Question 1

Hardware VPNs create a gateway-to-gateway VPN.

Accepted Answer

A) True 
 B)False  True

Question 2

Which VPN protocol uses UDP port 1701 and does not provide confidentiality and authentication?

Accepted Answer

A)  IPsec 
B)  L2TP 
C)  PPTP 
D)  SSL 
A)  IPsec 
B)  L2TP 
C)  PPTP 
D)  SSL B

Question 3

How is authentication implemented in a VPN?

Accepted Answer

The type of authentication used in a VPN depends on the tunneling protocol.Many networks
use IPsec to authenticate users; VPN participants establish an SA and exchange keys to authenticate one another.PPTP,which is used for dial-up access to a remote server,uses MS-CHAP,in which both computers exchange authentication packets.TLS/SSL uses certificate-based authentication.RADIUS is also commonly used for authentication services in VPN architecture.
VPNs also use digital certificates to authenticate users and encryption to ensure that communications cannot be read even if they are intercepted in transit.

Question 4

Which of the following is NOT an essential element of a VPN?

Accepted Answer

A)  VPN server 
B)  tunnel 
C)  VPN client 
D)  authentication server 
A)  VPN server 
B)  tunnel 
C)  VPN client 
D)  authentication server

Question 5

Which VPN protocol is a poor choice for high-performance networks with many hosts due to vulnerabilities in MS-CHAP?

Accepted Answer

A)  SSL 
B)  L2TP 
C)  IPsec 
D)  PPTP 
A)  SSL 
B)  L2TP 
C)  IPsec 
D)  PPTP

Question 6

MATCHING
-a protocol developed by Netscape Communications Corporation as a way of enabling Web servers and browsers to exchange encrypted information

Accepted Answer

A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT 
A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT

Question 7

Network gateways are ____________ of the VPN connection.

Accepted Answer

The answer of Network gateways are ____________ of the VPN...

Question 8

Which of the following is true about using VPNs?

Accepted Answer

A)  more expensive than leased lines 
B)  can use an existing broadband connection 
C)  usually higher performance than leased lines 
D)  not dependent on an ISP 
A)  more expensive than leased lines 
B)  can use an existing broadband connection 
C)  usually higher performance than leased lines 
D)  not dependent on an ISP

Question 9

Which of the following is a disadvantage of putting the VPN on a firewall?

Accepted Answer

A)  centralized control of network access security 
B)  more configuration mistakes 
C)  VPN and firewall use the same configuration tools 
D)  Internet and VPN traffic compete for resources 
A)  centralized control of network access security 
B)  more configuration mistakes 
C)  VPN and firewall use the same configuration tools 
D)  Internet and VPN traffic compete for resources

Question 10

What are the two modes in which IPsec can be configured to run?

Accepted Answer

A)  transit and gateway 
B)  client and server 
C)  header and payload 
D)  tunnel and transport 
A)  transit and gateway 
B)  client and server 
C)  header and payload 
D)  tunnel and transport

Question 11

MATCHING
-an IETF standard for secure authentication of requests for resource access

Accepted Answer

A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT 
A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT

Question 12

MATCHING
-a nonproprietary tunneling protocol that can encapsulate a variety of Network layer protocols

Accepted Answer

A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT 
A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT

Question 13

List two advantages and two disadvantages of VPNs.

Accepted Answer

Advantages:
Far less expensive than leas

Question 14

MATCHING
-a digital token sent from the Authentication Server to the client

Accepted Answer

A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT 
A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT

Question 15

MATCHING
-an IPsec protocol that encrypts the header and data components of TCP/IP packets

Accepted Answer

A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT 
A) AH 
B) ESP 
C) GRE 
D) IKE 
E) IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT

Question 16

Which IPsec component is software that handles the tasks of encrypting,authenticating, decrypting,and checking packets?

Accepted Answer

A)  ISAKMP 
B)  IKE 
C)  IPsec driver 
D)  Oakley protocol 
A)  ISAKMP 
B)  IKE 
C)  IPsec driver 
D)  Oakley protocol

Question 17

What is AES and why is AES a better encryption method to use compared to DES?

Accepted Answer

AES is stronger than 3DES and works fast

Question 18

If you use Windows RRAS for your VPN,you will need a third-party RADIUS server if you want to use RADIUS for authentication.

Accepted Answer

A) True 
 B)False

Question 19

Which of the following is NOT a factor a secure VPN design should address?

Accepted Answer

A)  encryption 
B)  authentication 
C)  nonrepudiation 
D)  performance 
A)  encryption 
B)  authentication 
C)  nonrepudiation 
D)  performance

Question 20

Which of the following is true about software VPNs?

Accepted Answer

A)  more cost-effective than hardware VPNs 
B)  best when all router and firewall hardware is the same 
C)  usually less flexible than hardware VPNs 
D)  configuration is easy since there is no OS to rely upon 
A)  more cost-effective than hardware VPNs 
B)  best when all router and firewall hardware is the same 
C)  usually less flexible than hardware VPNs 
D)  configuration is easy since there is no OS to rely upon

Hardware VPNs create a gateway-to-gateway VPN.

Which VPN protocol uses UDP port 1701 and does not provide confidentiality and authentication?

How is authentication implemented in a VPN?

Which of the following is NOT an essential element of a VPN?

Which VPN protocol is a poor choice for high-performance networks with many hosts due to vulnerabilities in MS-CHAP?

MATCHING -a protocol developed by Netscape Communications Corporation as a way of enabling Web servers and browsers to exchange encrypted information

Network gateways are ____________ of the VPN connection.

Which of the following is true about using VPNs?

Which of the following is a disadvantage of putting the VPN on a firewall?

What are the two modes in which IPsec can be configured to run?

MATCHING -an IETF standard for secure authentication of requests for resource access

MATCHING -a nonproprietary tunneling protocol that can encapsulate a variety of Network layer protocols

List two advantages and two disadvantages of VPNs.

MATCHING -a digital token sent from the Authentication Server to the client

MATCHING -an IPsec protocol that encrypts the header and data components of TCP/IP packets

Which IPsec component is software that handles the tasks of encrypting,authenticating, decrypting,and checking packets?

What is AES and why is AES a better encryption method to use compared to DES?

If you use Windows RRAS for your VPN,you will need a third-party RADIUS server if you want to use RADIUS for authentication.

Which of the following is NOT a factor a secure VPN design should address?

Which of the following is true about software VPNs?

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

Internet and World Wide Web Security

Security Policy Design and Implementation

On-Going Security Management

Filters

Exam 11: VPN Concepts

Hardware VPNs create a gateway-to-gateway VPN.

Which VPN protocol uses UDP port 1701 and does not provide confidentiality and authentication?

How is authentication implemented in a VPN?

Which of the following is NOT an essential element of a VPN?

Which VPN protocol is a poor choice for high-performance networks with many hosts due to vulnerabilities in MS-CHAP?

MATCHING -a protocol developed by Netscape Communications Corporation as a way of enabling Web servers and browsers to exchange encrypted information

Network gateways are ____________ of the VPN connection.

Which of the following is true about using VPNs?

Which of the following is a disadvantage of putting the VPN on a firewall?

What are the two modes in which IPsec can be configured to run?

MATCHING -an IETF standard for secure authentication of requests for resource access

MATCHING -a nonproprietary tunneling protocol that can encapsulate a variety of Network layer protocols

List two advantages and two disadvantages of VPNs.

MATCHING -a digital token sent from the Authentication Server to the client

MATCHING -an IPsec protocol that encrypts the header and data components of TCP/IP packets

Which IPsec component is software that handles the tasks of encrypting,authenticating, decrypting,and checking packets?

What is AES and why is AES a better encryption method to use compared to DES?

If you use Windows RRAS for your VPN,you will need a third-party RADIUS server if you want to use RADIUS for authentication.

Which of the following is NOT a factor a secure VPN design should address?

Which of the following is true about software VPNs?

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

Internet and World Wide Web Security

Security Policy Design and Implementation

On-Going Security Management

Filters