Question 1

PPTP uses TCP port ____to establish a connection with a remote VPN server.&#10;A) 950&#10;B) 1546&#10;C) 1624&#10;D) 1723

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) uses TCP port 1723 to establish a connection with a remote VPN server.

Question 2

SSL-based VPNs use standard Web-based protocols on TCP port ____.&#10;A) 443&#10;B) 500&#10;C) 700&#10;D) 1723

Accepted Answer

SSL-based VPNs typically use TCP port 443, which is the standard port for HTTPS traffic, allowing them to easily pass through most firewalls and network proxies.

Question 3

The ____ option of IKE-Scan records the response time of all packets, and it delays for 60 seconds after the last packet is received.&#10;A) -sU&#10;B) -P0&#10;C) -showbackoff&#10;D) -p 500

Accepted Answer

The -showbackoff option of IKE-Scan is designed to record the response time of all packets and introduces a delay of 60 seconds after the last packet is received. This feature is useful for analyzing the timing of responses, which can provide insights into the configuration or behavior of the scanned IKE service.

Question 4

Testers can use IKE-Scan with the ____ option to obtain IKE aggressive mode preshared keys through brute force or dictionary attacks.&#10;A) -P0&#10;B) -pskcrack&#10;C) -p 500&#10;D) -showbackoff

Accepted Answer

IKE-Scan's -pskcrack option is specifically designed for obtaining IKE aggressive mode preshared keys through brute force or dictionary attacks.

Question 5

____ is a command-line tool that uses the IKE protocol to discover, fingerprint, and test IPSec VPN servers.&#10;A) IKE-Scan&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

IKE-Scan is a command-line tool specifically designed to use the Internet Key Exchange (IKE) protocol for discovering, fingerprinting, and testing IPSec VPN servers.

Question 6

____ supports preshared key cracking in IKE aggressive mode using preshared key authentication.&#10;A) IKE-Scan&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

The answer of ____ supports preshared key cracking in IKE...

Question 7

____ can be used to determine the vulnerabilities in the preshared key implementation of VPN servers.&#10;A) IKE-Scan&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

IKEProbe is a tool that can be used to determine the vulnerabilities in the preshared key implementation of VPN servers. It can be used to identify weak keys and to exploit vulnerabilities in the VPN server's implementation of the IKE protocol.

Question 8

____ analyzes and cracks preshared keys that use RFC-compliant aggressive mode authentication.&#10;A) IKE-Scan&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

IKECrack is a tool specifically designed to analyze and crack preshared keys, especially when they are used in conjunction with RFC-compliant aggressive mode authentication in VPNs.

Question 9

____ can monitor the VPN (PPTP and IPSec) and SSL (HTTPS) connectivity of both wired and wireless networks.&#10;A) IKE-Scan&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

VPNmonitor is a tool designed to monitor VPN and SSL connectivity for both wired and wireless networks.

Question 10

____ allows secure connections to any other PGPnet/IPSec host on the Internet regardless of whether the user has communicated with that host previously, without preconfiguration of that host.&#10;A) PGPnet&#10;B) IKEProbe&#10;C) VPNmonitor&#10;D) IKECrack

Accepted Answer

PGPnet allows secure connections to any other PGPnet/IPSec host on the Internet without needing preconfiguration of that host, facilitating secure communications even if the users have not previously communicated.

Deck 4: VPN Penetration Testing