NEW
Font size
WorksheetsITE 383: Network Security P2 EXAM
Total questions: 50
Worksheet time: 25mins
What is the primary purpose of implementing a site-to-site VPN between Branch A and Branch B?
To enhance internet speed for users at both locations.
To establish a secure and private connection between the two branch offices over the internet.
To bypass geo-restrictions imposed by the local authorities.
To replace the physical network cables between the branches.
Which IPsec protocol offers data confidentiality, integrity, and authentication services by encrypting the entire data payload of IP packets?
AH (Authentication Header)
ESP (Encapsulating Security Payload)
IKE (Internet Key Exchange)
GRE (Generic Routing Encapsulation)
What are the benefits of using a site-to-site VPN?
Enhanced security, data privacy, and bypassing geo-restrictions.
Faster internet speed and remote access for users.
Increased productivity for remote workers and secure data transfer.
Anonymous online activities and improved network reliability.
How does a VPN achieve data confidentiality between the user's device and the VPN server?
By using Network Address Translation (NAT) to hide the user's IP address.
By providing data integrity and authentication services using the AH protocol.
By encrypting the data transmitted over the internet using encryption protocols like ESP.
By creating a private subnet for the user's device within the public network.
Which type of VPN is commonly used by remote workers or travelers who need to securely access company resources from outside the office?
Site-to-Site VPN
IPsec VPN
Remote-Access VPN
Virtual Private LAN Service (VPLS)
What type of VPN has XYZ Enterprises implemented to ensure secure communication between their branch offices?
Remote-Access VPN
IPsec VPN
MPLS VPN
PPTP VPN
What is the likely cause of the connectivity issue faced by users at Branch C?
Incorrect IP addresses assigned to devices at Branch C.
Firewall blocking VPN traffic at the main office.
Internet connectivity issues at the main office.
Misconfiguration of IPsec authentication parameters.
Which IPsec protocol provides data confidentiality by encrypting the entire data payload of IP packets?
ESP (Encapsulating Security Payload)
AH (Authentication Header)
IKE (Internet Key Exchange)
GRE (Generic Routing Encapsulation)
What is the purpose of a site-to-site VPN in the context of XYZ Enterprises' network?
To allow remote workers to securely access company resources from outside the office.
To bypass geo-restrictions for accessing specific websites.
To ensure secure communication between branch offices over the public internet.
To establish secure connections between individual devices within the same branch office.
How does a VPN achieve data integrity and authentication between communicating devices?
By encrypting the data payload of IP packets using ESP.
By using Network Address Translation (NAT) to hide the devices' IP addresses.
By establishing a virtual private subnet for each branch office.
By using authentication protocols like AH and digital signatures.
What is the purpose of enabling the Security Technology package in Cisco IOS IPS configuration?
To activate IPS signatures.
To enable basic firewall functionality.
To enable intrusion detection.
To enable IPS on the router.
What command is used to create an IPS rule name in Cisco IOS IPS configuration?
ip ips rule
ip ips name
ip ips policy
ip rule name
Which command is used to configure the storage location for IPS signatures in the Cisco IOS IPS configuration?
ip ips location
ip ips config location
ip signature location
ip config signature-location
How can you view the IPS configuration status summary in Cisco IOS CLI?
show ip ips config
show ip ips status
show ip ips summary
show ip ips all
What is the purpose of the "retired true" command in Cisco IOS IPS signature-category configuration?
It enables a signature category.
It activates a specific signature.
It marks a signature category as retired.
It configures syslog notifications.
What is the primary purpose of enabling Dynamic ARP Inspection (DAI)?
To prevent MAC flooding attacks.
To secure the physical ports of the switch.
To validate ARP requests and responses and prevent ARP spoofing attacks.
To encrypt data transmission within the local network.
Which Layer 2 security measure helps mitigate rogue DHCP server attacks?
VLAN segmentation
Port security
Dynamic ARP Inspection (DAI)
DHCP snooping
What is the main objective of enabling port security on a switch port?
To prevent unauthorized access to the network.
To encrypt data transmission within the LAN.
To validate ARP requests and responses.
To limit the number of MAC addresses per port.
Which interface should be trusted when enabling DHCP snooping?
The uplink interface to the router.
The interface connected to the DHCP server.
Any user-facing interface.
The management interface of the switch.
In a CAM table attack, what does the attacker flood the switch with to compromise its operation?
MAC addresses
IP addresses
VLAN IDs
Port numbers
Which security risk is associated with wireless networks?
Call Tampering
Data Corruption
Eavesdropping
Insider Threats
What is the main purpose of implementing encryption for VoIP communications?
To prevent unauthorized access to the VoIP network.
To secure data transmission and prevent eavesdropping.
To protect against rogue access points.
To filter and protect against potential threats.
Which SAN security measure restricts access to authorized servers only?
Zoning and LUN Masking
VoIP Firewall
Quality of Service (QoS)
Data Encryption
What is the primary security concern associated with unauthorized access to a Storage Area Network (SAN)?
Data Interception
Data Corruption
Unauthorized access to VoIP endpoints
Unauthorized access to critical data
Which wireless network security measure helps detect unauthorized access points?
Zoning and LUN Masking
Data Encryption
Intrusion Detection for wireless traffic
Quality of Service (QoS)
What is the primary goal of confidentiality in cryptography?
Ensuring data remains unchanged and unaltered.
Verifying the identity of the sender.
Protecting data from unauthorized access.
Guaranteeing data remains confidential and accessible to authorized users.
What cryptographic practice aims to mitigate side-channel attacks during encryption?
Applying constant-time algorithms and power analysis resistance.
Using strong encryption algorithms.
Implementing secure key management.
Utilizing cryptographically secure random number generators.
Which type of cryptanalysis attack exploits information obtained from power consumption during encryption?
Brute-Force Attack
Frequency Analysis
Side-Channel Attack
Known Plaintext Attack
Why is HMAC (Hash-Based Message Authentication Code) used?
To encrypt data during transmission.
To create secure backups of cryptographic keys.
To ensure the integrity and authenticity of a message.
To generate strong cryptographic keys.
What is the purpose of key rotation in key management?
To ensure proper initialization vector handling.
To mitigate the impact of potential key compromise.
To verify the security of cryptographic libraries.
To prevent data corruption during transmission.
What was the main reason for the vulnerability of the Data Encryption Standard (DES) and its subsequent replacement?
Inadequate Feistel network structure
Weak substitution-permutation operations
Short 56-bit encryption key
Lack of symmetric encryption
Which encryption algorithm is considered a suitable replacement for DES due to its security and versatility?
MD5
RSA
AES
SHA-1
Which encryption mode introduces feedback from the previous ciphertext block into the encryption process of the current block?
Electronic Codebook (ECB)
Cipher Block Chaining (CBC)
Cipher Feedback (CFB)
Output Feedback (OFB)
What is the primary purpose of a Digital Signature in asymmetric cryptography?
Encrypting data for secure transmission
Ensuring data integrity during transmission
Verifying the authenticity and integrity of digital messages
Creating random numbers for key generation
Which type of Certificate Authority (CA) is operated by organizations for internal use and issues certificates for securing internal communications?
Public CA
Private CA
Self-Signed CA
Third-party CA
What is the primary purpose of a VPN (Virtual Private Network)?
Enhancing website speed
Providing free internet access
Creating a secure and private connection over a public network
Blocking access to restricted websites
Which of the following benefits is NOT associated with using a VPN?
Enhanced security through encryption
Remote access to private resources
Bypassing geo-restrictions
Increased visibility of online activities
What type of VPN is commonly used by remote workers to securely access company resources from outside the office?
Remote-access VPN
Site-to-site VPN
IPsec VPN
IKE VPN
Which IPsec protocol is responsible for providing data confidentiality through encryption in a VPN?
AH (Authentication Header)
ESP (Encapsulating Security Payload)
IKE (Internet Key Exchange)
GRE (Generic Routing Encapsulation)
In a site-to-site VPN, what is the main purpose of the GRE (Generic Routing Encapsulation) tunnel?
Encrypting data between remote users and a private network
Creating a secure communication channel between remote workers
Bypassing geo-restrictions on websites
Establishing secure communication between geographically dispersed networks
The Data Encryption Standard (DES) operates on 128-bit blocks of data and uses a 64-
bit encryption key.
TRUE
FALSE
DES uses a symmetric encryption algorithm, meaning it uses different keys for encryption
and decryption.
TRUE
FALSE
DES is considered a highly secure encryption algorithm even in modern applications due
to its complex Feistel network structure.
TRUE
FALSE
Triple DES (3DES) enhances the security of DES by applying the encryption process
twice in sequence with different keys.
TRUE
FALSE
The Advanced Encryption Standard (AES) is widely used as a replacement for DES and
supports key lengths of 128, 192, or 256 bits.
TRUE
FALSE
VPNs can be used for both remote-access and site-to-site scenarios. Site-to-site VPNs
establish secure connections between multiple private networks, allowing them to
communicate securely over an untrusted network.
TRUE
FALSE
IPsec operates at the network layer (Layer 3) of the OSI model. While it provides
authentication and encryption services, it primarily operates at the network layer to secure
IP communications.
TRUE
FALSE
The Authentication Header (AH) protocol in IPsec encrypts the entire data payload of the
IP packet, ensuring the confidentiality of the data.
TRUE
FALSE
IKE (Internet Key Exchange) is responsible for securely transmitting the actual data
between two devices in an IPsec VPN.
TRUE
FALSE
A site-to-site GRE (Generic Routing Encapsulation) tunnel allows remote users to
connect securely to a private network over the internet, enhancing productivity for remote
workers.
TRUE
FALSE
