Week 5: VPN and Network Security Quiz

A company with multiple branches wants to connect sites securely over the internet using encrypted tunnels. Which technology should they use?

• GRE

• VPN

• DMVPN

• MPLS

• VLAN

Answer explanation

A VPN (Virtual Private Network) provides secure, encrypted tunnels for connecting multiple branches over the internet, ensuring data privacy and security. Other options like GRE and MPLS do not inherently provide encryption.

A remote employee connects to the company network securely using their laptop from home. Which VPN model describes this connection?

• Site-to-site

• Hub-and-spoke

• Client-to-site

• Mesh

• Split-tunnel

Answer explanation

The connection described is a 'Client-to-site' VPN model, where an individual remote employee connects securely to the company network from their device, unlike site-to-site which connects entire networks.

A company VPN uses IPSec with ESP enabled. What benefit does ESP provide compared to AH?

• Authentication only

• Encryption only

• Encryption and integrity

• Integrity only

• Compression

Answer explanation

ESP provides both encryption and integrity, ensuring that data is kept confidential and has not been tampered with. In contrast, AH only offers authentication and integrity, lacking encryption capabilities.

A technician configures IPSec in tunnel mode. What happens in this mode?

• The IP header is encrypted

• Only payload data is encrypted

• The IP header remains visible

• Packets bypass encryption

• Packets use broadcast addressing

Answer explanation

In IPSec tunnel mode, the entire original IP packet, including the IP header, is encrypted. This ensures confidentiality and integrity, making the IP header not visible to outside observers.

A network administrator sets up VPN authentication using usernames and passwords stored on a central server. Which protocol supports this?

• GRE

• EAP

• RADIUS

• IPSec

• PPTP

Answer explanation

RADIUS (Remote Authentication Dial-In User Service) is a protocol that provides centralized authentication for users, making it suitable for VPNs that use usernames and passwords stored on a central server.

A remote worker uses RDP to access their office computer. What type of remote access method is this?

• Remote host access

• Site-to-site VPN

• Out-of-band management

• Cloud service

• GRE tunneling

Answer explanation

RDP (Remote Desktop Protocol) allows a user to connect to a remote computer, making it a form of remote host access. This method enables control over the office computer from a different location.

A company’s VPN encrypts all user internet traffic, not just corporate access. What is this configuration called?

• Full tunnel

• Split tunnel

• Double encryption

• Site-to-site

• SSL bypass

Answer explanation

The configuration where a VPN encrypts all user internet traffic, including personal browsing, is called a 'Full tunnel'. This ensures that all data is secure, unlike 'Split tunnel', which only encrypts corporate traffic.

An administrator uses SSH to manage routers over the internal LAN. What type of management is this?

• Out-of-band

• In-band

• Telnet

• Local console

• Wireless

Answer explanation

Using SSH over the internal LAN allows the administrator to manage routers through the network, which is classified as in-band management. This contrasts with out-of-band management, which uses a separate channel.

A technician connects directly to a router’s console port using a serial cable to perform configurations. What kind of management method is this?

• Remote in-band

• Out-of-band

• VPN

• SSH

• Web-based

Answer explanation

The technician is using a serial cable to connect directly to the router's console port, which is a method of accessing the device without going through the network. This is known as out-of-band management.

A remote worker connects to a VPN that only encrypts corporate traffic while local internet browsing bypasses the tunnel. What setup is this?

• Site-to-site

• Split-tunnel VPN

• Full-tunnel VPN

• IPSec tunnel mode

• GRE encapsulation

Answer explanation

A split-tunnel VPN allows only corporate traffic to be encrypted while local internet browsing bypasses the VPN tunnel. This setup enables users to access both corporate resources securely and the internet without routing all traffic through the VPN.