Question 1

A ____________________ mode VPN establishes two perimeter tunnel servers to encrypt all traffic that will traverse an unsecured network. The entire client packet is encrypted and added as the data portion of a packet addressed from one tunneling server to another.

Accepted Answer

The answer of A ____________________ mode VPN establishes two perimeter...

Question 2

Simple Mail Transport Protocol (SMTP) data is allowed to pass through the firewall, but it should all be routed to a well-configured SMTP gateway to filter and route messaging traffic securely.

Accepted Answer

The answer of Simple Mail Transport Protocol (SMTP) data is...

Question 3

When Web services are offered outside the firewall, HTTP traffic should be denied from reaching your internal networks through the use of some form of proxy access or DMZ architecture.

Accepted Answer

The answer of When Web services are offered outside the...

Question 4

All Internet Control Message Protocol (ICMP) data should be denied.

Accepted Answer

The answer of All Internet Control Message Protocol (ICMP) data...

Question 5

All traffic from the trusted network is allowed out.

Accepted Answer

The answer of All traffic from the trusted network is...

Question 6

Kerberos ticket granting service (TGS), which provides tickets to clients who request services. In Kerberos a ticket is an identification card for a particular client that verifies to the server that the client is requesting services and that the client is a valid member of the Kerberos system and therefore authorized to receive services. The ticket consists of the client's name and network address, a ticket validation starting and ending time, and the session key, all encrypted in the private key of the server from which the client is requesting services.

Accepted Answer

The answer of Kerberos ticket granting service (TGS), which provides...

Question 7

A(n) ____________________ private network is a secure network connection between systems that uses the data communication capability of an unsecured and public network.

Accepted Answer

The answer of A(n) ____________________ private network is a secure...

Question 8

List and describe the interacting services of the Kerberos system.

Accepted Answer

The answer of List and describe the interacting services of...

Question 9

SESAME uses ____________________ key encryption to distribute secret keys.

Accepted Answer

The answer of SESAME uses ____________________ key encryption to distribute...

Question 10

Briefly describe the best practice rules for firewall use.

Accepted Answer

The answer of Briefly describe the best practice rules for...

Question 11

A trusted VPN uses ____________________ circuits from a service provider who gives contractual assurance that no one else is allowed to use these circuits and that they are properly maintained and protected.

Accepted Answer

The answer of A trusted VPN uses ____________________ circuits from...

Question 12

Authentication server (AS), which is a Kerberos server that authenticates clients and servers.

Accepted Answer

The answer of Authentication server (AS), which is a Kerberos...

Question 13

The firewall device is never directly accessible from the public network for configuration or management purposes.

Accepted Answer

The answer of The firewall device is never directly accessible...

Question 14

Telnet (terminal emulation) access to all internal servers from the public networks should be blocked.

Accepted Answer

The answer of Telnet (terminal emulation) access to all internal...

Question 15

All data that is not verifiably authentic should be denied.

Accepted Answer

The answer of All data that is not verifiably authentic...

Question 16

What must a VPN accomplish to offer a secure and reliable capability while relying on public networks?

Accepted Answer

The answer of What must a VPN accomplish to offer...

Question 17

Key Distribution Center (KDC), which generates and issues session keys.

Accepted Answer

The answer of Key Distribution Center (KDC), which generates and...

Quiz 6: Security Technology: Access Controls, Firewalls, and Vpns