Exam 5: Network Authentication and Remote Access Using Vpn

Which term refers to two connections over a VPN line?

Describe how rule-based access controls can be implemented in the DAC model.

A ____ is an automatic phone-dialing program that dials every phone number in a configured range and checks to see if a person, answering machine, or modem answers.

Describe the two IPSec modes of operation.

Which access control principle is most frequently associated with data classification?

A bank's automated teller machine (ATM), which restricts authorized users to simple account queries, transfers, deposits, and withdrawals is an example of ____ access control.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -Generally less expensive than hardware systems, and they tend to scale better on fast-growing networks.

Describe how challenge-response passwords work.

The generally accepted definition of ____________________ refers to guessing, breaking, and/or stealing passwords to gain access to a system or application.

____________________ is the act of confirming the identity or user account.

Which authentication method is used when you want a client to be authenticated for each session?

Some VPNs use the term ____ to describe everything in the protected network behind the gateway.

A(n) ____________________ is basically an internal network restricted to employees within the organization, also using Internet technologies.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -Used when a dial-up user has an old system that doesn't support L2TP and needs to use PPP to establish a VPN connection to your network.

IPSec ____ use a complex set of security protocols to protect information, including Internet Key Exchange (IKE), which provides for the exchange of security keys between the machines in the VPN.

____________________ is the process by which a computer system recognizes a user's identity.

Point-to-Point Protocol (PPP) over Secure Sockets Layer (SSL) and Point-to-Point Protocol (PPP) over Secure Shell (SSH) are two ____-based methods for creating VPNs.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A hardware device specially designed to terminate VPNs and join multiple LANs.

Most personal computer operating systems use the mandatory access control (MAC) model.

Biometrics (retinal scans, fingerprints, and the like) are mainly used for ____ by large security-minded entities such as banking institutions and credit card centers for regulating access to sensitive information, but biometrics are also gaining ground in the general corporate world.