CCNA 3 Module (6-8) Part 2

Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?

• • integrity

• • authentication

• • confidentiality

• • secure key exchange

Which two types of VPNs are examples of enterprise-managed remote access VPNs? (Choose two.)

• • clientless SSL VPN

• • client-based IPsec VPN

• • IPsec VPN

• • IPsec Virtual Tunnel Interface VPN

• • GRE over IPsec VPN

Which is a requirement of a site-to-site VPN?

• • It requires hosts to use VPN client software to encapsulate traffic.

• • It requires the placement of a VPN server at the edge of the company network.

• • It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic.

• • It requires a client/server architecture.

What is the function of the Diffie-Hellman algorithm within the IPsec framework?

• • guarantees message integrity

• • allows peers to exchange shared keys

• • provides authentication

• • provides strong data encryption

What does NAT overloading use to track multiple internal hosts that use one inside global address?

• • port numbers

• • IP addresses

• • autonomous system numbers

• • MAC addresses

Refer to the exhibit. R1 is configured for static NAT. What IP address will Internet hosts use to reach PC1?

• • 192.168.0.1

• • 192.168.0.10

• • 209.165.201.1

• • 209.165.200.225

Which type of VPN uses the public key infrastructure and digital certificates?​

• • SSL VPN

• • GRE over IPsec

• • IPsec virtual tunnel interface

• • dynamic multipoint VPN

Which two WAN infrastructure services are examples of private connections? (Choose two.)

• • cable

• • DSL

• • Frame Relay

• • T1/E1

• • wireless

Which two statements about the relationship between LANs and WANs are true? (Choose two.)

• • Both LANs and WANs connect end devices.

• • WANs are typically operated through multiple ISPs, but LANs are typically operated by single organizations or individuals.

• • WANs must be publicly-owned, but LANs can be owned by either public or private entities.

• • WANs connect LANs at slower speed bandwidth than LANs connect their internal end devices.​

• • LANs connect multiple WANs together.

Which statement describes an important characteristic of a site-to-site VPN?

• • It must be statically set up.

• • It is ideally suited for use by mobile workers.

• • It requires using a VPN client on the host PC.

• • After the initial connection is established, it can dynamically change connection information.

• • It is commonly implemented over dialup and cable modem networks.