Quiz
Site-to-Site IPSec VPN I
Dieses Quiz enthält Fragetypen, die sich im gewohnten Player öffnen.
Fragen in diesem Quiz (17)
1The three most used protocols in the suite are the following: (Select 3)
- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint – to – Point Tunneling Protocol (PPTP)
- ESecure Sockets Layer (SSL)
2[blank_start]lnternet Key Exchange (IKE)[blank_end], which does the handshake, tunnel maintenance, and disconnection.
[blank_start]Encapsulation Security Payload (ESP)[blank_end], which ensures data integrity andencryption.
[blank_start]Authentication Header (AH)[blank_end], which offers only data integrity-not encryption.- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
3FortiGate uses ESP to transport the packet payload and authenticate.
- ARichtig
- BFalsch
4IKE uses port
- AUDP 500
- BTCP 500
- CUDP 4500
- DTCP 4500
5IKE uses if NAT-T is enabled in a NAT scenario:
- AUDP port 4500
- BTCP port 4500
- CUDP port 5000
- DTCP port 5000
6SA
- ASecurity Association
- BSecurity Access
7For phase 1, there are two possible negotiation modes that can be used:
- Amain mode
- Baggressive mode
- Cquick mode
8Phase 2 uses only one negotiation mode:
- Aquick mode
- Bmain mode
- Caggressive mode
9AH is used by FortiGate
- ARichtig
- BFalsch
10IKE
- AInternet Key Exchange
- BInternal Key Exchange
- CInternal Keep Exchange
11ESP is
- AUDP encapsulated
- BTCP encapsulated
12Authenticates or encrypts packets using the following protocols:
(Select 3)- AInternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint-to-Point Tunneling Protocol (PPTP)
- ELayer 2 Tunneling Protocol (L2TP)
13Provides both data integrity and encryption:
- AEncapsulation Security Payload (ESP)
- BInternet Key Exchange (IKE)
- CAuthentication Header (AH)
14Easy configuration
Few tunnels
High central bandwidth
Not fault tolerant
Low system requirements on average,
but high for center
Scalable
No direct communication between
spokes- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
15Moderate configuration
Medium number of tunnels
Medium bandwidth in hub sites
Some fault tolerance
Medium system requirements
Somewhat scalable
Direct communication between some
sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
16Complex configuration
Many tunnels
Low bandwidth
Fault tolerant
High system requirements
Difficult to scale
Direct communication between all sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
17FortiOS provides two options for IPsec VPNs:
route-based (also known as [blank_start]interface-based[blank_end]) or policy-based (also known as [blank_start]tunnel-mode[blank_end]).- Ainterface-based
- Btunnel-mode
Informationen
- Beschreibung
- NSE4 6.0 NSE4 6.0 Quiz am Site-to-Site IPSec VPN I, erstellt von Marcos Avila am 21/07/2018.
- Autor
- Marcos Avila
- Sprache
- Español
- Aufrufe
- 312
- Schlagwörter
- Bewertung
- 4,0 von 5 · 1 Bewertung Bewerte dieses Quiz