ENSA Module 8 -- Final Exam Prep, IPSec and VPNs

Choose the site-to-site VPNs that are managed by your enterprise. (choose 3)

• GRE over IPSec

• DMVPN

• IPSec VTI

• MPLS

• Remote Access

If you use a service provider to manage your site-to-site VPNs, what will they they use?

• GRE over IPSec

• DMVPN

• IPSec VTI

• MPLS

• Cisco AnyConnect

Match the site-to-site VPN solutions available for you to manage on your enterprise to the correct description.

• IPSec VTI

• A non secure tunneling protocol (VPN) combined with IPSec

• GRE over IPSec

• Connect branch sites with a central site.

• DMVPN

• Secure tunneling without the need for GRE.

MPLS uses _________ to distribute packets between routers.

• labels

• tags

• vlans

• frames

How can you tell a device is accessing company resources using a Remote-Access VPN versus a Site-to-Site VPN?

• the user has client software installed

• the user has no knowledge of the VPN

• you can't

What is a remote access VPN?

• a physical device that connects two offices over a private line for secure communication.

• software used to monitor the activities of remote workers without their knowledge.

• allows users to access public websites anonymously without any encryption or security measures.

• allows individual users to securely connect to a private network from a remote location.

Remote Access VPNs allows individual users to securely connect to a private network from a remote location, typically over the internet.

• Clientless VPN Connection

• encryption used by remote access VPNs

• TLS/SSL

• VPN client software installed on the remote user's device

• Client-based VPN Connection

• secure connection using a web browser SSL connection

• Cisco AnyConnect

• Cisco's client-based VPN software

Match the terms to the correct description.

• IPSec

• dynamically support multiple IPSec tunnels

• mGRE

• non-secure VPN tunnel

• GRE

• a VPN that provides confidentiality, integrity, and authentication

• DMVPN

• multiple IPSec tunnels

IPSec . . .

• is an open framework (non-proprietary) and relies on the algorithms in these protocols.

• is a proprietary framework developed by Cisco that requires specific hardware for implementation.

• iuses only proprietary encryption algorithms developed by the NSA, making it non-compatible with other standards.

• an open framework, but it exclusively uses symmetric encryption algorithms and does not support public-key cryptography.

Which of the following are IPSec protocols in the IPSec framework? (choose 2)

• AH

• ESP

• DES

• MD5

• PSK