Question 1

Today, the widespread acceptance of IPSec with the IKE system means that proprietary protocols are used far more often.

Accepted Answer

A) True 
 B)False  False

Question 2

What is the advantage of using a hardware VPN appliance?

Accepted Answer

The advantage of using a hardware VPN appliance is that it enables you to connect more tunnels and users than software systems do. If the server goes offline or crashes for some reason, the hardware VPN appliance doesn't go offline.

Question 3

Which centralized authentication method is the latest and strongest version of a set of authentication protocols developed by Cisco Systems?

Accepted Answer

A)  TACACS+ 
B)  RADIUS 
C)  Kerberos 
D)  MD5 
A)  TACACS+ 
B)  RADIUS 
C)  Kerberos 
D)  MD5 A

Question 4

Why is it important to rename a system default account?

Accepted Answer

All operating systems come with a preins

Question 5

A TCP/IP ____________________ is a channel or pathway over a packet network used by the VPN.

Accepted Answer

The answer of A TCP/IP ____________________ is a channel or...

Question 6

Describe the L2TP Layer 2 Tunneling Protocol (L2TP).

Accepted Answer

L2TP is an extension of PPP. It uses IPS

Question 7

Which level in the U.S. military data classification scheme applies to any information or material the unauthorized disclosure of which reasonably could be expected to cause damage to the national security?

Accepted Answer

A)  Secret data 
B)  Confidential data 
C)  Sensitive but unclassified (SBU) data 
D)  Top secret data 
A)  Secret data 
B)  Confidential data 
C)  Sensitive but unclassified (SBU) data 
D)  Top secret data

Question 8

The growth and widespread use of the Internet has been coupled with the use of encryption technology to produce a solution for specific types of private communication channels: ____.

Accepted Answer

A)  TACACS+ 
B)  virtual private networks (VPNs) 
C)  split tunneling 
D)  multifactor authentication 
A)  TACACS+ 
B)  virtual private networks (VPNs) 
C)  split tunneling 
D)  multifactor authentication

Question 9

Briefly describe multifactor authentication.

Accepted Answer

Multifactor authentication uses two or m

Question 10

List and briefly describe the six functional characteristic categories that can be used to categorize access controls.

Accepted Answer

There are a number of ways to categorize

Question 11

Separation of duties reduces the chance of an individual violating information security policy and breaching the confidentiality, integrity, and availability of information.

Accepted Answer

A) True 
 B)False

Question 12

In order to implement MAC, a strict user and data classification scheme is required.

Accepted Answer

A) True 
 B)False

Question 13

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-Each participant in the VPN has an approved relationship, called a security association (SA), with every other participant.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Question 14

A ____ attack is time-intensive, so they are rarely aimed at the target system in general.

Accepted Answer

A)  dictionary 
B)  war dialer 
C)  brute-force 
D)  rainbow 
A)  dictionary 
B)  war dialer 
C)  brute-force 
D)  rainbow

Question 15

PPTP provides stronger protection than L2TP.

Accepted Answer

A) True 
 B)False

Question 16

Which access control principle restricts users to having access appropriate to the level required for their assigned duties?

Accepted Answer

A)  Least privilege 
B)  Need to know 
C)  Role based controls 
D)  Separation of duties 
A)  Least privilege 
B)  Need to know 
C)  Role based controls 
D)  Separation of duties

Question 17

Describe how session authentication works.

Accepted Answer

Session authentication requires authenti

Question 18

Client authentication is similar to user authentication but with the addition of ____.

Accepted Answer

A)  integrated authorization 
B)  file restrictions 
C)  usage limits 
D)  multifactor authentication 
A)  integrated authorization 
B)  file restrictions 
C)  usage limits 
D)  multifactor authentication

Question 19

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-A network accessible to remote users who need dial-in access.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Question 20

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-A single VPN router contains records of all SAs in the VPN.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Today, the widespread acceptance of IPSec with the IKE system means that proprietary protocols are used far more often.

What is the advantage of using a hardware VPN appliance?

Which centralized authentication method is the latest and strongest version of a set of authentication protocols developed by Cisco Systems?

Why is it important to rename a system default account?

A TCP/IP ____________________ is a channel or pathway over a packet network used by the VPN.

Describe the L2TP Layer 2 Tunneling Protocol (L2TP).

Which level in the U.S. military data classification scheme applies to any information or material the unauthorized disclosure of which reasonably could be expected to cause damage to the national security?

The growth and widespread use of the Internet has been coupled with the use of encryption technology to produce a solution for specific types of private communication channels: ____.

Briefly describe multifactor authentication.

List and briefly describe the six functional characteristic categories that can be used to categorize access controls.

Separation of duties reduces the chance of an individual violating information security policy and breaching the confidentiality, integrity, and availability of information.

In order to implement MAC, a strict user and data classification scheme is required.

A ____ attack is time-intensive, so they are rarely aimed at the target system in general.

PPTP provides stronger protection than L2TP.

Which access control principle restricts users to having access appropriate to the level required for their assigned duties?

Describe how session authentication works.

Client authentication is similar to user authentication but with the addition of ____.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A network accessible to remote users who need dial-in access.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A single VPN router contains records of all SAs in the VPN.

Introduction to Information Security

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters

Exam 5: Network Authentication and Remote Access Using Vpn

Today, the widespread acceptance of IPSec with the IKE system means that proprietary protocols are used far more often.

What is the advantage of using a hardware VPN appliance?

Which centralized authentication method is the latest and strongest version of a set of authentication protocols developed by Cisco Systems?

Why is it important to rename a system default account?

A TCP/IP ____________________ is a channel or pathway over a packet network used by the VPN.

Describe the L2TP Layer 2 Tunneling Protocol (L2TP).

Which level in the U.S. military data classification scheme applies to any information or material the unauthorized disclosure of which reasonably could be expected to cause damage to the national security?

The growth and widespread use of the Internet has been coupled with the use of encryption technology to produce a solution for specific types of private communication channels: ____.

Briefly describe multifactor authentication.

List and briefly describe the six functional characteristic categories that can be used to categorize access controls.

Separation of duties reduces the chance of an individual violating information security policy and breaching the confidentiality, integrity, and availability of information.

In order to implement MAC, a strict user and data classification scheme is required.

A ____ attack is time-intensive, so they are rarely aimed at the target system in general.

PPTP provides stronger protection than L2TP.

Which access control principle restricts users to having access appropriate to the level required for their assigned duties?

Describe how session authentication works.

Client authentication is similar to user authentication but with the addition of ____.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A network accessible to remote users who need dial-in access.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A single VPN router contains records of all SAs in the VPN.

Introduction to Information Security

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters