Question 1

What is a hash function?

Accepted Answer

A hash function is a mathematical algorithm that takes an input (or 'message') of any length and produces a fixed-size string of bytes. The output, typically a 'digest', is unique for unique inputs; very small changes to the input produce unpredictable changes in the output. This property makes hash functions useful in various applications, such as data integrity checks and digital signatures.

Question 2

Which is NOT part of basic VPN capability?

Accepted Answer

Circuit-switched connections are not a basic capability of VPNs, which primarily use packet-switched networks like the Internet for transmitting data. VPNs focus on encrypting, encapsulating data, and managing access rather than establishing circuit-switched connections.

Question 3

The part of a VPN connection in which the data is encapsulated is called a(n)____________.

Accepted Answer

tunnel

Question 4

What is a virtual private network?

Accepted Answer

A virtual private network (VPN) allows users at different locations to connect to a private network over the Internet, providing secure access to resources within that network.

Question 5

Which is NOT true about development of IPSec?

Accepted Answer

IPSec actually provides two encryption modes (Transport and Tunnel) and introduces additional protocols for encrypting data, such as the Authentication Header (AH) and Encapsulating Security Payload (ESP), making choice C incorrect.

Question 6

What encryption technology is used by the module offered by Cisco to provide VPN capability with Cisco switches and routers?

Accepted Answer

The answer of What encryption technology is used by the...

Question 7

Which is NOT true about L2TP technology?

Accepted Answer

L2TP (Layer 2 Tunneling Protocol) does not require public IP addresses to function; it can work over both public and private IP networks. It is designed to support VPN connections over both types of networks, making it versatile for various deployment scenarios. The other statements about L2TP being based on PPTP and Cisco's L2F, its support in Windows versions since NT, and its ability to use IPSec for encryption are all true.

Question 8

Which is an authentication protocol that uses a three-part handshaking procedure?

Accepted Answer

CHAP (Challenge Handshake Authentication Protocol) uses a three-part handshaking procedure to authenticate a user or network entity. This process involves a challenge from the authenticator, a response from the peer, and verification by the authenticator.

Question 9

Which was the earlier VPN technology?

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) was one of the earliest VPN technologies developed, introduced in the mid-1990s, predating the widespread implementation of L2TP and IPSec.

Question 10

Which is NOT likely a consideration of an administrator in determining which VPN solution to implement?

Accepted Answer

The choice of a VPN solution typically involves considerations such as encryption methods, authentication protocols, and compatibility with existing infrastructure. The choice of Internet Service Providers (ISPs) is generally not a direct factor in selecting a VPN technology, as VPNs are designed to work over any ISP's service.

Question 11

Which common VPN technology supports five authentication methods?

Accepted Answer

The answer of Which common VPN technology supports five authentication...

Question 12

Which is a very basic authentication protocol that transmits passwords in unencrypted clear text?

Accepted Answer

PAP (Password Authentication Protocol) is a basic authentication protocol that transmits passwords in unencrypted clear text, making it less secure compared to other authentication methods that encrypt password information.

Question 13

To serve its purpose,a(n)____________ allows a remote user to connect to a private network just as if he were at a local client inside the network.

Accepted Answer

The answer of To serve its purpose,a(n)____________ allows a remote...

Question 14

Which is true of a virtual private network?

Accepted Answer

A virtual private network (VPN) emulates a direct network connection over the internet, creating a secure and private connection over a public network infrastructure.

Question 15

Which IPSec mode enables encryption of the header and data during a VPN connection?

Accepted Answer

Tunnel mode encrypts both the payload and the header, making it ideal for VPN connections where the entire IP packet needs to be encrypted and encapsulated within another IP packet.

Question 16

Which is NOT true about MS-CHAP?

Accepted Answer

MS-CHAP (Microsoft Challenge Handshake Authentication Protocol) does not require the authenticator to store reversibly encrypted passwords. Instead, it operates by having the authenticator store a hashed version of the password, which is used to verify the challenge response from the client without needing to store or transmit the password in clear text.

Question 17

What makes SPAP susceptible to fraudulent login attacks via a recorded authentication exchange?

Accepted Answer

SPAP (Shiva Password Authentication Protocol) is susceptible to fraudulent login attacks via a recorded authentication exchange because it uses the same reversible encryption method every time. This predictability allows attackers to decipher the encryption if they can capture the exchange, making it easier to replay or manipulate for unauthorized access.

Question 18

Which authentication method was designed specifically for PPTP?

Accepted Answer

The answer of Which authentication method was designed specifically for...

Question 19

At what layer of the OSI model does PPTP work?

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) operates at Layer 2 of the OSI model, which is the Data Link layer. This layer is responsible for establishing direct connections between two nodes on a network and enabling the encapsulation of packets into frames for transmission. PPTP encapsulates PPP frames into IP datagrams for transmission over an IP network.

Question 20

What two types of tunneling are supported by PPTP?

Accepted Answer

PPTP supports both compulsory and voluntary tunneling, allowing for flexible VPN deployment scenarios. Compulsory tunneling is managed by the network provider, while voluntary tunneling is managed by the client.

Quiz 7: Virtual Private Networks