First you have to have a good EJB book. The following are the redbood that I read. I also list the chapters that I think are important.
IBM Websphere V4.0 Advance Edition Handbok: Chapter 15 - 19. IBM EJB Development with Visual Age for Java for WebSphere Application Server. Chapter 7 - chapter 19 Programming J2ee APIs with Websphere advanced Chapter Chapter 4 - 9. I don't have any security, ssl, or jsp tag question. The test objectives tell all what to test.