Question 1

Which is NOT true about L2TP technology?

Accepted Answer

A) It is based on a combination of PPTP and Cisco's layer 2 forwarding protocol. 
B) It is supported by all versions of Windows since NT. 
C) It works only with public IP addresses. 
D) It can use IPSec for encryption. 
A) It is based on a combination of PPTP and Cisco's layer 2 forwarding protocol. 
B) It is supported by all versions of Windows since NT. 
C) It works only with public IP addresses. 
D) It can use IPSec for encryption. C

Question 2

Which is NOT true about development of IPSec?

Accepted Answer

A) IPSec is built into Windows operating systems such as Windows XP Internet Connection Firewall. 
B) IPSec requires sending and receiving devices to share a single encryption key. 
C) IPSec provides two encryption modes and no additional protocols for encrypting data. 
D) IPSec was developed by the IETF to support secure exchange of packets. 
A) IPSec is built into Windows operating systems such as Windows XP Internet Connection Firewall. 
B) IPSec requires sending and receiving devices to share a single encryption key. 
C) IPSec provides two encryption modes and no additional protocols for encrypting data. 
D) IPSec was developed by the IETF to support secure exchange of packets. C

Question 3

____________ tunneling protocol is an older VPN protocol sometimes considered less secure than newer ones.

Accepted Answer

Point-to-point

Question 4

What two types of tunneling are supported by PPTP?

Accepted Answer

A) Compulsory and voluntary 
B) Encapsulated and non-encapsulated 
C) Mandatory and optional 
D) Point-to-point and layer 2 
A) Compulsory and voluntary 
B) Encapsulated and non-encapsulated 
C) Mandatory and optional 
D) Point-to-point and layer 2

Question 5

In a(n)____________ attack,the attacker records the actual transmission of a username and password in order to use the recording later to gain fraudulent access.

Accepted Answer

The answer of In a(n)____________ attack,the attacker records the actual...

Question 6

Which is NOT part of basic VPN capability?

Accepted Answer

A) Circuit-switched connection over the Internet 
B) Encryption and decryption of data 
C) Encapsulation and tunneling 
D) User authentication and access control 
A) Circuit-switched connection over the Internet 
B) Encryption and decryption of data 
C) Encapsulation and tunneling 
D) User authentication and access control

Question 7

Which IPSec mode enables encryption of the header and data during a VPN connection?

Accepted Answer

A) Point-to-point encryption mode 
B) Transport mode 
C) Tunnel mode 
D) VPN encryption mode 
A) Point-to-point encryption mode 
B) Transport mode 
C) Tunnel mode 
D) VPN encryption mode

Question 8

What is a hash function?

Accepted Answer

A) A password encryption method using a variable mathematical equation 
B) A secure encryption key determined by a mathematical calculation on the password 
C) The mathematical transformation of a variable-sized input that returns a fixed-length string 
D) The transformation of an encrypted variable-length password by a mathematical string 
A) A password encryption method using a variable mathematical equation 
B) A secure encryption key determined by a mathematical calculation on the password 
C) The mathematical transformation of a variable-sized input that returns a fixed-length string 
D) The transformation of an encrypted variable-length password by a mathematical string

Question 9

Which is a very basic authentication protocol that transmits passwords in unencrypted clear text?

Accepted Answer

A) CHAP 
B) EAP 
C) PAP 
D) SPAP 
A) CHAP 
B) EAP 
C) PAP 
D) SPAP

Question 10

A PPTP tunneling capability that begins with a PPP dial-up and then permits the remote client to choose whether to launch a secure VPN session is called ____________ tunneling.

Accepted Answer

The answer of A PPTP tunneling capability that begins with...

Question 11

At what layer of the OSI model does PPTP work?

Accepted Answer

A) Layer 1 
B) Layer 2 
C) Layer 3 
D) Layers 2 and 3 
A) Layer 1 
B) Layer 2 
C) Layer 3 
D) Layers 2 and 3

Question 12

What is a virtual private network?

Accepted Answer

A) A method for remote users to connect to a network via a leased line 
B) A method for Internet users to connect to a network via a dedicated line 
C) A method for users at other sites to connect to a private network via the Internet 
D) A method for a remote office to connect to a private network via a leased line 
A) A method for remote users to connect to a network via a leased line 
B) A method for Internet users to connect to a network via a dedicated line 
C) A method for users at other sites to connect to a private network via the Internet 
D) A method for a remote office to connect to a private network via a leased line

Question 13

Which is true of a virtual private network?

Accepted Answer

A) It connects via a private network connection. 
B) It emulates a direct network connection. 
C) It is faster than a typical broadband connection. 
D) It utilizes inexpensive leased lines. 
A) It connects via a private network connection. 
B) It emulates a direct network connection. 
C) It is faster than a typical broadband connection. 
D) It utilizes inexpensive leased lines.

Question 14

What encryption technology is used by the module offered by Cisco to provide VPN capability with Cisco switches and routers?

Accepted Answer

A) 3DES 
B) AES 
C) DES 
D) IPSec 
A) 3DES 
B) AES 
C) DES 
D) IPSec

Question 15

What makes SPAP susceptible to fraudulent login attacks via a recorded authentication exchange?

Accepted Answer

A) SPAP does not encrypt the username and password. 
B) SPAP uses weak encryption that is easily decrypted. 
C) SPAP uses the same reversible encryption method every time. 
D) SPAP transmits the decryption key during the exchange. 
A) SPAP does not encrypt the username and password. 
B) SPAP uses weak encryption that is easily decrypted. 
C) SPAP uses the same reversible encryption method every time. 
D) SPAP transmits the decryption key during the exchange.

Question 16

The part of a VPN connection in which the data is encapsulated is called a(n)____________.

Accepted Answer

The answer of The part of a VPN connection in...

Question 17

Which common VPN technology supports five authentication methods?

Accepted Answer

A) IPSec 
B) L2TP 
C) PPP 
D) PPTP 
A) IPSec 
B) L2TP 
C) PPP 
D) PPTP

Question 18

Which is NOT true about MS-CHAP?

Accepted Answer

A) It was designed to integrate with encryption and hashing algorithms of Microsoft Windows. 
B) It requires the authenticator to store a reversibly encrypted password. 
C) It defines a set of reason-for-failure codes readable by Microsoft Windows. 
D) It does not require clear-text passwords to be stored by the authenticator. 
A) It was designed to integrate with encryption and hashing algorithms of Microsoft Windows. 
B) It requires the authenticator to store a reversibly encrypted password. 
C) It defines a set of reason-for-failure codes readable by Microsoft Windows. 
D) It does not require clear-text passwords to be stored by the authenticator.

Question 19

Which authentication method was designed specifically for PPTP?

Accepted Answer

A) Challenge Handshake Authentication Protocol 
B) Extensible Authentication Protocol 
C) Password Authentication Protocol 
D) Shiva Password Authentication Protocol 
A) Challenge Handshake Authentication Protocol 
B) Extensible Authentication Protocol 
C) Password Authentication Protocol 
D) Shiva Password Authentication Protocol

Question 20

To serve its purpose,a(n)____________ allows a remote user to connect to a private network just as if he were at a local client inside the network.

Accepted Answer

The answer of To serve its purpose,a(n)____________ allows a remote...

Which is NOT true about L2TP technology?

Which is NOT true about development of IPSec?

____________ tunneling protocol is an older VPN protocol sometimes considered less secure than newer ones.

What two types of tunneling are supported by PPTP?

In a(n)____________ attack,the attacker records the actual transmission of a username and password in order to use the recording later to gain fraudulent access.

Which is NOT part of basic VPN capability?

Which IPSec mode enables encryption of the header and data during a VPN connection?

What is a hash function?

Which is a very basic authentication protocol that transmits passwords in unencrypted clear text?

A PPTP tunneling capability that begins with a PPP dial-up and then permits the remote client to choose whether to launch a secure VPN session is called ____________ tunneling.

At what layer of the OSI model does PPTP work?

What is a virtual private network?

Which is true of a virtual private network?

What encryption technology is used by the module offered by Cisco to provide VPN capability with Cisco switches and routers?

What makes SPAP susceptible to fraudulent login attacks via a recorded authentication exchange?

The part of a VPN connection in which the data is encapsulated is called a(n)____________.

Which common VPN technology supports five authentication methods?

Which is NOT true about MS-CHAP?

Which authentication method was designed specifically for PPTP?

To serve its purpose,a(n)____________ allows a remote user to connect to a private network just as if he were at a local client inside the network.

Introduction to Network Security

Types of Attacks

Fundamentals of Firewalls

Firewall Practical Applications

Intrusion-Detection Systems

Encryption

Operating System Hardening

Defending Against Virus Attacks

Defending Against Trojan Horses,spyware,and Adware

Security Policies

Assessing a System

Security Standards

Choosing Defense Strategies

Filters

Exam 7: Virtual Private Networks

Which is NOT true about L2TP technology?

Which is NOT true about development of IPSec?

____________ tunneling protocol is an older VPN protocol sometimes considered less secure than newer ones.

What two types of tunneling are supported by PPTP?

In a(n)____________ attack,the attacker records the actual transmission of a username and password in order to use the recording later to gain fraudulent access.

Which is NOT part of basic VPN capability?

Which IPSec mode enables encryption of the header and data during a VPN connection?

What is a hash function?

Which is a very basic authentication protocol that transmits passwords in unencrypted clear text?

A PPTP tunneling capability that begins with a PPP dial-up and then permits the remote client to choose whether to launch a secure VPN session is called ____________ tunneling.

At what layer of the OSI model does PPTP work?

What is a virtual private network?

Which is true of a virtual private network?

What encryption technology is used by the module offered by Cisco to provide VPN capability with Cisco switches and routers?

What makes SPAP susceptible to fraudulent login attacks via a recorded authentication exchange?

The part of a VPN connection in which the data is encapsulated is called a(n)____________.

Which common VPN technology supports five authentication methods?

Which is NOT true about MS-CHAP?

Which authentication method was designed specifically for PPTP?

To serve its purpose,a(n)____________ allows a remote user to connect to a private network just as if he were at a local client inside the network.

Introduction to Network Security

Types of Attacks

Fundamentals of Firewalls

Firewall Practical Applications

Intrusion-Detection Systems

Encryption

Operating System Hardening

Defending Against Virus Attacks

Defending Against Trojan Horses,spyware,and Adware

Security Policies

Assessing a System

Security Standards

Choosing Defense Strategies

Filters