Chapter 12 Quiz Firewalls

1.

1 point

Which of the following key VPN protocols used today is the main alternative for a VPN solution that does not leverage an IPSec solution?

Internet Engineering Task Force (IETF)

Authentication Header (AH)

Secure Sockets Layer(SSL)/Transport Layer Security (TLS)

Layer 2 Forwarding (L2F) Protocol

2.

1 point

Which component of Secure Shell (SSH) Protocol provides server authentication, confidentiality, and integrity with perfect forward secrecy?

Rsync

Connection Protocol

Transport Layer Protocol

User Authentication Protocol

3.

1 point

Which of the following refers to a protocol that provides integrity protection for packet headers and data, as well as user authentication?

Point-to-Point Tunneling Protocol (PPTP)

Request for Comments (RFC)

Authentication Header (AH)

Layer 2 Tunneling Protocol (L2TP)

4.

1 point

Which of the following describes Layer 2 Tunneling Protocol (L2TP)?

The standards body for Internet-related engineering specifications

An older VPN protocol largely replaced by IPSec and SSL/ TLS-based VPNs in production environments, but still in use in some older environments

The second core IPSec security protocol; it can perform authentication to provide integrity protection, although not for the outermost IP header

An early proprietary protocol from Microsoft

5.

1 point

Operating system virtualization is the emulation of an operating system environment hosted on another operating system.

True

False

6.

1 point

Which of the following refers to a network protocol that is a method for secure remote logon and other secure network services over a public network?

Point-to-Point Protocol (PPP)

Secure Shell (SSH)

Authentication Header (AH)

Encapsulating Security Payload (ESP)

7.

1 point

In typical end user/browser usage, SSL/TLS authentication is two-way.

True

False

8.

1 point

Which of the following characteristics relates to Point-to-Point Protocol (PPP)?

The standards body for Internet-related engineering specifications

A protocol that provides integrity protection for packet headers and data, as well as user authentication

A protocol commonly used in establishing a direct connection between two networking nodes

An older protocol largely replaced by IPSec and SSL/ TLS-based VPNs in production environments, but still in use in some older environments

9.

1 point

One proposed migration strategy for the move from IPv4 to IPv6 includes allowing two IPv6 hosts to create a tunnel for traffic between two IPv6 hosts through an IPv4 network.

True

False

10.

1 point

Which term describes an early proprietary protocol from Microsoft?

Authentication Header (AH)

Layer 2 Forwarding (L2F) Protocol

Internet Engineering Task Force (IETF)

Point-to-Point Tunneling Protocol (PPTP)

11.

1 point

Virtual VPNs provide a total logical separation of the VPN’s instances in terms of system resources, routing tables, user databases, and policy management interfaces.

True

False

12.

1 point

Which of the following negotiates, creates, and manages security associations?

Layer 2 Tunneling Protocol (L2TP)

Point-to-Point Tunneling Protocol (PPTP)

Authentication Header (AH)

Internet Key Exchange (IKE)

13.

1 point

The performance characteristics of a VPN supporting remote clients are generally the same as the performance characteristics of a VPN supporting site-to-site connections.

True

False

14.

1 point

Which term describes the second core IPSec security protocol; it can perform authentication to provide integrity protection, although not for the outermost IP header?

Point-to-Point Protocol (PPP)

Layer 2 Forwarding (L2F) Protocol

Point-to-Point Tunneling Protocol (PPTP)

Encapsulating Security Payload (ESP)

15.

1 point

What is meant by Internet Engineering Task Force (IETF)?

An early proprietary protocol from Microsoft

An older protocol largely replaced by IPSec and SSL/ TLS-based VPNs in production environments, but still in use in some older environments

A body that develops new Internet protocols for devices and integrity protection for packet headers and data, as well as user authentication

The standards body for Internet-related engineering specifications

16.

1 point

IPSec is a mandatory component for IPv6, and is used to natively protect IPv6 data as it is sent over the network.

True

False

17.

1 point

The Secure Shell (SSH) protocol works in combination with rsync to back up, copy, and mirror files securely.

True

False

18.

1 point

Although it provides a mechanism for creating tunnels through an IP network, which of the following does not provide a mechanism for encrypting the data being tunneled?

Point-to-Point Protocol (PPP)

Secure Sockets Layer (SSL)

Layer 2 Tunneling Protocol (L2TP)

Encapsulating Security Payload (ESP)

19.

1 point

Which of the following is commonly used (sometimes with an authentication header) to provide both confidentiality and integrity protection for communications?

Internet Key Exchange (IKE)

Layer 2 Forwarding (L2F)

Encapsulating Security Payload (ESP)

Point-to-Point Protocol (PPP)

20.

1 point

Which of the following represents a standards-based protocol suite designed specifically for securing Internet Protocol communications?

Authentication Header (AH)

Tunnel mode

Transport mode

Internet Protocol Security (IPSec)

21.

1 point

Which of the following refers to an early communications protocol that competed with Point-to-Point Tunneling Protocol?

Point-to-Point Tunneling Protocol (PPTP)

Authentication Header (AH)

Layer 2 Forwarding (L2F) Protocol

Internet Engineering Task Force (IETF)

22.

1 point

The use of PPP has extended the availability of IPv4 address space, thereby extending the life span of IPv4.

True

False

23.

1 point

One function of an SSL VPN is that it usually connects using a Web browser, whereas an IPSec VPN generally requires client software on the remote system.

True

False

24.

1 point

Which of the following characteristics relates to authentication header (AH)?

It is a document that defines or describes computer and networking technologies. These documents are published by the Internet Engineering Task Force, the standards body for Internet engineering specifications. RFCs exist for hardware, operating systems, protocols, security services, and much more.

It is an older protocol largely replaced by IPSec and SSL/ TLS-based VPNs in production environments, but it is still in use in some older environments.

It is an early proprietary protocol from Microsoft.

It is a protocol that provides integrity protection for packet headers and data, as well as user authentication.

25.

1 point

Which of the following is an advantage of SSL/TLS VPNs over IPSec VPNs?

Installation on corporate systems only

More vendor-created workarounds on the network address translation tool

More firewall rules

Platform Independence