网络安全工程师模拟面试 · 问题整理
目录
网络安全工程师模拟面试 · 问题整理
📚 内容总览
| 主题 | 题数 | 起止时间 |
|---|---|---|
| 🙋 开场与项目经历 | 2 | 00:44 – 01:35 |
| 🛣️ 路由选路 | 3 | 02:17 – 03:24 |
| 🔐 IPsec VPN 与 NAT-T | 6 | 04:57 – 11:37 |
| 🧱 FortiGate HA | 4 | 07:35 – 10:27 |
| 🛠️ 防火墙策略与排障 | 5 | 12:18 – 17:13 |
| 🧪 实验经验 | 1 | 15:21 – 15:21 |
| 📊 SIEM 与 SOC | 3 | 17:44 – 19:55 |
🙋 开场与项目经历
先自我介绍，再请候选人挑一个最强的项目展开。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 1 | 00:44 |
请做一下自我介绍。 | Introduce about yourself. | 自我介绍 |
| 2 | 01:35 |
你简历里的项目，能挑一个最好的讲讲吗？你认为哪个是最强的项目，拓扑是怎么设计的？ | Tell me any one best project. Which do you consider your strongest, and how was the topology taken? | 项目经验 |
🛣️ 路由选路
从多条路径的选路规则，一路追问到路由器判断的顺序。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 3 | 02:17 |
路由器到同一个目的地有多条路径（静态路由、OSPF、BGP），它是怎么决定最佳路径的？ | The router has multiple paths for the same destination via static routing, OSPF or BGP. How does it decide the best path? | AD 值、选路原则 |
| 4 | 03:03 |
同一个网络，静态路由有 172.0.0.0/8，OSPF 有 172.16.0.0/16，路由器会选哪条？ | With static 172.0.0.0/8 and OSPF 172.16.0.0/16, which path will it choose? | 最长前缀匹配 vs AD |
| 5 | 03:24 |
路由器在决定最佳路径时，检查的顺序和主要关键点有哪些？ | Can you tell me the sequence, the main key points the router checks for deciding the best path? | 选路流程 |
🔐 IPsec VPN 与 NAT-T
隧道状态正常但业务不通，是这一段的核心排障题。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 6 | 04:57 |
站点到站点 IPsec VPN 配置完，隧道显示 up，但用户仍然发不了数据，你怎么排查？ | Site to site IPsec tunnel shows up, but the user is still not able to send data. How do you troubleshoot? | phase 1 / phase 2 参数排查 |
| 7 | 05:45 |
phase 2 有 lifetime 吗？ | Does phase 2 have a lifetime? | IPsec lifetime |
| 8 | 05:53 |
你说的是 IPsec 的默认配置，还是只针对 Cisco 设备？ | Is that the IPsec default configuration, or only according to Cisco devices? | 默认 timer |
| 9 | 06:24 |
普通 NAT 和 NAT-T 的区别是什么？ | Can you tell me the difference between normal NAT and NAT-T? | NAT-T、UDP 500 / 4500 |
| 10 | 10:33 |
IPsec VPN 和 SSL VPN 的区别是什么？ | Tell me the difference between IPsec VPN and SSL VPN. | 站点到站点 vs 远程接入 |
| 11 | 11:37 |
再讲讲 destination NAT。 | Explain destination NAT. | destination NAT、virtual IP |
🧱 FortiGate HA
围绕候选人项目里的 HA 展开。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 12 | 07:35 |
请讲讲 FortiGate HA。 | Can you explain me about FortiGate HA? | HA 原理、failover |
| 13 | 08:56 |
两台 FortiGate 配成 HA，哪些东西需要匹配？ | If I configure two firewalls in HA, what things need to match? | HA 前置条件 |
| 14 | 09:51 |
HA 配好后需要几条链路？只要一条，还是要多条？ | How many links do I require? Only one link, or multiple links? | heartbeat 链路 |
| 15 | 10:27 |
除了数据同步的链路，其他链路还有什么用？ | What other link is useful? | data sync / data plane / control plane |
🛠️ 防火墙策略与排障
一组场景题，反复考察排障思路。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 16 | 12:18 |
分支用户能 ping 通远端服务器，VPN 和 HTTPS 都正常，但其他服务失败，你怎么排查？ | VPN is connected and HTTPS is working, but other services are failing. How do you troubleshoot? | 分层排障 |
| 17 | 13:56 |
防火墙配置都正确，但其他服务仍然不通，还有其他可能吗？ | Is there any other possibility, if the firewall configuration is correct but other services are still not working? | security profile |
| 18 | 14:27 |
应用在防火墙里已经被允许，用户仍然打不开，你怎么排查？ | I allow the application in the firewall but the user still cannot open it. How do you troubleshoot? | policy / profile / 命中情况 |
| 19 | 16:15 |
防火墙里已经拒绝了某个应用，用户却仍然能打开，你怎么排查？ | You deny some application and the user is still able to open it. How do you troubleshoot? | policy 顺序、用户侧原因 |
| 20 | 17:13 |
除了用户这一侧，还有哪些配置错误的可能？ | Except the user, is there any other possibility of misconfiguration or wrong configuration? | commit、默认路由、DNS 等 |
🧪 实验经验
确认候选人的经验是生产环境还是虚拟实验。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 21 | 15:21 |
你做过哪些 lab 实践或场景项目？是生产环境的真实经验，还是只做过虚拟 lab？ | Whatever lab practice or scenario project you have done, is it a live experience on production, or just the virtual lab? | 实操背景 |
📊 SIEM 与 SOC
最后转向安全运营岗位的理解。
| # | 时间 | 面试问题 | English | 考察点 |
|---|---|---|---|---|
| 22 | 17:44 |
SIEM 和 SOC 的区别是什么？ | Can you tell me the difference between SIEM and SOC? | 安全运营概念 |
| 23 | 18:58 |
如果我雇你做 SOC analyst，日常工作是什么？ | If I hire you as a SOC analyst, what kind of tasks do you have to do? | 岗位认知 |
| 24 | 19:55 |
每家公司都需要提供培训吗？你说的是什么样的培训？ | Does every company need to provide training? What kind of training are you talking about? | 职业预期 |
浙公网安备 33010602011771号