Question 1

Which term refers to two connections over a VPN line?

Accepted Answer

A)  High speed Internet connection 
B)  Cross-over communication 
C)  Dual tunneling 
D)  Split tunneling

Question 2

Describe how rule-based access controls can be implemented in the DAC model.

Accepted Answer

The answer of Describe how rule-based access controls can be...

Question 3

A ____ is an automatic phone-dialing program that dials every phone number in a configured range and checks to see if a person, answering machine, or modem answers.

Accepted Answer

A)  dictionary attack 
B)  rainbow attack 
C)  brute force attack 
D)  war dialer

Question 4

Describe the two IPSec modes of operation.

Accepted Answer

The answer of Describe the two IPSec modes of operation....

Question 5

Which access control principle is most frequently associated with data classification?

Accepted Answer

A)  Least privilege 
B)  Need to know 
C)  Role based controls 
D)  Separation of duties

Question 6

A bank's automated teller machine (ATM), which restricts authorized users to simple account queries, transfers, deposits, and withdrawals is an example of ____ access control.

Accepted Answer

A)  content-dependent 
B)  constrained user interface 
C)  temporal (time-based) isolation 
D)  classified

Question 7

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-Generally less expensive than hardware systems, and they tend to scale better on fast-growing networks.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Question 8

Describe how challenge-response passwords work.

Accepted Answer

The answer of Describe how challenge-response passwords work....

Question 9

The generally accepted definition of ____________________ refers to guessing, breaking, and/or stealing passwords to gain access to a system or application.

Accepted Answer

The answer of The generally accepted definition of ____________________ refers...

Question 10

____________________ is the act of confirming the identity or user account.

Accepted Answer

The answer of ____________________ is the act of confirming the...

Question 11

Which authentication method is used when you want a client to be authenticated for each session?

Accepted Answer

A)  User authentication 
B)  Session authentication 
C)  Client authentication 
D)  Centralized authentication

Question 12

Some VPNs use the term ____ to describe everything in the protected network behind the gateway.

Accepted Answer

A)  safe house 
B)  encryption domain 
C)  encapsulation 
D)  tunnel

Question 13

A(n) ____________________ is basically an internal network restricted to employees within the organization, also using Internet technologies.

Accepted Answer

The answer of A(n) ____________________ is basically an internal network...

Question 14

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-Used when a dial-up user has an old system that doesn't support L2TP and needs to use PPP to establish a VPN connection to your network.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Question 15

IPSec ____ use a complex set of security protocols to protect information, including Internet Key Exchange (IKE), which provides for the exchange of security keys between the machines in the VPN.

Accepted Answer

A)  endpoints 
B)  access points 
C)  tunnels 
D)  concentrators

Question 16

____________________ is the process by which a computer system recognizes a user's identity.

Accepted Answer

The answer of ____________________ is the process by which a...

Question 17

Point-to-Point Protocol (PPP) over Secure Sockets Layer (SSL) and Point-to-Point Protocol (PPP) over Secure Shell (SSH) are two ____-based methods for creating VPNs.

Accepted Answer

A)  Microsoft 
B)  IBM 
C)  UNIX 
D)  Linux

Question 18

Match each item with a statement below.
a.Site-to-site VPN
f.PPTP
b.Client-to-site VPN
g.L2TP
c.VPN appliance
h.Mesh configuration
d.Software VPN
i.Hub-and-spoke configuration
e.IPSec/IKE
-A hardware device specially designed to terminate VPNs and join multiple LANs.

Accepted Answer

The answer of Match each item with a statement below.
a.Site-to-site...

Question 19

Most personal computer operating systems use the mandatory access control (MAC) model.

Accepted Answer

A) True 
 B)False

Question 20

Biometrics (retinal scans, fingerprints, and the like) are mainly used for ____ by large security-minded entities such as banking institutions and credit card centers for regulating access to sensitive information, but biometrics are also gaining ground in the general corporate world.

Accepted Answer

A)  authentication 
B)  auditing 
C)  accountability 
D)  authorization

Exam 5: Network Authentication and Remote Access Using Vpn

Which term refers to two connections over a VPN line?

Describe how rule-based access controls can be implemented in the DAC model.

A ____ is an automatic phone-dialing program that dials every phone number in a configured range and checks to see if a person, answering machine, or modem answers.

Describe the two IPSec modes of operation.

Which access control principle is most frequently associated with data classification?

A bank's automated teller machine (ATM) , which restricts authorized users to simple account queries, transfers, deposits, and withdrawals is an example of ____ access control.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -Generally less expensive than hardware systems, and they tend to scale better on fast-growing networks.

Describe how challenge-response passwords work.

The generally accepted definition of ____________________ refers to guessing, breaking, and/or stealing passwords to gain access to a system or application.

____________________ is the act of confirming the identity or user account.

Which authentication method is used when you want a client to be authenticated for each session?

Some VPNs use the term ____ to describe everything in the protected network behind the gateway.

A(n) ____________________ is basically an internal network restricted to employees within the organization, also using Internet technologies.

IPSec ____ use a complex set of security protocols to protect information, including Internet Key Exchange (IKE) , which provides for the exchange of security keys between the machines in the VPN.

____________________ is the process by which a computer system recognizes a user's identity.

Point-to-Point Protocol (PPP) over Secure Sockets Layer (SSL) and Point-to-Point Protocol (PPP) over Secure Shell (SSH) are two ____-based methods for creating VPNs.

Match each item with a statement below. a.Site-to-site VPN f.PPTP b.Client-to-site VPN g.L2TP c.VPN appliance h.Mesh configuration d.Software VPN i.Hub-and-spoke configuration e.IPSec/IKE -A hardware device specially designed to terminate VPNs and join multiple LANs.

Most personal computer operating systems use the mandatory access control (MAC) model.

Biometrics (retinal scans, fingerprints, and the like) are mainly used for ____ by large security-minded entities such as banking institutions and credit card centers for regulating access to sensitive information, but biometrics are also gaining ground in the general corporate world.