Deck 4: VPN Penetration Testing

Question 1

PPTP uses TCP port ____to establish a connection with a remote VPN server.

A) 950
B) 1546
C) 1624
D) 1723

Answer 1

1723

Question 2

SSL-based VPNs use standard Web-based protocols on TCP port ____.

A) 443
B) 500
C) 700
D) 1723

Answer 2

443

Question 3

The ____ option of IKE-Scan records the response time of all packets, and it delays for 60 seconds after the last packet is received.

A) -sU
B) -P0
C) -showbackoff
D) -p 500

Answer 3

-showbackoff

Question 4

Testers can use IKE-Scan with the ____ option to obtain IKE aggressive mode preshared keys through brute force or dictionary attacks.

A) -P0
B) -pskcrack
C) -p 500
D) -showbackoff

Question 5

____ is a command-line tool that uses the IKE protocol to discover, fingerprint, and test IPSec VPN servers.

A) IKE-Scan
B) IKEProbe
C) VPNmonitor
D) IKECrack

Question 6

____ supports preshared key cracking in IKE aggressive mode using preshared key authentication.

A) IKE-Scan
B) IKEProbe
C) VPNmonitor
D) IKECrack

Question 7

____ can be used to determine the vulnerabilities in the preshared key implementation of VPN servers.

A) IKE-Scan
B) IKEProbe
C) VPNmonitor
D) IKECrack

Question 8

____ analyzes and cracks preshared keys that use RFC-compliant aggressive mode authentication.

A) IKE-Scan
B) IKEProbe
C) VPNmonitor
D) IKECrack

Question 9

____ can monitor the VPN (PPTP and IPSec) and SSL (HTTPS) connectivity of both wired and wireless networks.

A) IKE-Scan
B) IKEProbe
C) VPNmonitor
D) IKECrack

Question 10

____ allows secure connections to any other PGPnet/IPSec host on the Internet regardless of whether the user has communicated with that host previously, without preconfiguration of that host.

A) PGPnet
B) IKEProbe
C) VPNmonitor
D) IKECrack