Question 1

What are the goals of a security policy?

Accepted Answer

The answer of What are the goals of a security...

Question 2

Why is it important to have a patch management program?

Accepted Answer

The answer of Why is it important to have a...

Question 3

Briefly describe a Virtual Private Network (VPN)?

Accepted Answer

The answer of Briefly describe a Virtual Private Network (VPN)?...

Question 4

A client-to-site VPN is also known as a ____ VPN.

Accepted Answer

A client-to-site VPN (also known as a remote user VPN) is a type of VPN in which individual users connect to a VPN server that is located on the company's network. The user's device becomes part of the company's network and can access resources just as if they were physically present in the office. This is different from site-to-site VPNs in which entire networks are connected to each other, and client-to-client VPNs in which individual users connect directly to each other.

Question 5

Briefly describe a client-to-site VPN.

Accepted Answer

The answer of Briefly describe a client-to-site VPN....

Question 6

A(n) ____ is a configuration value (or simply stated, a command) that allows you to establish an IPSEC VPN on a Cisco firewall.

Accepted Answer

A transform set is a combination of security protocols and algorithms that enforce the security policy for an IPsec VPN tunnel on a Cisco device. It defines how the data will be encrypted and authenticated across the VPN.

Question 7

A ____ VPN allows designated users to have access to the corporate network from remote locations.

Accepted Answer

A client-to-site VPN, also known as a remote access VPN, allows designated users to connect securely and remotely to the corporate network. Site-to-site VPNs are used to connect two or more networks together, while user-to-user and user-to-server VPNs are not commonly used terms in the context of corporate VPNs.

Question 8

____ is a tunneling protocol that was developed by Microsoft and was extremely popular at one time for remote users who had to dial in to the corporate network on a secure channel.

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) is a tunneling protocol developed by Microsoft and was widely used in the past for secure remote access to corporate networks. GRE (Generic Routing Encapsulation) and IPSec (Internet Protocol Security) are also tunneling protocols but were not developed specifically by Microsoft. L2TP (Layer 2 Tunneling Protocol) is a tunneling protocol that combines the features of PPTP and GRE but was not developed by Microsoft.

Question 9

Briefly explain how to protect an organization's hardware.

Accepted Answer

The answer of Briefly explain how to protect an organization's...

Question 10

Why is user training paramount in protecting against viruses?

Accepted Answer

The answer of Why is user training paramount in protecting...

Question 11

____________________ refers to malicious programs that have many different capabilities. Some might do something relatively harmless, such as opening files on a CD-ROM; others might be extremely destructive, perhaps destroying all of the data on a computer.

Accepted Answer

The answer of ____________________ refers to malicious programs that have...

Question 12

____ is a suite of protocols, accepted as an industry standard, which provides secure data transmission over layer 3 of the OSI model.

Accepted Answer

IPSec (Internet Protocol Security) is a suite of protocols that is accepted as an industry standard and provides secure data transmission over layer 3 of the OSI model. IPSec can be used to encrypt and authenticate data packets, providing data confidentiality, integrity, and authentication. L2TP and PPTP are both VPN protocols that operate at layer 2 and layer 3 respectively. GRE (Generic Routing Encapsulation) is a tunneling protocol that does not provide encryption or authentication.

Question 13

Briefly explain encryption at the network level.

Accepted Answer

The answer of Briefly explain encryption at the network level....

Question 14

A ____ VPN allows multiple corporate sites to be connected over low-cost Internet connections.

Accepted Answer

Site-to-site VPN is the best choice here as it allows multiple corporate sites to be connected over low-cost Internet connections. This type of VPN allows two or more geographically separate networks to communicate with each other as if they are on the same physical network. This provides a cost-effective solution for companies to connect their remote offices or branches to their main office network securely over the Internet. Choices A, C, and D are not applicable in this scenario as they involve connecting a single client or server to a remote network instead of connecting multiple sites.

Question 15

A(n) ___________________________________ is like an IDS, except that it is placed in line so all packets coming in or going out of the network pass through it.

Accepted Answer

The answer of A(n) ___________________________________ is like an IDS, except...

Question 16

In network security, a(n) ____________________ is an official approval that allows a user to access a specific network resource.

Accepted Answer

The answer of In network security, a(n) ____________________ is an...

Question 17

A(n) ____________________ is a server running a single application, such as a proxy server or specialized firewall software.

Accepted Answer

The answer of A(n) ____________________ is a server running a...

Question 18

What are some of the items that a security policy should include?

Accepted Answer

The answer of What are some of the items that...

Question 19

____________________ is the process by which users verify to a server that they are who they say they are.

Accepted Answer

The answer of ____________________ is the process by which users...

Question 20

What are some unnecessary services on most networks?

Accepted Answer

The answer of What are some unnecessary services on most...

Quiz 14: Network Security