Question 1

When PPP is used over an Ethernet network,it is known as ________________.

Accepted Answer

The answer of When PPP is used over an Ethernet...

Question 2

Matching
Match each correct item with the statement below.
-In the context of IPsec,a type of encryption that provides authentication of the IPpacket's data payload through public key techniques.Inaddition,it also encrypts the entire IP packet for addedsecurity.

Accepted Answer

The description matches with Encapsulating Security Payload (ESP), which is a type of encryption that provides authentication and encryption of the entire IP packet in IPsec.

Answer: E
 The acronym IKE stands for Internet Key Exchange, which is a protocol used in IPsec to establish security associations and exchange encryption keys between two devices.

Answer: F
 Authentication Header (AH) is a type of encryption used in IPsec that provides authentication of the IP packet's data payload through public key techniques. It is different from ESP as it doesn't encrypt the entire IP packet.

Note: The remaining options are not related to the given statement.

Question 3

What encryption protocol was designed as more of an integrity check for WEP transmissions rather than a sophisticated encryption protocol?

Accepted Answer

TKIP (Temporal Key Integrity Protocol) was designed as a more secure alternative to WEP. While it does offer encryption, it was primarily designed to address the weaknesses found in WEP's integrity check mechanism. The other protocols listed (Kerberos, AES, and EAP) were designed primarily for encryption purposes.

Question 4

What authentication protocol sends authentication information in cleartext without encryption?

Accepted Answer

PAP (Password Authentication Protocol) sends passwords in cleartext without any encryption, making it a less secure authentication protocol. MS-CHAP and MS-CHAPv2 (Microsoft Challenge Handshake Authentication Protocol versions 1 and 2) use encryption, and EAP (Extensible Authentication Protocol) is a framework for multiple authentication methods, some of which may use encryption.

Question 5

The key management phase of IPSec is reliant on which two services below?

Accepted Answer

The key management phase of IPSec relies on both Internet Key Exchange (IKE) and Internet Security Association and Key Management Protocol (ISAKMP) to establish and exchange cryptographic keys between two communicating parties. Authentication Header (AH) and Encapsulating Security Payload (ESP) are used in the data plane for providing data authentication, integrity and confidentiality, but they are not directly involved in the key management phase.

Question 6

What protocol below is a Microsoft proprietary protocol first available in Windows Vista?

Accepted Answer

SSTP (Secure Socket Tunneling Protocol) is a Microsoft proprietary VPN protocol that was first introduced in Windows Vista. It uses TCP port 443, which is the same port used for HTTPS traffic, making it more likely to bypass firewall restrictions.

Question 7

Matching
Match each correct item with the statement below.
-One of two services in the keymanagement phase of creating a secure IPsec connection.Itnegotiates the exchange of keys,including authentication ofthe keys.It uses UDP and usually runs on port 500.

Accepted Answer

The service that negotiates the exchange of keys and authenticates the keys in the key management phase of creating a secure IPsec connection is Internet Key Exchange (IKE).

Answer: E
 The service that uses UDP and usually runs on port 500 in the key management phase of creating a secure IPsec connection is Internet Key Exchange (IKE).

Question 8

What two key lengths are the most popular for the SHA-2 hashing algorithm?

Accepted Answer

The most popular key lengths for the SHA-2 hashing algorithm are 256 and 512. These lengths provide a strong level of security and are commonly used in many applications. Key lengths of 160 and 1024 are not as common or widely used.

Question 9

In Kerberos,a temporary set of credentials that a client uses to prove that its identity has been validated is known as a _____________.

Accepted Answer

The answer of In Kerberos,a temporary set of credentials that...

Question 10

A _________________ is a service that is shared between multiple organizations,but not available publicly.

Accepted Answer

The answer of A _________________ is a service that is...

Question 11

Matching
Match each correct item with the statement below.
-A service model in whichhardware services are provided virtually,including networkinfrastructure devices such as virtual servers.

Accepted Answer

The statement describes Infrastructure as a Service (IaaS) which provides virtual hardware services such as virtual servers.

Answer: B 
 The statement does not describe Platform as a Service (PaaS), Software as a Service (SaaS), PPP, IKE, AH, ESP, CHAP, TKIP, or KDC.

Question 12

What two options below are AAA services?

Accepted Answer

RADIUS (Remote Authentication Dial-In User Service) and TACACS+ (Terminal Access Controller Access-Control System Plus) are both AAA (Authentication, Authorization, and Accounting) services. OpenSSH and OpenVPN are both secure communication protocols but are not AAA services.

Question 13

What two different types of encryption can be used by IPsec during data transfer?

Accepted Answer

IPsec uses two different types of encryption during data transfer: Authentication Header (AH) and Encapsulating Security Payload (ESP).

Question 14

How often should administrators and network users be required to change their password?

Accepted Answer

NIST recommends that passwords be changed every 60 days.

Question 15

Matching
Match each correct item with the statement below.
-A service model in whichapplications are provided through an online user interfaceand are compatible with a multitude of devices and operatingsystems.

Accepted Answer

The service model described in the statement is Software as a Service (SaaS).

Answer: A
 IaaS (Infrastructure as a Service) is a service model in which computing resources are provided as a service over a network.

Answer: B
 PaaS (Platform as a Service) is a service model in which a platform for developing, deploying, and managing applications is provided as a service over a network.

Answer: No matching option
 The remaining options (D through J) do not match the given statement. They are all related to network protocols and security mechanisms.

Question 16

The _________________ cloud service model provides virtual environments online that can be tailored to the needs of developers.

Accepted Answer

The answer of The _________________ cloud service model provides virtual...

Question 17

A variant of TLS is ___________________,which provides authentication like SSL/TLS,but does not require a certificate for each user.

Accepted Answer

The answer of A variant of TLS is ___________________,which provides...

Question 18

What two protocols below are Data Link Layer protocols designed to connect WAN endpoints in a direct connection,such as when a client computer connects to a server at an ISP using a dial-up or DSL connectionand modem?

Accepted Answer

SLIP (Serial Line Internet Protocol) and PPP (Point-to-Point Protocol) are both Data Link Layer protocols designed to connect WAN endpoints in a direct connection, typically using a dial-up or DSL connection and a modem. OpenVPN and PPTP are both Tunneling protocols that operate at the Network Layer and are used to create a virtual private network (VPN) over a public network.

Question 19

A SecurID key chain fob from RSA security generates a password that changes how often?

Accepted Answer

The answer of A SecurID key chain fob from RSA...

Question 20

Matching
Match each correct item with the statement below.
-Anauthentication protocol that operates over PPP and alsoencrypts usernames and passwords for transmission

Accepted Answer

CHAP is the correct authentication protocol that operates over PPP and encrypts usernames and passwords for transmission.

Answer: D
 PPP is the protocol over which CHAP operates.

Answer: E
 IKE is used for the management of VPN security associations and keys.

Answer: F and G
 AH and ESP are both protocols used to provide confidentiality, data integrity, and authentication for IP packets.

Answer: J
 KDC is responsible for the management of authentication credentials and distribution of cryptographic keys for Kerberos authentication.

The remaining options (A, B, C, and I) do not match any of the statements provided.

Quiz 7: Cloud Computing and Remote Access