Network Security - Modules 18-19

1. Which two statements describe the IPsec protocol framework? (Choose two.)

• AH uses IP protocol 51.

• AH provides integrity and authentication.

• • AH provides encryption and integrity.

• • ESP uses UDP protocol 51.

• • AH provides both authentication and encryption.

2. What technology is used to negotiate security associations and calculate shared keys for an IPsec VPN tunnel?

• PSK

• SHA

• 3DES

• IKE

3. What are the two modes used in IKE Phase 1? (Choose two.)

• passive

• primary

• main

• secondary

• aggressive

4. What takes place during IKE Phase 2 when establishing an IPsec VPN?

• • Traffic is exchanged between IPsec peers.

• IPsec security associations are exchanged.

• • ISAKMP security associations are exchanged.

• • Interesting traffic is identified.

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.

Configure the ISAKMP policies for IKE Phase 2.

• Step 1

• Step 2

• Step 3

• Step 4

• Step 5

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.

Apply the IPsec Policy.

• Step 1

• Step 2

• Step 3

• Step 4

• Step 5

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.

Verify that the IPsec Tunnel is operational.

• Step 1

• Step 2

• Step 3

• Step 4

• Step 5

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.

Configure a Crypto Map for the IPsec Policy.

• Step 1

• Step 2

• Step 3

• Step 4

• Step 5

5. A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.

Configure the ISAKMP policies for the IKE Phase 1.

• Step 1

• Step 2

• Step 3

• Step 4

• Step 5

6. Refer to the exhibit. A VPN tunnel is configured on the WAN between R1 and R2. On which R1 interface(s) would a crypto map be applied in order to create a VPN between R1 and R2?

• • G0/0 and G0/1

• • G0/0

• • all R1 interfaces

• S0/0/0