CCNA 4v5.03 Chapter 7

1. 1A network design engineer is planning the implementation of a cost-effective method to interconnect multiple networks securely over the Internet. Which type of technology is required?

   1. Aa GRE IP tunnel
   2. Ba leased line
   3. Ca VPN gateway
   4. Da dedicated ISP
2. 2How is “tunneling” accomplished in a VPN?

   1. ANew headers from one or more VPN protocols encapsulate the original packets.
   2. BAll packets between two hosts are assigned to a single physical medium to ensure that the packets are kept private.
   3. CPackets are disguised to look like other types of traffic so that they will be ignored by potential attackers.
   4. DA dedicated circuit is established between the source and destination devices for the duration of the connection.
3. 3How can the use of VPNs in the workplace contribute to lower operating costs?

   1. AHigh-speed broadband technology can be replaced with leased lines.
   2. BVPNs can be used across broadband connections rather than dedicated WAN links.
   3. CVPNs prevents connectivity to SOHO users.
   4. DVPNs require a subscription from a specific Internet service provider that specializes in secure connections.
4. 4Two corporations have just completed a merger. The network engineer has been asked to connect the two corporate networks without the expense of leased lines. Which solution would be the most cost effective method of providing a proper and secure connection between the two corporate networks?

   1. ACisco AnyConnect Secure Mobility Client with SSL
   2. BCisco Secure Mobility Clientless SSL VPN
   3. CFrame Relay
   4. Dremote access VPN using IPsec
   5. Esite-to-site VPN
5. 5Which two scenarios are examples of remote access VPNs? (Choose two.)

   1. AA toy manufacturer has a permanent VPN connection to one of its parts suppliers.
   2. BAll users at a large branch office can access company resources through a single VPN connection.
   3. CA mobile sales agent is connecting to the company network via the Internet connection at a hotel.
   4. DA small branch office with three employees has a Cisco ASA that is used to create a VPN connection to the HQ.
   5. EAn employee who is working from home uses VPN client software on a laptop in order to connect to the company network.
6. 6Which statement describes a feature of site-to-site VPNs?

   1. AThe VPN connection is not statically defined.
   2. BVPN client software is installed on each host.
   3. CInternal hosts send normal, unencapsulated packets.
   4. DIndividual hosts can enable and disable the VPN connection.
7. 7Which remote access implementation scenario will support the use of generic routing encapsulation tunneling?

   1. Aa mobile user who connects to a router at a central site
   2. Ba branch office that connects securely to a central site
   3. Ca mobile user who connects to a SOHO site
   4. Da central site that connects to a SOHO site without encryption
8. 8Refer to the exhibit. A tunnel was implemented between routers R1 and R2. Which two conclusions can be drawn from the R1 command output? (Choose two.)

   

   1. AThis tunnel mode is not the default tunnel interface mode for Cisco IOS software.
   2. BThis tunnel mode provides encryption.
   3. CThe data that is sent across this tunnel is not secure.
   4. DThis tunnel mode does not support IP multicast tunneling.
   5. EA GRE tunnel is being used.
9. 9Refer to the exhibit. Which IP address would be configured on the tunnel interface of the destination router?

   

   1. A172.16.1.1
   2. B172.16.1.2
   3. C209.165.200.225
   4. D209.165.200.226
10. 10Which statement correctly describes IPsec?

    1. AIPsec works at Layer 3, but can protect traffic from Layer 4 through Layer 7.
    2. BIPsec uses algorithms that were developed specifically for that protocol.
    3. CIPsec implements its own method of authentication.
    4. DIPsec is a Cisco proprietary standard.

11. 11Which critical function that is provided by IPsec ensures that data has not been changed in transit between the source and destination?

    1. Aconfidentiality
    2. Bintegrity
    3. Cauthentication
    4. Danti-replay protection
12. 12Which service of IPsec verifies that secure connections are formed with the intended sources of data?

    1. Aauthentication
    2. Bconfidentiality
    3. Cdata integrity
    4. Dencryption
13. 13What is an IPsec protocol that provides data confidentiality and authentication for IP packets?

    1. AAH
    2. BESP
    3. CRSA
    4. DIKE
14. 14Which algorithm is an asymmetrical key cryptosystem?

    1. ARSA
    2. BAES
    3. C3DES
    4. DDES
15. 15Which two algorithms use Hash-based Message Authentication Code for message authentication? (Choose two.)

    1. A3DES
    2. BDES
    3. CAES
    4. DMD5
    5. ESHA
16. 16A network design engineer is planning the implementation of an IPsec VPN. Which hashing algorithm would provide the strongest level of message integrity?

    1. ASHA-1
    2. BMD5
    3. CAES
    4. D512-bit SHA
17. 17What is the purpose of utilizing Diffie-Hellman (DH) algorithms as part of the IPsec standard?

    1. ADH algorithms allow unlimited parties to establish a shared public key that is used by encryption and hash algorithms.
    2. BDH algorithms allow two parties to establish a shared secret key that is used by encryption and hash algorithms.
    3. CDH algorithms allow unlimited parties to establish a shared secret key that is used by encryption and hash algorithms.
    4. DDH algorithms allow two parties to establish a shared public key that is used by encryption and hash algorithms.
18. 18What is the purpose of a message hash in a VPN connection?

    1. AIt ensures that the data cannot be read in plain text.
    2. BIt ensures that the data has not changed while in transit.
    3. CIt ensures that the data is coming from the correct source.
    4. DIt ensures that the data cannot be duplicated and replayed to the destination.
19. 19What key question would help determine whether an organization should use an SSL VPN or an IPsec VPN for the remote access solution of the organization?

    1. AIs a Cisco router used at the destination of the remote access tunnel?
    2. BWhat applications or network resources do the users need for access?
    3. CAre both encryption and authentication required?
    4. DDo users need to be able to connect without requiring special VPN software?
20. 20What is an advantage of using the Cisco Secure Mobility Clientless SSL VPN?

    1. AAny device can connect to the network without authentication.
    2. BClients use SSH to access network resources.
    3. CSecurity is provided by prohibiting network access through a browser.
    4. DClients do not require special software.
21. 21Which two characteristics describe IPsec VPNs? (Choose two.)

    1. AIPsec is specifically designed for web-enabled applications.
    2. BSpecific PC client configuration is required to connect to the VPN.
    3. CIPsec authenticates by using shared secrets or digital certificates.
    4. DIPsec authentication is one-way or two-way.
    5. EKey lengths range from 40 bits to 256 bits
22. 22[blank_start]Generic Routing Encapsulation[blank_end] is a site-to-site tunnel protocol developed by Cisco to allow multiprotocol and IP multicast traffic between two or more sites.

    1. AGeneric Routing Encapsulation
23. 23Open the PT Activity. Perform the tasks in the activity instructions and then answer the question.
    What problem is preventing the hosts from communicating across the VPN tunnel?
    

    1. AThe EIGRP configuration is incorrect.
    2. BThe tunnel IP addresses are incorrect.
    3. CThe tunnel source interfaces are incorrect.
    4. DThe tunnel destinations addresses are incorrect.

Descripción

CCNA 4 Test sobre CCNA 4v5.03 Chapter 7, creado por Christina Evans el 04/10/2016.

Autor

Christina Evans

Idioma

English

Visitas

2

Etiquetas

ccna 4

Valoración

Aún sin valoraciones

Valora este test

Valora este test

Más sobre IPsec VPN