實施思科邊界網絡安全解決方案考試要點

實施思科安全移動解決方案(SIMOS) 主要檢驗考生作為網絡安全工程師對各種在思科ASA防火牆及思科IOS軟件平台上可用的虛擬專用網絡(VPN)解決方案。該考試主要考察考生是否具備通過VPN技術實施安全遠程通信的知識，包括遠程接入SSL VPN及點到點VPN(DMVPN，FlexVPN)。

Exam Description: The first paragraph is the exam description that is followed by a second paragraph with standard copy that appears on all exam topics.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

　　1.0 Secure Communications

1.1 Implement Site to Site VPNs on Routers and Firewalls

1.1.a Describe GETVPN

1.1.b Implement IPsec (with IKEv1 and IKEv2)

1.1.c Implement DMVPN (Hub-Spoke and spoke-spoke)

1.2 Implement remote access VPNs on Routers and Firewalls

1.2.a Implement AnyConnect IKEv2 VPNs

1.2.b Implement SSLVPN: client and clientless

1.3 Implement Site to Site VPNs on Routers and Firewall

1.3.a Implement FlexVPN

1.4 Implement remote access VPNs on Routers and Firewalls

1.4.a Implement SSLVPN: client and clientless

1.4.b Implement FLEX VPN

　　2.0 Troubleshooting, Monitoring and Reporting Tools

2.1 Analyze syslog and VPN debug logs via ASDM

　　3.0 Secure Communications Architectures

3.1 Design Site-to-site VPN solution

3.2 Design Remote access VPN solution

3.3 Describe Encryption, hashing, incl NGE