7. Router R1 has configured ISAKMP policies numbered 1, 5, 9, and 203. Router R2 only has default policies. How will R1 attempt to negotiate the IKE Phase 1 ISAKMP tunnel with R2?

R1 will attempt to match policy #1 with the most secure matching policy on R2.

R1 and R2 cannot match policies because the policy numbers are different.

R1 will try to match policy #203 with the most secure default policy on R2.

R1 will begin to try to match policy #1 with policy #65514 on R2.

8. When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the purpose of the crypto map command in interface configuration mode?

to bind the interface to the ISAKMP policy

to force IKE Phase 1 negotiations to begin

9. Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?

The longer the key, the more key possibilities exist.

The length of a key does not affect the degree of security.

The shorter the key, the harder it is to break.

The length of a key will not vary between encryption algorithms.

10. Which two statements describe a remote access VPN? (Choose two.)

It may require VPN client software on hosts.

It is used to connect individual hosts securely to a company network over the Internet.

It requires hosts to send TCP/IP traffic through a VPN gateway.

It connects entire networks to each other.

It requires static configuration of the VPN tunnel.

12. How is “tunneling” accomplished in a VPN?

New headers from one or more VPN protocols encapsulate the original packets.

All packets between two hosts are assigned to a single physical medium to ensure that the packets are kept private.

Packets are disguised to look like other types of traffic so that they will be ignored by potential attackers.

A dedicated circuit is established between the source and destination devices for the duration of the connection.

13. Which two scenarios are examples of remote access VPNs? (Choose two.)

A mobile sales agent is connecting to the company network via the Internet connection at a hotel.

An employee who is working from home uses VPN client software on a laptop in order to connect to the company network.

All users at a large branch office can access company resources through a single VPN connection.

A small branch office with three employees has a Cisco ASA that is used to create a VPN connection to the HQ.

A toy manufacturer has a permanent VPN connection to one of its parts suppliers.

14. Which statement accurately describes a characteristic of IPsec?

IPsec is a framework of open standards that relies on existing algorithms.

IPsec works at the application layer and protects all application data.

IPsec is a framework of standards developed by Cisco that relies on OSI algorithms.

IPsec is a framework of proprietary standards that depend on Cisco specific algorithms.

IPsec works at the transport layer and protects data at the network layer.

15. Which is a requirement of a site-to-site VPN?

It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic.

It requires hosts to use VPN client software to encapsulate traffic.

It requires the placement of a VPN server at the edge of the company network.

It requires a client/server architecture.

16. Consider the following configuration on a Cisco ASA: crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac What is the purpose of this command?

to define the encryption and integrity algorithms that are used to build the IPsec tunnel

to define the ISAKMP parameters that are used to establish the tunnel

to define what traffic is allowed through and protected by the tunnel

to define only the allowed encryption algorithms

18. What is a function of the GRE protocol?

to encapsulate multiple OSI Layer 3 protocol packet types inside an IP tunnel

to configure the set of encryption and hashing algorithms that will be used to transform the data sent through the IPsec tunnel

to configure the IPsec tunnel lifetime

to provide encryption through the IPsec tunnel

20. Two corporations have just completed a merger. The network engineer has been asked to connect the two corporate networks without the expense of leased lines. Which solution would be the most cost effective method of providing a proper and secure connection between the two corporate networks?

Cisco AnyConnect Secure Mobility Client with SSL

Cisco Secure Mobility Clientless SSL VPN

22. What type of traffic is supported by IPsec?

IPsec only supports unicast traffic.

IPsec supports all IPv4 traffic.

IPsec supports layer 2 multicast traffic.

IPsec supports all traffic permitted through an ACL.

Network Security - Modules 18-19

Authored by Logan Prewitt

Computers

12th Grade

26 Questions

Used 5+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

MULTIPLE SELECT QUESTION

2 mins • 1 pt

1. Which two statements describe the IPsec protocol framework? (Choose two.)

AH uses IP protocol 51.

AH provides integrity and authentication.

AH provides encryption and integrity.

ESP uses UDP protocol 51.

AH provides both authentication and encryption.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

2. What technology is used to negotiate security associations and calculate shared keys for an IPsec VPN tunnel?

PSK

SHA

3DES

IKE

MULTIPLE SELECT QUESTION

2 mins • 1 pt

3. What are the two modes used in IKE Phase 1? (Choose two.)

passive

primary

main

secondary

aggressive

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

4. What takes place during IKE Phase 2 when establishing an IPsec VPN?

Traffic is exchanged between IPsec peers.

IPsec security associations are exchanged.

ISAKMP security associations are exchanged.

Interesting traffic is identified.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure the ISAKMP policies for IKE Phase 2.

Step 1

Step 2

Step 3

Step 4

Step 5

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Apply the IPsec Policy.

Step 1

Step 2

Step 3

Step 4

Step 5

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Verify that the IPsec Tunnel is operational.

Step 1

Step 2

Step 3

Step 4

Step 5

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

21 questions

Computer Applications Quiz 3

Quiz

•

12th Grade

21 questions

Database

Quiz

•

12th Grade

23 questions

F1 practice test

Quiz

•

9th - 12th Grade

25 questions

Komputer Akuntansi Manufaktur

Quiz

•

12th Grade

21 questions

real life application of robotics

Quiz

•

12th Grade

21 questions

Computational Thinking

Quiz

•

5th - 12th Grade

22 questions

Logic gates & circuits

Quiz

•

12th Grade

22 questions

1.1.3 Input, output and storage

Quiz

•

11th Grade - University

Popular Resources on Wayground

5 questions

This is not a...winter edition (Drawing game)

Quiz

•

1st - 5th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

10 questions

Identify Iconic Christmas Movie Scenes

Interactive video

•

6th - 10th Grade

20 questions

Christmas Trivia

Quiz

•

6th - 8th Grade

18 questions

Kids Christmas Trivia

Quiz

•

KG - 5th Grade

11 questions

How well do you know your Christmas Characters?

Lesson

•

3rd Grade

14 questions

Christmas Trivia

Quiz

•

5th Grade

20 questions

How the Grinch Stole Christmas

Quiz

•

5th Grade

Discover more resources for Computers

26 questions

Christmas Movie Trivia

Lesson

•

8th Grade - Professio...

15 questions

Christmas Song Emoji Pictionary

Quiz

•

7th - 12th Grade

20 questions

Christmas Movies

Quiz

•

1st - 12th Grade

55 questions

CHS Holiday Trivia

Quiz

•

12th Grade

20 questions

Christmas Movie Trivia

Quiz

•

9th - 12th Grade

29 questions

christmas facts

Lesson

•

5th - 12th Grade

20 questions

Christmas Trivia

Quiz

•

5th - 12th Grade

20 questions

Stages of Meiosis

Quiz

•

9th - 12th Grade

Network Security - Modules 18-19

1. Which two statements describe the IPsec protocol framework? (Choose two.)

2. What technology is used to negotiate security associations and calculate shared keys for an IPsec VPN tunnel?

3. What are the two modes used in IKE Phase 1? (Choose two.)

4. What takes place during IKE Phase 2 when establishing an IPsec VPN?

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure the ISAKMP policies for IKE Phase 2.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Apply the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Verify that the IPsec Tunnel is operational.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure a Crypto Map for the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure the ISAKMP policies for the IKE Phase 1.

6. Refer to the exhibit. A VPN tunnel is configured on the WAN between R1 and R2. On which R1 interface(s) would a crypto map be applied in order to create a VPN between R1 and R2?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

Network Security - Modules 18-19

1. Which two statements describe the IPsec protocol framework? (Choose two.)

2. What technology is used to negotiate security associations and calculate shared keys for an IPsec VPN tunnel?

3. What are the two modes used in IKE Phase 1? (Choose two.)

4. What takes place during IKE Phase 2 when establishing an IPsec VPN?

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.Configure the ISAKMP policies for IKE Phase 2.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.Apply the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.Verify that the IPsec Tunnel is operational.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.Configure a Crypto Map for the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.Configure the ISAKMP policies for the IKE Phase 1.

6. Refer to the exhibit. A VPN tunnel is configured on the WAN between R1 and R2. On which R1 interface(s) would a crypto map be applied in order to create a VPN between R1 and R2?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure the ISAKMP policies for IKE Phase 2.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Apply the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Verify that the IPsec Tunnel is operational.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure a Crypto Map for the IPsec Policy.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
Configure the ISAKMP policies for the IKE Phase 1.