Quiz
Site-to-Site IPSec VPN I
This quiz has question types that open in the usual player.
Questions in this quiz (17)
1The three most used protocols in the suite are the following: (Select 3)
- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint – to – Point Tunneling Protocol (PPTP)
- ESecure Sockets Layer (SSL)
2[blank_start]lnternet Key Exchange (IKE)[blank_end], which does the handshake, tunnel maintenance, and disconnection.
[blank_start]Encapsulation Security Payload (ESP)[blank_end], which ensures data integrity andencryption.
[blank_start]Authentication Header (AH)[blank_end], which offers only data integrity-not encryption.- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
3FortiGate uses ESP to transport the packet payload and authenticate.
- ATrue
- BFalse
4IKE uses port
- AUDP 500
- BTCP 500
- CUDP 4500
- DTCP 4500
5IKE uses if NAT-T is enabled in a NAT scenario:
- AUDP port 4500
- BTCP port 4500
- CUDP port 5000
- DTCP port 5000
6SA
- ASecurity Association
- BSecurity Access
7For phase 1, there are two possible negotiation modes that can be used:
- Amain mode
- Baggressive mode
- Cquick mode
8Phase 2 uses only one negotiation mode:
- Aquick mode
- Bmain mode
- Caggressive mode
9AH is used by FortiGate
- ATrue
- BFalse
10IKE
- AInternet Key Exchange
- BInternal Key Exchange
- CInternal Keep Exchange
11ESP is
- AUDP encapsulated
- BTCP encapsulated
12Authenticates or encrypts packets using the following protocols:
- AInternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint-to-Point Tunneling Protocol (PPTP)
- ELayer 2 Tunneling Protocol (L2TP)
13Provides both data integrity and encryption:
- AEncapsulation Security Payload (ESP)
- BInternet Key Exchange (IKE)
- CAuthentication Header (AH)
14Easy configuration
Few tunnels
High central bandwidth
Not fault tolerant
Low system requirements on average,
but high for center
Scalable
No direct communication between
spokes- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
15Moderate configuration
Medium number of tunnels
Medium bandwidth in hub sites
Some fault tolerance
Medium system requirements
Somewhat scalable
Direct communication between some
sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
16Complex configuration
Many tunnels
Low bandwidth
Fault tolerant
High system requirements
Difficult to scale
Direct communication between all sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
17FortiOS provides two options for IPsec VPNs:
route-based (also known as [blank_start]interface-based[blank_end]) or policy-based (also known as [blank_start]tunnel-mode[blank_end]).- Ainterface-based
- Btunnel-mode
Information
- Description
- User has deleted their subject information Quiz on Site-to-Site IPSec VPN I, created by Deleted user on 11/04/2019.
- Author
- Deleted user
- Language
- English
- Views
- 41
- History
- Created on 11 Apr 2019 · updated on 11 Apr 2019
- Tags