Test
Site-to-Site IPSec VPN I
Este test tiene tipos de pregunta que se abren en el reproductor de siempre.
Preguntas del test (17)
1The three most used protocols in the suite are the following: (Select 3)
- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint – to – Point Tunneling Protocol (PPTP)
- ESecure Sockets Layer (SSL)
2[blank_start]lnternet Key Exchange (IKE)[blank_end], which does the handshake, tunnel maintenance, and disconnection.
[blank_start]Encapsulation Security Payload (ESP)[blank_end], which ensures data integrity andencryption.
[blank_start]Authentication Header (AH)[blank_end], which offers only data integrity-not encryption.- Alnternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
3FortiGate uses ESP to transport the packet payload and authenticate.
- AVerdadero
- BFalso
4IKE uses port
- AUDP 500
- BTCP 500
- CUDP 4500
- DTCP 4500
5IKE uses if NAT-T is enabled in a NAT scenario:
- AUDP port 4500
- BTCP port 4500
- CUDP port 5000
- DTCP port 5000
6SA
- ASecurity Association
- BSecurity Access
7For phase 1, there are two possible negotiation modes that can be used:
- Amain mode
- Baggressive mode
- Cquick mode
8Phase 2 uses only one negotiation mode:
- Aquick mode
- Bmain mode
- Caggressive mode
9AH is used by FortiGate
- AVerdadero
- BFalso
10IKE
- AInternet Key Exchange
- BInternal Key Exchange
- CInternal Keep Exchange
11ESP is
- AUDP encapsulated
- BTCP encapsulated
12Authenticates or encrypts packets using the following protocols:
- AInternet Key Exchange (IKE)
- BEncapsulation Security Payload (ESP)
- CAuthentication Header (AH)
- DPoint-to-Point Tunneling Protocol (PPTP)
- ELayer 2 Tunneling Protocol (L2TP)
13Provides both data integrity and encryption:
- AEncapsulation Security Payload (ESP)
- BInternet Key Exchange (IKE)
- CAuthentication Header (AH)
14Easy configuration
Few tunnels
High central bandwidth
Not fault tolerant
Low system requirements on average,
but high for center
Scalable
No direct communication between
spokes- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
15Moderate configuration
Medium number of tunnels
Medium bandwidth in hub sites
Some fault tolerance
Medium system requirements
Somewhat scalable
Direct communication between some
sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
16Complex configuration
Many tunnels
Low bandwidth
Fault tolerant
High system requirements
Difficult to scale
Direct communication between all sites- AHub-and-Spoke
- BPartial Mesh
- CFull Mesh
17FortiOS provides two options for IPsec VPNs:
route-based (also known as [blank_start]interface-based[blank_end]) or policy-based (also known as [blank_start]tunnel-mode[blank_end]).- Ainterface-based
- Btunnel-mode
Información
- Descripción
- El usuario ha eliminado su información de asignaturas Test sobre Site-to-Site IPSec VPN I, creado por Usuario eliminado el 11/04/2019.
- Autor
- Usuario eliminado
- Idioma
- English
- Visitas
- 41
- Historial
- Creado el 11 abr 2019 · actualizado el 11 abr 2019
- Etiquetas