of days but i'll post the questions I used to study, ofc its questions we are already aware about but i corrected the answers to the questions as well. Don't take my word for it and please check yourself
3 U3 f1 k: [( g; ~
+ ^3 i% U7 E# E" b. W% }, `$ G" d |
本帖子中包含更多资源
您需要 登录 才可以下载或查看，没有账号？论坛注册
x
评分
-
查看全部评分
|
简体中文
英语
日语
韩语
法语
西班牙语
越南语
泰语
阿拉伯语
俄语
葡萄牙语
德语
意大利语
希腊语
荷兰语
波兰语
保加利亚语
爱沙尼亚语
丹麦语
芬兰语
捷克语
罗马尼亚语
斯洛文尼亚语
瑞典语
匈牙利语
繁体中文
文言文
发表于 2023-5-6 05:14:27
置顶卡
喧嚣卡
变色卡
千斤顶
