Question 1

The primary vulnerability associated with many methods of remote access is
A)Weak encryption
B)Too complicated for users to understand
C)The passing of critical data in clear text
D)Incompatibility with firewalls

Accepted Answer

The primary vulnerability associated with many methods of remote access is the passing of critical data in clear text. This exposes sensitive information to potential interception and misuse by unauthorized individuals.

Question 2

With IPsec,security associations are used to establish the logical set of security parameters designed to facilitate the sharing of information between entities.The security association protects
A)Confidentiality
B)Integrity and confidentiality
C)Confidentiality and availability
D)Integrity and availability

Accepted Answer

A security association is used to establish the security parameters for communication between entities in IPsec. These parameters include authentication, encryption, and integrity. The security association ensures the confidentiality and integrity of the data being transmitted by encrypting and verifying the data's integrity. Therefore, the best choice is B (Integrity and confidentiality).

Question 3

Your boss wants you to suggest a secure way to connect to the corporate network from home.You will have to connect through the Internet.What is a possible solution?
A)Telnet
B)FTP
C)VPN
D)rsh

Accepted Answer

VPN (Virtual Private Network) is the best choice for a secure connection to the corporate network over the internet. It encrypts the communication between the home computer and the corporate network, preventing any unauthorized access or data theft. Telnet, FTP, and rsh are not recommended as they transmit data in plaintext, making it vulnerable to interception and exploitation by hackers.

Question 4

The 802.1x standard is for a protocol to support communications between a user and a(n)
A)Authorization device
B)Available device
C)Serial device
D)Another user

Accepted Answer

The 802.1x standard defines a protocol that enables a user to be authenticated by an authorization device (such as a RADIUS server) before being granted access to a network. This standard is commonly used for secure wireless network access.

Question 5

RADIUS uses
A)TCP port 1812 for authentication and TCP port 1813 for accounting
B)TCP port 1812 for accounting and TCP port 1813 for authentication
C)UDP port 1812 for authentication and UDP port 1813 for accounting
D)UDP port 1812 for accounting and UDP port 1813 for authentication

Accepted Answer

RADIUS (Remote Authentication Dial-In User Service) uses UDP (User Datagram Protocol) ports 1812 for authentication and 1813 for accounting. TCP (Transmission Control Protocol) is not used in RADIUS communication.

Question 6

The three major components of the SSH protocol are the
A)Transport Layer Protocol,User Authentication Protocol,and Connection Protocol
B)User Datagram Protocol,User Authentication Protocol,and Connection Protocol
C)Transport Layer Protocol,User Encryption Protocol,and Connection Protocol
D)User Datagram Protocol,User Encryption Protocol,and Connection Protocol

Accepted Answer

The SSH protocol has three major components: Transport Layer Protocol, User Authentication Protocol, and Connection Protocol. The Transport Layer Protocol provides confidentiality and integrity to the connection, the User Authentication Protocol authenticates the user to the server, and the Connection Protocol allows the establishment of a secure connection between the client and server. Option B is incorrect because User Datagram Protocol is not a part of the SSH protocol. Option C and D are incorrect because there is no User Encryption Protocol in the SSH protocol.

Question 7

Which of the following protocols involves a two-way handshake in which the username and password are sent across the link in clear text?
A)PAP
B)SSH
C)EAP
D)CHAP

Accepted Answer

PAP (Password Authentication Protocol) is an authentication protocol that involves a two-way handshake and sends the username and password across the link in clear text. This makes it easy for attackers to intercept and steal login credentials. It is not recommended to use PAP for authentication in a network. SSH (Secure Shell) is a secure network protocol that uses encryption to protect network communications and is not relevant to this question. EAP (Extensible Authentication Protocol) is not a specific authentication protocol, but a framework for different authentication methods to be used within it. CHAP (Challenge Handshake Authentication Protocol) is a more secure authentication protocol that uses a three-way handshake and does not send the password in clear text.

Question 8

L2TP uses
A)UDP port 1701
B)TCP port 1701
C)TCP port 1107
D)TCP port 1217

Accepted Answer

L2TP (Layer 2 Tunneling Protocol) uses UDP port 1701 for establishing a connection and sending encapsulated data.

Question 9

TACACS+ uses
A)UDP port 49 and TCP port 50 for login
B)UDP port 49 and TCP port 49 for login
C)UDP port 49 and UDP port 50 for login
D)TCP port 49 and UDP port 50 for login

Accepted Answer

TACACS+ uses TCP port 49 for both authentication and authorization. It does not use UDP for login purposes.

Question 10

What does TACACS stand for?
A)Terminal Access Control of Authentication and Control Systems
B)Terminal Access Controller Access Control System
C)Television Availability Control And Communication Standard
D)Teletype Authentication and Control of All Control Systems

Accepted Answer

TACACS stands for Terminal Access Controller Access Control System, which is a protocol used for authentication, authorization, and accounting (AAA) services in network security. The other options are not accurate descriptions of TACACS.

Question 11

What does SSH stand for?
A)Simple Security Hardware
B)Secure Socket Help
C)Secure Shell
D)Scientifically Secure Hard Drive

Accepted Answer

SSH stands for Secure Shell, which is a secure network protocol used for remote access, file transfer, and data communication. It provides a safe and encrypted channel between two networked devices to prevent eavesdropping, tampering, and other attacks.

Question 12

Which protocol enables the secure transfer of data from a remote PC to a server by creating a VPN across a TCP/IP network?
A)PPPP
B)PPTP
C)PTPN
D)PPTN

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) enables the secure transfer of data from a remote PC to a server by creating a VPN (Virtual Private Network) across a TCP/IP network. PPPP, PTPN, and PPTN are not valid protocols.

Question 13

What protocol would you use for remote access,to get a console with an encrypted connection?
A)SSH
B)Telnet
C)FTP
D)STP

Accepted Answer

SSH (Secure Shell) is the best protocol to use for remote access with an encrypted connection. It provides a secure and encrypted connection between the client and the server, whereas Telnet and FTP do not have any encryption and transmit data in clear text. STP (Spanning Tree Protocol) is used for network redundancy and has no relevance to remote access.

Question 14

Which of the following protocols involves a three-way handshake and uses a shared secret key for communication?
A)PAP
B)CHAP
C)TCP
D)S/Telnet

Accepted Answer

The protocol that involves a three-way handshake and uses a shared secret key for communication is CHAP (Challenge-Handshake Authentication Protocol). PAP (Password Authentication Protocol) does not involve a three-way handshake, TCP (Transmission Control Protocol) is a transport protocol, and S/Telnet (Secure Telnet) is a secure version of Telnet but does not use a shared secret key for authentication.

Question 15

In addition to "What users know," "What users have," and "What users are," what did the author add to be able to authenticate a user?
A)"What users should have"
B)"What users should think"
C)"What users can argue they should be"
D)"What users do"

Accepted Answer

The author added "What users do" to be able to authenticate a user. This refers to the actions or behaviors that users perform, such as typing a password, answering security questions, or using a biometric identifier like a fingerprint or facial scan. This is often referred to as "something you do" and is a common factor used in multi-factor authentication.

Question 16

What does AAA stand for?
A)Awareness,Accounting,Available
B)Acceptable,Available,Activities
C)Acute,Awareness,Accounting
D)Authentication,Authorization,Accounting

Accepted Answer

AAA stands for Authentication, Authorization, and Accounting. These are three important components of network security and access control. Authentication verifies the identity of users and devices, authorization specifies what resources they can access, and accounting tracks their usage for billing, monitoring, and reporting purposes.

Question 17

What does RADIUS stand for?
A)Real Access Device Invisible Users Solution
B)Rational Available Device Incremental Users Service
C)Remote Authentication Dial-In User Service
D)Remote Authentication Device Invisible Users Solution

Accepted Answer

RADIUS stands for Remote Authentication Dial-In User Service.

Question 18

With IPsec,AH and ESP
A)Must be used together
B)Must be used separately
C)Can be used separately or together
D)Must be used with EAP

Accepted Answer

IPsec, AH (Authentication Header), and ESP (Encapsulating Security Payload) are three security protocols that can be used separately or together, depending on the specific security requirements of the network or application. IPsec provides a framework for securing IP communications, while AH provides data integrity and authentication, and ESP provides confidentiality, integrity, and authentication. Therefore, the best choice is to use them separately or together, as needed to meet the security requirements of the network or application. EAP (Extensible Authentication Protocol) is not related to IPsec, AH, or ESP and is used to provide authentication only, so it is not relevant to this question.

Question 19

What are the three types of accounting records in TACACS+?
A)Availability,Accounting,Confidentiality
B)Availability,Integrity,Confidentiality
C)Start,Stop,Update
D)Start,Stop,Delete

Accepted Answer

TACACS+ uses three types of accounting records known as Start, Stop, and Update. Start records are created when a user initiates a session or log in. Stop records are generated when the session or log out ends. Update records are created when there is a change in the authorization for a user or when any other update is required. The other options listed in the question (A and B) do not accurately describe the accounting records used in TACACS+. Option D is not a valid choice as there is no record type for "Delete" in TACACS+.

Question 20

Which of the following describes the wireless standard?
A)802.11
B)854.12
C)800.15
D)756.10

Accepted Answer

802.11 is a wireless standard that allows for the implementation of wireless local area networks (WLANs). It specifies the requirements for wireless transmission of data at different rates over different frequencies. The standard is maintained by the Institute of Electrical and Electronics Engineers (IEEE) and has evolved over time with new amendments to support higher transmission speeds and better security mechanisms. Choices B), C), and D) are not wireless standards.

Quiz 11: Authentication and Remote Access

The primary vulnerability associated with many methods of remote access is

With IPsec,security associations are used to establish the logical set of security parameters designed to facilitate the sharing of information between entities.The security association protects

Your boss wants you to suggest a secure way to connect to the corporate network from home.You will have to connect through the Internet.What is a possible solution?

The 802.1x standard is for a protocol to support communications between a user and a(n)

RADIUS uses

The three major components of the SSH protocol are the

Which of the following protocols involves a two-way handshake in which the username and password are sent across the link in clear text?

L2TP uses

TACACS+ uses

What does TACACS stand for?

What does SSH stand for?

Which protocol enables the secure transfer of data from a remote PC to a server by creating a VPN across a TCP/IP network?

What protocol would you use for remote access,to get a console with an encrypted connection?

Which of the following protocols involves a three-way handshake and uses a shared secret key for communication?

In addition to "What users know," "What users have," and "What users are," what did the author add to be able to authenticate a user?

What does AAA stand for?

What does RADIUS stand for?

With IPsec,AH and ESP

What are the three types of accounting records in TACACS+?

Which of the following describes the wireless standard?