CH 7 & 8 HW and Exam Review

Question 1 of 13

1

What are two symmetric encryption algorithms? (Choose two.)

Select one or more of the following:

3DES
MD5
AES
HMAC
SHA

Explanation

Question 2 of 13

1

What is the reason for HMAC to use an additional secret key as input to the hash function?

Select one of the following:

to provide encryption
to provide authentication
to provide integrity verification
to prevent DoS attacks

Explanation

Question 3 of 13

1

If an asymmetric algorithm uses a public key to encrypt data, what is used to decrypt it?

Select one of the following:

DH
a private key
the same public key
a different public key

Explanation

Question 4 of 13

1

What is a difference between symmetric and asymmetric encryption algorithms?

Select one of the following:

Symmetric algorithms are typically hundreds to thousands of times slower than asymmetric algorithms.
Symmetric encryption algorithms are used to authenticate secure communications. Asymmetric encryption algorithms are used to repudiate messages.
Symmetric encryption algorithms are used to encrypt data. Asymmetric encryption algorithms are used to decrypt data.
Symmetric encryption algorithms use pre-shared keys. Asymmetric encryption algorithms use different keys to encrypt and decrypt data.

Explanation

Question 5 of 13

1

What is the purpose of the DH algorithm?

Select one of the following:

to provide nonrepudiation support
to support email data confidentiality
to encrypt data traffic after a VPN is established
to generate a shared key over an unsecured channel before data communications

Explanation

Question 6 of 13

1

Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash algorithm?

Select one of the following:

confidentiality
authentication
integrity
nonrepudiation

Explanation

Question 7 of 13

1

What is missing in the AH VPN?

Select one of the following:

confidentiality
integrity
authentication
secure key exchange
DH

Explanation

Question 8 of 13

1

Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?

Select one of the following:

confidentiality
integrity
authentication
secure key exchange

Explanation

Question 9 of 13

1

Which IPsec framework protocol provides data integrity and data authentication, but does not provide data confidentiality?

Select one of the following:

AH
IP protocol 50
ESP
DH

Explanation

Question 10 of 13

1

The use of 3DES within the IPsec framework is an example of which of the five IPsec building blocks?

Select one of the following:

authentication
confidentiality
Diffie-Hellman
integrity
nonrepudiation

Explanation

Question 11 of 13

1

Refer to exhibit above. The site-to-site VPN is configured correctly between R1 and R3 for the communications from PC-A to PC-C. When PC-A sends out traffic to PC-C, what item in the following will be sent in plain text? (Choose the most likely one.)

Select one of the following:

The PC-A’s IP address
The PC-C’s IP address
The data inside the IP packet
The R1’s s0/0/1’s IP address

Explanation

Question 12 of 13

1

Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?

Select one of the following:

The length of a key will not vary between encryption algorithms.
The length of a key does not affect the degree of security.
The shorter the key, the harder it is to break.
The longer the key, the more key possibilities exist.

Explanation

Question 13 of 13

1

Which statement describes a VPN?

Select one of the following:

VPNs use dedicated physical connections to transfer data between remote users.
VPNs use logical connections to create public networks through the Internet.
VPNs use open source virtualization software to create the tunnel through the Internet.
VPNs use virtual connections to create a private network through a public network.

	Created by Anthony Schulmeister over 7 years ago

CCNA SECURITY CH 7 & 8 HW and Exam Review

CH 7 & 8 HW and Exam Review

Question 1 of 13

What are two symmetric encryption algorithms? (Choose two.)

Select one or more of the following:

Explanation

Question 2 of 13

What is the reason for HMAC to use an additional secret key as input to the hash function?

Select one of the following:

Explanation

Question 3 of 13

If an asymmetric algorithm uses a public key to encrypt data, what is used to decrypt it?

Select one of the following:

Explanation

Question 4 of 13

What is a difference between symmetric and asymmetric encryption algorithms?

Select one of the following:

Explanation

Question 5 of 13

What is the purpose of the DH algorithm?

Select one of the following:

Explanation

Question 6 of 13

Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash algorithm?

Select one of the following:

Explanation

Question 7 of 13

What is missing in the AH VPN?

Select one of the following:

Explanation

Question 8 of 13

Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?

Select one of the following:

Explanation

Question 9 of 13

Which IPsec framework protocol provides data integrity and data authentication, but does not provide data confidentiality?

Select one of the following:

Explanation

Question 10 of 13

The use of 3DES within the IPsec framework is an example of which of the five IPsec building blocks?

Select one of the following:

Explanation

Question 11 of 13

Refer to exhibit above. The site-to-site VPN is configured correctly between R1 and R3 for the communications from PC-A to PC-C. When PC-A sends out traffic to PC-C, what item in the following will be sent in plain text? (Choose the most likely one.)

Select one of the following:

Explanation

Question 12 of 13

Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?

Select one of the following:

Explanation

Question 13 of 13

Which statement describes a VPN?

Select one of the following:

Explanation