Just passed this Exam %73 out of %70 pass mark. What a killer !!!
Sitting the course (practicals) was next to useless for the exam however the coursebook is required reading.
There were a number of topics not covered in the coursesware or the book such VPN based routing !! If you're going to try and sit the test get the manuals and do some reading in this area because i got at least 4 questions on this topic. At the start of the exam it pops up and tells you what you'll be tested on, funny thing was there were about 2 topics that aren't on their web site even !!!!
As usual for Checkpoint the content wasn't all that difficult it was just how they phrased everything. I dont know why they can get this right in the manuals yet screw it up so much in exams.
This Accellerated test was really a combined CCSA and CCSE NGX test and its very hard to pass without having extensive practical experience with Checkpoint rulebase and VPNs. There were alot of what i'd call general-Checkpoint-knowledge questions
what to read up on (in order of importance);
Clustering - cphaprob output and other tools. How unicast and multicast works.
Rulebase - some stuff about global properties implie rules and their defaults. Know the difference between implicit and explicit. There were a number of questions regarding performance, rule base order, logging.
SmartView Monitor - lots of questions regarding auditing,
QOS rules - limit and guarantee guidelines for the QoS Rulebase. How to allocate weights. What is LLQ and Diffserve.
Upgrading - There were a number of upgrade questions regarding moving from standalone to distributed etc. How to install central licences (SmartUpdate). Upgrade or install process on SecurePlatform.
SIC - a couple of SIC questions, one about resetting sic via the command line and one about what SIC actually is.
Management HA - There were a couple of questions regarding the different errors. Know the limitations of synchronization (i.e. can you use the same version, do the servers need to be the same OS or on the same network) and what starts automatic synchronization.
VPNs - Some stuff about Remote access encryption domains and star or meshed VPN topologies.
Ldap - there were few Ldap questions regarding schema importing and schema checking.
What there wasn't much of;
Eventia reporter - Not a single question
SecureClient - Nothing regarding the new Office-mode per site Radius etc which surprised me.
Good luck
Bookmarks