Question 1

At any point in an IKE exchange the sender may include a _________ payload to request the certificate of the other communicating entity.

Accepted Answer

Certificate Request

Question 2

The principal feature of IPsec is that it can encrypt and/or authenticate all traffic at the IP level.

Accepted Answer

A) True 
 B)False  True

Question 3

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

Accepted Answer

Tunnel

Question 4

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

Accepted Answer

A) IAB 
B) SPI 
C) ESP 
D) SPD 
A) IAB 
B) SPI 
C) ESP 
D) SPD

Question 5

Additional padding may be added to provide partial traffic flow confidentiality by concealing the actual length of the payload.

Accepted Answer

A) True 
 B)False

Question 6

The term _________ refers to a sequence of SAs through which traffic must be processed to provide a desired set of IPsec services.

Accepted Answer

security a

Question 7

The _________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

Accepted Answer

A) security 
B) key management 
C) authentication 
D) confidentiality 
A) security 
B) key management 
C) authentication 
D) confidentiality

Question 8

IPsec is executed on a packet-by-packet basis.

Accepted Answer

A) True 
 B)False

Question 9

A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .

Accepted Answer

Security P

Question 10

Transport mode provides protection to the entire IP packet.

Accepted Answer

A) True 
 B)False

Question 11

An end user whose system is equipped with IP security protocols can make a local call to an ISP and gain secure access to a company network.

Accepted Answer

A) True 
 B)False

Question 12

The __________ facility is concerned with the secure exchange of keys.

Accepted Answer

The answer of The __________ facility is concerned with the...

Question 13

Authentication must be applied to the entire original IP packet.

Accepted Answer

A) True 
 B)False

Question 14

Generic in that it does not dictate specific formats,the _________ is a key exchange protocol based on the Diffie-Hellman algorithm with added security.

Accepted Answer

Oakley Key

Question 15

An individual SA can implement both the AH and the ESP protocol.

Accepted Answer

A) True 
 B)False

Question 16

Any traffic from the local host to a remote host for purposes of an IKE exchange bypasses the IPsec processing.

Accepted Answer

A) True 
 B)False

Question 17

The Security Parameters Index identifies a security association.

Accepted Answer

A) True 
 B)False

Question 18

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.

Accepted Answer

A) SPI 
B) ESP 
C) ISA 
D) IPsec 
A) SPI 
B) ESP 
C) ISA 
D) IPsec

Question 19

The __________ mechanism assures that a received packet was in fact transmitted by the party identified as the source in the packet header and assures that the packet has not been altered in transit.

Accepted Answer

A) confidentiality 
B) authentication 
C) security 
D) key management 
A) confidentiality 
B) authentication 
C) security 
D) key management

Question 20

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

Accepted Answer

A) SAD 
B) SPD 
C) SA 
D) SPI 
A) SAD 
B) SPD 
C) SA 
D) SPI

At any point in an IKE exchange the sender may include a _________ payload to request the certificate of the other communicating entity.

The principal feature of IPsec is that it can encrypt and/or authenticate all traffic at the IP level.

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

Additional padding may be added to provide partial traffic flow confidentiality by concealing the actual length of the payload.

The term _________ refers to a sequence of SAs through which traffic must be processed to provide a desired set of IPsec services.

The _________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

IPsec is executed on a packet-by-packet basis.

A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .

Transport mode provides protection to the entire IP packet.

An end user whose system is equipped with IP security protocols can make a local call to an ISP and gain secure access to a company network.

The __________ facility is concerned with the secure exchange of keys.

Authentication must be applied to the entire original IP packet.

Generic in that it does not dictate specific formats,the _________ is a key exchange protocol based on the Diffie-Hellman algorithm with added security.

An individual SA can implement both the AH and the ESP protocol.

Any traffic from the local host to a remote host for purposes of an IKE exchange bypasses the IPsec processing.

The Security Parameters Index identifies a security association.

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.

The __________ mechanism assures that a received packet was in fact transmitted by the party identified as the source in the packet header and assures that the packet has not been altered in transit.

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

Overview

Classical Encryption Techniques

Block Ciphers and the Data Encryption Standard

Basic Concepts in Number Theory and Finite Fields

Advanced Encryption Standard

Block Cipher Operation

Random and Pseudorandom Number

More Number Theory

Public-Key Cryptography and Rsa

Other Public-Key Cryptosystems

Cryptographic Hash Functions

Message Authentication Codes

Digital Signatures

Key Management and Distribution

User Authentication Protocols

Network Access Control and Cloud Security

Transport-Level Security

Wireless Network Security

Electronic Mail Security

Filters

Exam 20: Ip Security

At any point in an IKE exchange the sender may include a _________ payload to request the certificate of the other communicating entity.

The principal feature of IPsec is that it can encrypt and/or authenticate all traffic at the IP level.

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

Additional padding may be added to provide partial traffic flow confidentiality by concealing the actual length of the payload.

The term _________ refers to a sequence of SAs through which traffic must be processed to provide a desired set of IPsec services.

The _________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

IPsec is executed on a packet-by-packet basis.

A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .

Transport mode provides protection to the entire IP packet.

An end user whose system is equipped with IP security protocols can make a local call to an ISP and gain secure access to a company network.

The __________ facility is concerned with the secure exchange of keys.

Authentication must be applied to the entire original IP packet.

Generic in that it does not dictate specific formats,the _________ is a key exchange protocol based on the Diffie-Hellman algorithm with added security.

An individual SA can implement both the AH and the ESP protocol.

Any traffic from the local host to a remote host for purposes of an IKE exchange bypasses the IPsec processing.

The Security Parameters Index identifies a security association.

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.

The __________ mechanism assures that a received packet was in fact transmitted by the party identified as the source in the packet header and assures that the packet has not been altered in transit.

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

Overview

Classical Encryption Techniques

Block Ciphers and the Data Encryption Standard

Basic Concepts in Number Theory and Finite Fields

Advanced Encryption Standard

Block Cipher Operation

Random and Pseudorandom Number

More Number Theory

Public-Key Cryptography and Rsa

Other Public-Key Cryptosystems

Cryptographic Hash Functions

Message Authentication Codes

Digital Signatures

Key Management and Distribution

User Authentication Protocols

Network Access Control and Cloud Security

Transport-Level Security

Wireless Network Security

Electronic Mail Security

Filters