Virtual Private Networks (VPNs)
Exam Questions
Course Introduction
This course provides an in-depth exploration of Virtual Private Networks (VPNs), focusing on the principles, technologies, and configurations that enable secure communications over public networks. Students will learn about different types of VPNs, including remote access, site-to-site, and client-based solutions, as well as protocols such as IPsec, SSL/TLS, and MPLS. The curriculum covers authentication methods, encryption techniques, tunneling technologies, and the design and deployment of VPN architectures. Practical labs and case studies offer hands-on experience in setting up and troubleshooting VPNs, evaluating security risks, and implementing best practices for enterprise environments. By the end of the course, students will gain a comprehensive understanding of how VPNs protect data integrity, confidentiality, and privacy across diverse network infrastructures.
Recommended Textbook Guide to Firewalls and VPNs 3rd Edition by Michael
E. Whitman
Available Study Resources on Quizplus
10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) In a ____ attack, the attacker sends a large number of connection or information requests to a target in an attempt to overwhelm its capacity and make it unavailable for legitimate users.
A) man-in-the-middle
B) sniffer
C) dictionary
D) denial-of-service (DoS)
Answer: D
Q2) Describe a dictionary attack.
Answer: The dictionary attack, which is a variation on the brute force attack, narrows the field by selecting specific target accounts and using a list of commonly used passwords (the dictionary) instead of random combinations.Organizations can use such dictionaries themselves to disallow passwords during the reset process and thus guard against easy to-guess passwords.In addition, rules requiring additional numbers and/or special characters make the dictionary attack less effective.Another variant, called a rainbow attack, makes use of a pre-computed hash using a time-memory tradeoff technique that uses a database of pre-computed hashes from sequentially calculated passwords to look up the hashed password and read out the text version, with no brute force required.
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) The document ____ provides a systems developmental lifecycle approach to security assessment of information systems.
A) SP 800-53 A, Jul 2008: Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans
B) SP 800-53 Rev. 3: Recommended Security Controls for Federal Information Systems and Organizations
C) SP 800-41 Rev. 1: Guidelines on Firewalls and Firewall Policy
D) SP 800-14: Generally Accepted Principles and Practices for Securing Information Technology Systems
Answer: A
Q2) When disaster threatens the viability of the organization at the primary site, disaster recovery undergoes a transition into ____.
A) business continuity
B) incident response
C) attack planning
D) crisis management
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) Determined by a central authority in the organization.
A)authentication
B)least privilege
C)discretionary access controls
D)authorization
E)separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability
Answer: H
Q2) Most organizations do not need the detailed level of classification used by the military or federal agencies.
A)True
B)False
Answer: True
Q3) ____________________ IP address mappings work best because some TACACS+ systems use the source IP address to create the encryption key.
Answer: Static
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) Firewalls provide ____ services by examining packet headers and allowing traffic that conforms to estalished rules to continue.
A) packet filtering
B) NAT
C) application proxy
D) TCP/IP
Q2) Application gateways function at the ____ layer of the OSI model.
A) presentation
B) transport
C) network
D) data link
Q3) Application-layer gateways can control the way applications inside the network access external networks by setting up proxy services.
A)True
B)False
Q4) "____________________" refers to the era of technology a firewall evolved in.
Q5) What is a MAC layer firewall?
Q6) A(n) ____________________ is an extended network that shares part of an organization's network with third parties.
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) One of the first IP header criteria you can filter on is the packet's ____.
A) length
B) ACK flag
C) source IP address
D) type of service
Q2) The header field that indicates whether the packet is a fragment is ____.
A) flags
B) options
C) protocol
D) destination IP address
Q3) ____ are stand-alone hardware devices with self-contained components thar are purpose built to filter out network traffic that does not conform to established rules.
A) Firewall appliances
B) Routers
C) Software firewalls
D) Operating systems
Q4) Filtering by TCP or UDP port number is commonly called port filtering or ____________________ filtering.
Q5) Explain the process of packet filtering by TCP or UDP port number.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) SSL supports firewall-based ____.
A) IP forwarding
B) encryption
C) VPN
D) application proxy
Q2) Having a ____ password in place prevents someone from starting up your computer and accessing your hard disk files with a floppy disk called a boot disk.
A) BIOS
B) screen saver
C) supervisor
D) startup
Q3) Different types of hardware can be secured in different ways, but one of the most important ways is to ____.
A) never update once you have a good configuration defined
B) buy products from the same brand
C) only use on network administrator
D) choose good passwords that you then guard closely
Q4) What are the GAISP nine Pervasive Principles?
Q5) How should a firewall administrator guard against new risks?
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) A very popular proxy server for home and small business environments.
A)dual-homed host
B)URL redirection
C)nontransparent proxies
D)log files
E)parameters
F)SOCKS
G)WinGate
H)proxy servers
I)transparent proxies
Q2) How do proxy server log files help protect the network?
Q3) A proxy server rebuilds packets with new ____________________ IP information, which shields internal users from those on the outside.
Q4) A reverse proxy acts as a stand-in for a ____.
A) packet filter
B) firewall
C) proxy server
D) Web-server
Q6) How can a proxy server be used for e-mail protection? Page 9
Q5) How can proxy servers affect performance of the network?
To view all questions and flashcards with answers, click on the resource link above.
Page 10
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) On a bastion host that is intended to function as a Web server, for instance, you only need to enable traffic on TCP Port 80 and Port ____ for SSL traffic.
A) 79
B) 81
C) 443
D) 450
Q2) System specifically designed and implemented to withstand attacks.
A)instruction cache
B)log files
C)translation lookaside buffer
D)data cache
E)Demilitarized Zone
F)bastion host
G)UNIX
H)processor speed
I)syslog daemon
Q3) Where should a bastion host be located?
Q4) Why might it be a good idea to re-install the operating system on a bastion host?
Q5) What type of fees do hosting service charge?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 9: Encryption - The Foundation for the Virtual
Private Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) Describe some of the common protocols used to secure e-mail.
Q2) ____ attacks are collections of brute-force methods that attempt to deduce statistical relationships between the structure of the unknown key and the ciphertext that is the output of the cryptosystem.
A) Correlation
B) Man-in-the-middle
C) Dictionary
D) Timing
Q3) The ____ cipher rearranges the values within a block to create the ciphertext.
A) transposition
B) polyalphabetic substitution
C) Vernam
D) monoalphabetic substitution
Q4) Firewalls have always performed encryption-related functions.
A)True
B)False
Q5) In ____________________ cipher conversion, the bit stream is subjected to a Boolean XOR function against some other data stream, typically a key stream.
Q6) What are common implementations of PKI?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) The problem with mesh VPNs is that the requirement that all communications flow into and out of the central router slows down communications.
A)True
B)False
Q2) Making two connections over a VPN line is called ____.
A) IP Masquerade
B) packet filtering
C) split tunneling
D) split endpoints
Q3) ____________________ is a computer networking philosophy and a related set of protocols that are together used to evaluate the trustworthiness of a client wishing to join a network.
Q4) VPN endpoints provide ____ and encapsulation of data.
A) encryption
B) authentication
C) routing
D) tunneling
Q5) What are VPN endpoints?
Q6) Describe the hub-and-spoke configuration of a VPN.
Page 13
To view all questions and flashcards with answers, click on the resource link above.