Chapter 8

1. 1Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?

   1. Aconfidentiality
   2. Bintegrity
   3. Cauthentication
   4. Dsecure key exchange
2. 2Which transform set provides the best protection?

   1. Acrypto ipsec transform-set ESP-DES-SHA esp-aes-256 esp-sha-hmac
   2. Bcrypto ipsec transform-set ESP-DES-SHA esp-3des esp-sha-hmac
   3. Ccrypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
   4. Dcrypto ipsec transform-set ESP-DES-SHA esp-aes esp-des esp-sha-hmac
3. 3What is the function of the Diffie-Hellman algorithm within the IPsec framework?

   1. Aprovides authentication
   2. Bguarantees message integrity
   3. Callows peers to exchange shared keys
   4. Dprovides strong data encryption
4. 4Which type of site-to-site VPN uses trusted group members to eliminate point-to-point IPsec tunnels between the members of a group?

   1. ADMVPN
   2. BGETVPN
   3. CGRE
   4. DMPLS
5. 5What is the purpose of configuring multiple crypto ACLs when building a VPN connection between remote sites?

   1. ABy applying the ACL on a public interface, multiple crypto ACLs can be built to prevent public users from connecting to the VPN-enabled router.
   2. BMultiple crypto ACLs can define multiple remote peers for connecting with a VPN-enabled router across the Internet or network.
   3. CMultiple crypto ACLs can be configured to deny specific network traffic from crossing a VPN.
   4. DWhen multiple combinations of IPsec protection are being chosen, multiple crypto ACLs can define different traffic types.
6. 6Which statement describes the operation of the IKE protocol?

   1. AIt calculates shared keys based on the exchange of a series of data packets.
   2. BIt uses IPsec to establish the key exchange process.
   3. CIt uses sophisticated hashing algorithms to transmit keys directly across a network.
   4. DIt uses TCP port 50 to exchange IKE information between the security gateways.
7. 7The use of 3DES within the IPsec framework is an example of which of the five IPsec building blocks?

   1. Aconfidentiality
   2. Bnonrepudiation
   3. Cauthentication
   4. Dintegrity
8. 8What is an important characteristic of remote-access VPNs?

   1. AThe VPN configuration is identical between the remote devices.
   2. BInformation required to establish the VPN must remain static
   3. CThe VPN connection is initiated by the remote user.
   4. DInternal hosts have no knowledge of the VPN.
9. 9What is the purpose of NAT-T?

   1. Aenables NAT for PC-based VPN clients
   2. Bpermits VPN to work when NAT is being used on one or both ends of the VPN
   3. Cupgrades NAT for IPv4
   4. Dallows NAT to be used for IPv6 addresses
10. 10Consider the following configuration on a Cisco ASA:
    
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    
    What is the purpose of this command?

    1. Ato define the ISAKMP parameters that are used to establish the tunnel
    2. Bto define the encryption and integrity algorithms that are used to build the IPsec tunnel
    3. Cto define what traffic is allowed through and protected by the tunnel
    4. Dto define only the allowed encryption algorithms

11. 11Which statement accurately describes a characteristic of IPsec?

    1. AIPsec works at the application layer and protects all application data.
    2. BIPsec is a framework of standards developed by Cisco that relies on OSI algorithms.
    3. CIPsec is a framework of proprietary standards that depend on Cisco specific algorithms.
    4. DIPsec is a framework of open standards that relies on existing algorithms.
12. 12When is a security association (SA) created if an IPsec VPN tunnel is used to connect between two sites?

    1. Aafter the tunnel is created, but before traffic is sent
    2. Bonly during Phase 2
    3. Conly during Phase 1
    4. Dduring both Phase 1 and 2
13. 13A protocol that provides authentication, integrity, and confidentiality services and which is also type of VPN is called [blank_start]IPsec[blank_end].

    1. AIPsec
14. 14[blank_start]access list[blank_end] is needed to define interesting traffic in the creation of an IPsec tunnel.

    1. Aaccess list
15. 15The ISAKMP policy lists the [blank_start]security[blank_end] associations that a router is willing to use to establish a tunnel for IKE.

    1. Asecurity

Descripción

ITELEC Test sobre Chapter 8, creado por K eations el 14/12/2018.

Autor

K eations

Idioma

English

Visitas

0

Etiquetas

itelec

Valoración

Aún sin valoraciones

Valora este test

Valora este test

Más sobre IPsec VPN