Question 1

In SNMP,companies are often reluctant to use ________ commands because of security dangers.
A)Get
B)Set
C)trap
D)request

Accepted Answer

The Set command allows an external entity to modify the configuration of SNMP agents and managed devices, which can pose a security risk. Therefore, companies may be hesitant to use this command. Get and Trap commands are generally considered safe as they only retrieve information and send notifications, respectively. Request is not a valid SNMP command.

Question 2

A company receives its domain name from ________.
A)IETF
B)its ISP
C)a domain registrar
D)its parents

Accepted Answer

A company typically receives its domain name from a domain registrar, which is a company that specializes in registering domain names on behalf of organizations or individuals. ISPs (internet service providers) provide connectivity to the internet but do not typically register domain names. The IETF (Internet Engineering Task Force) is responsible for developing and promoting internet standards, but does not register domain names. Parents would not typically be involved in registering a company's domain name.

Question 3

The main disadvantage of transport mode protection compared to tunnel mode protection in IP is ________.
A)that it provides protection over only part of the route
B)higher cost
C)both A and B
D)neither A nor B

Accepted Answer

The answer of The main disadvantage of transport mode protection...

Question 4

Which is less expensive to implement?
A)SSL/TLS
B)IPsec
C)Both cost about the same to implement.

Accepted Answer

SSL/TLS is generally less expensive and easier to implement than IPsec. SSL/TLS only requires a digital certificate, which can be obtained for free from Let's Encrypt, while IPsec requires complex configuration and management of security policies and protocols. Additionally, SSL/TLS can be implemented at the application layer, while IPsec operates at the network layer which can cause compatibility issues with different hardware and software.

Question 5

IPsec provides protection in two modes of operation; one of these two modes is ________.
A)transport mode
B)data link mode
C)network mode
D)802.1X mode

Accepted Answer

IPsec provides two modes of operation: transport mode and tunnel mode. Out of the given options, only option A (transport mode) is correct.

Question 6

Which mode of IPsec may be more expensive if a company has a large number of computers?
A)transport mode
B)tunnel mode
C)Both A and B are equally expensive.

Accepted Answer

Transport mode is more expensive if a company has a large number of computers because it requires each computer to have its own IPsec stack. Tunnel mode, on the other hand, only requires one IPsec stack for the entire network.

Question 7

In SNMP,the manager communicates directly with a(n)________.
A)managed device
B)agent
C)object
D)access point

Accepted Answer

In SNMP, the manager communicates directly with the agent. The agent is responsible for collecting management information and making it available to the manager. The agent also responds to management requests from the manager. The managed device refers to the hardware or software component that the agent resides on, while object refers to a specific attribute of the managed device that is being monitored or controlled. Access point is not relevant in SNMP communications.

Question 8

Which of the following would be an SNMP object?
A)number of rows in routing table
B)a managed switch
C)both A and B
D)neither A nor B

Accepted Answer

An SNMP object is a variable that can be accessed and managed through SNMP. The number of rows in a routing table is an example of an SNMP object as it is a variable that can be retrieved and monitored through SNMP. A managed switch, on the other hand, is not an SNMP object, but rather a device that can be managed using SNMP.

Question 9

Client PCs must have digital certificates in ________.
A)transport mode
B)tunnel mode
C)both A and B
D)neither A nor B

Accepted Answer

The answer of Client PCs must have digital certificates in...

Question 10

Which of the following standards permits central management?
A)IPsec
B)SSL/TLS
C)both A and B
D)neither A nor B

Accepted Answer

IPsec allows for central management through the use of policies and configurations that can be managed and distributed from a central point, typically using a management server.

Question 11

Which has stronger security?
A)SSL/TLS
B)IPsec
C)Both have about equal security.

Accepted Answer

The answer of Which has stronger security?
A)SSL/TLS
B)IPsec
C)Both have about equal...

Question 12

SNMPv1 uses ________ for authentication.
A)community names
B)digital certificates and digital signatures
C)a different password for each manager-agent pair
D)all of the above

Accepted Answer

SNMPv1 uses community names (also known as community strings) for authentication. It does not use digital certificates or digital signatures, nor does it require a different password for each manager-agent pair.

Question 13

SNMPv3 uses ________ for authentication.
A)community names
B)digital certificates and digital signatures
C)a different password for each manager-agent pair
D)all of the above

Accepted Answer

SNMPv3 uses a user-based security model that requires a unique password for each manager-agent pair for authentication, enhancing security compared to earlier versions.

Question 14

IPsec protects ________ layer messages.
A)data link
B)application
C)both A and B
D)neither A nor B

Accepted Answer

The answer of IPsec protects ________ layer messages.
A)data link
B)application
C)both A...

Question 15

Which of the following would be an SNMP object?
A)number of rows in routing table
B)system uptime (since last reboot)
C)both A and B
D)neither A nor B

Accepted Answer

Both A and B are examples of SNMP objects. SNMP objects are variables that can be monitored or controlled by an SNMP manager using SNMP protocol. The number of rows in the routing table and system uptime are both variables that can be queried using SNMP.

Question 16

The main limit of IPsec tunnel mode protection compared to transport mode protection in IPsec is ________.
A)protection over only part of the route
B)higher cost
C)both A and B
D)neither A nor B

Accepted Answer

IPsec tunnel mode protection only provides protection over part of the route, while transport mode protection provides protection for the entire route. This is because in tunnel mode, the original IP packet is encapsulated within a new IP packet, and the original packet header is hidden within the new packet. This means that protection is only provided for the portion of the route between the two endpoints of the tunnel, not the entire path. Additionally, tunnel mode may incur higher costs due to the need for additional processing and overhead associated with encapsulation.

Question 17

In tunnel mode,IPsec provides protection ________.
A)all the way between the two hosts
B)only between the IPsec servers
C)both A and B
D)neither A nor B

Accepted Answer

In tunnel mode, IPsec encrypts and protects the entire IP packet between the IPsec servers (gateways), not directly between the two end hosts.

Question 18

In IPsec,agreements about how security will be done are called ________.
A)tranches
B)security contracts
C)service-level agreements
D)security associations

Accepted Answer

Security associations (SA) are the fundamental building blocks for securing communication in IPsec. They are a set of agreements between two entities that determine how security services such as encryption, authentication, and key management will be provided to protect traffic between them.

Question 19

If a host is to be able to communicate via IPv4 and IPv6,it is said to ________.
A)be bilingual
B)have a dual-stack
C)be IPv6-ready
D)be IP-agile

Accepted Answer

Dual-stack is the technique of running both IPv4 and IPv6 simultaneously on a host or network, which allows communication with devices using either protocol. Being "bilingual" or "IPv6-ready" are not standard terms used to describe this capability, and "IP-agile" is not a recognized term in networking.

Question 20

IPsec is used for ________ VPNs.
A)remote-access
B)site-to-site
C)both A and B
D)neither A nor B

Accepted Answer

IPsec can be used for both remote-access and site-to-site VPNs.

Quiz 9: Tcp-Ip Internet Working 2

In SNMP,companies are often reluctant to use ________ commands because of security dangers.

A company receives its domain name from ________.

The main disadvantage of transport mode protection compared to tunnel mode protection in IP is ________.

Which is less expensive to implement?

IPsec provides protection in two modes of operation; one of these two modes is ________.

Which mode of IPsec may be more expensive if a company has a large number of computers?

In SNMP,the manager communicates directly with a(n) ________.

Which of the following would be an SNMP object?

Client PCs must have digital certificates in ________.

Which of the following standards permits central management?

Which has stronger security?

SNMPv1 uses ________ for authentication.

SNMPv3 uses ________ for authentication.

IPsec protects ________ layer messages.

Which of the following would be an SNMP object?

The main limit of IPsec tunnel mode protection compared to transport mode protection in IPsec is ________.

In tunnel mode,IPsec provides protection ________.

In IPsec,agreements about how security will be done are called ________.

If a host is to be able to communicate via IPv4 and IPv6,it is said to ________.

IPsec is used for ________ VPNs.