Deck 5: Network Authentication and Remote Access Using Vpn

Question 1

A ____ is an automatic phone-dialing program that dials every phone number in a configured range and checks to see if a person, answering machine, or modem answers.

A) dictionary attack
C) brute force attack
B) rainbow attack
D) war dialer

Answer 1

D

Question 2

The growth and widespread use of the Internet has been coupled with the use of encryption technology to produce a solution for specific types of private communication channels: ____.

A) TACACS+
C) split tunneling
B) virtual private networks (VPNs)
D) multifactor authentication

Answer 2

B

Question 3

Which centralized authentication method uses UDP?

A) TACACS+
C) Kerberos
B) RADIUS
D) MD5

Answer 3

B

Question 4

Biometrics (retinal scans, fingerprints, and the like) are mainly used for ____ by large security-minded entities such as banking institutions and credit card centers for regulating access to sensitive information, but biometrics are also gaining ground in the general corporate world.

A) authentication
C) accountability
B) auditing
D) authorization

Question 5

A bank's automated teller machine (ATM), which restricts authorized users to simple account queries, transfers, deposits, and withdrawals is an example of ____ access control.

A) content-dependent
C) temporal (time-based) isolation
B) constrained user interface
D) classified

Question 6

A ____ is one in which the computer system enforces the controls without the input or intervention of the system or data owner.

A) role based control
C) mandatory access control (MAC)
B) network access control (NAC)
D) discretionary access control (DAC)

Question 7

Client authentication is similar to user authentication but with the addition of ____.

A) integrated authorization
C) usage limits
B) file restrictions
D) multifactor authentication

Question 8

Which access control principle is most frequently associated with data classification?

A) Least privilege
C) Role based controls
B) Need to know
D) Separation of duties

Question 9

Which level in the U.S. military data classification scheme applies to any information or material the unauthorized disclosure of which reasonably could be expected to cause damage to the national security?

A) Secret data
C) Sensitive but unclassified (SBU) data
B) Confidential data
D) Top secret data

Question 10

Which access control principle restricts users to having access appropriate to the level required for their assigned duties?

A) Least privilege
C) Role based controls
B) Need to know
D) Separation of duties

Question 11

Which centralized authentication method is the latest and strongest version of a set of authentication protocols developed by Cisco Systems?

A) TACACS+
C) Kerberos
B) RADIUS
D) MD5

Question 12

Which access control process documents the activities of the authenticated individual and systems?

A) Identification
C) Auditing
B) Authorization
D) Accountability

Question 13

Most personal computer operating systems use the mandatory access control (MAC) model.

Question 14

A(n) ____ is a list of authorization rights attached to an object - in other words, who can access that device or application and what can they do with it.

A) access control list (ACL)
C) security association (SA) table
B) rainbow table
D) state table

Question 15

Separation of duties reduces the chance of an individual violating information security policy and breaching the confidentiality, integrity, and availability of information.

Question 16

A ____ attack is time-intensive, so they are rarely aimed at the target system in general.

A) dictionary
C) brute-force
B) war dialer
D) rainbow

Question 17

PPTP provides stronger protection than L2TP.

Question 18

In order to implement MAC, a strict user and data classification scheme is required.

Question 19

Which authentication method is used when you want a client to be authenticated for each session?

A) User authentication
C) Client authentication
B) Session authentication
D) Centralized authentication

Question 20

Today, the widespread acceptance of IPSec with the IKE system means that proprietary protocols are used far more often.

Question 21

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
A hardware device specially designed to terminate VPNs and join multiple LANs.

Question 22

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Generally less expensive than hardware systems, and they tend to scale better on fast-growing networks.

Question 23

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Used when a dial-up user needs to establish a VPN connection with your network.

Question 24

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Rapidly becoming the protocol of choice for VPN connections of all sorts and should be used when the other protocols are not acceptable.

Question 25

Which term refers to two connections over a VPN line?

A) High speed Internet connection
C) Dual tunneling
B) Cross-over communication
D) Split tunneling

Question 26

The generally accepted definition of ____________________ refers to guessing, breaking, and/or stealing passwords to gain access to a system or application.

Question 27

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Used when a dial-up user has an old system that doesn't support L2TP and needs to use PPP to establish a VPN connection to your network.

Question 28

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Links two or more networks.

Question 29

A TCP/IP ____________________ is a channel or pathway over a packet network used by the VPN.

Question 30

A(n) ____________________ is basically an internal network restricted to employees within the organization, also using Internet technologies.

Question 31

IPSec ____ use a complex set of security protocols to protect information, including Internet Key Exchange (IKE), which provides for the exchange of security keys between the machines in the VPN.

A) endpoints
C) tunnels
B) access points
D) concentrators

Question 32

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
Each participant in the VPN has an approved relationship, called a security association (SA), with every other participant.

Question 33

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
A single VPN router contains records of all SAs in the VPN.

Question 34

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
A network accessible to remote users who need dial-in access.

Question 35

Some VPNs use the term ____ to describe everything in the protected network behind the gateway.

A) safe house
C) encapsulation
B) encryption domain
D) tunnel

Question 36

Point-to-Point Protocol (PPP) over Secure Sockets Layer (SSL) and Point-to-Point Protocol (PPP) over Secure Shell (SSH) are two ____-based methods for creating VPNs.

A) Microsoft
C) UNIX
B) IBM
D) Linux

Question 37

____ are hardware devices or software modules that perform encryption to secure data, perform authentication to make sure the host requesting the data is an approved user of the VPN, and perform encapsulation to protect the integrity of the information being sent.

A) Endpoints
C) Concentrators
B) Access points
D) Tunnels

Question 38

____________________ is the process by which a computer system recognizes a user's identity.

Question 39

____________________ is the act of confirming the identity or user account.

Question 40

VPNs protect packets by performing IP ____, the process of enclosing a packet within another one that has different IP source and destination information.

A) tiering
C) encryption
B) tunneling
D) encapsulation

Question 41

Describe the two IPSec modes of operation.

Question 42

Briefly describe multifactor authentication.

Question 43

Describe the drawbacks of using a VPN.

Question 44

Describe the L2TP Layer 2 Tunneling Protocol (L2TP).

Question 45

Describe how rule-based access controls can be implemented in the DAC model.

Question 46

Why is it important to rename a system default account?

Question 47

Describe how challenge-response passwords work.

Question 48

Describe how session authentication works.

Question 49

What is the advantage of using a hardware VPN appliance?

Question 50

List and briefly describe the six functional characteristic categories that can be used to categorize access controls.