3.5 Compare and contrast network access and management methods.

Question 1

What is a site-to-site VPN?

Answer 1

• Always-on connection (or almost always)
• Firewalls often act as a VPN concentrator

Question 2

What is a client-to-site VPN?

Answer 2

• On-demand access from a remote device
• Software connects to a VPN concentrator.
• Some software can be configured as always-on.

Question 3

What does it mean to be clientless?

Answer 3

• Hypertext Mark-up Language Version 5 (HTMLv5); the language commonly used in web browsers.
• Includes comprehensive API support
• It creates a VPN tunnel without a separate VPN application.

Question 4

What is a split tunnel?

Answer 4

• VPN traffic is sent through the tunnel but NON-VPN traffic is sent normally.
• This can be configured in the VPN software.

Question 5

What is a full tunnel?

Answer 5

• All traffic is sent through the VPN tunnel
• The client makes no additional forwarding decisions.
• May require additional routing at the concentrator.

Question 6

Explain SSH as a connection method.

Answer 6

• encrypted console communication through TCP/22

Question 7

Explain GUI as a connection method.

Answer 7

• Graphical User Interface
• Share a desktop from a remote location (it looks like you are right there).

Question 8

Explain API as a connection method.

Answer 8

• Using an application programming interface allows you to automate the process of logging into multiple devices (hundreds maybe) to make changes via a batch process.

Question 9

Explain the console as a connection method.

Answer 9

• Directly connecting to the device
• Traditionally a serial connection but can also connect via DB9,
  RJ45, or USB.

Question 10

What is a jump box/host?

Answer 10

• Provides an access mechanism to a protected network
• Typically a highly-secured device that is hardened and monitored.
• SSH/Tunnel/VPN to jump server then RDP/SSH or jump from there to the clients you need to access.

Question 11

Explain what in-band management means.

Answer 11

• Assign in IP address to a device (switch, router, firewall, etc.)
• Sometimes it may be a separate Ethernet interface
• Sometimes the IP address is inside the device.

Question 12

Explain what out-of-band management means.

Answer 12

• The network isn’t available or the device isn’t accessible from the network.
• Most devices have a separate management interface (usually a serial connection / USB).
• Connect to a modem to manage

Question 13

What is RDP?

Answer 13

• Remote Desktop Protocol
• Microsoft’s version to establish a remote connection with users.

Question 14

What is VNC?

Answer 14

• Virtual Network Computing
• It has the same functionality as RDP but can be run on many different types of operating systems.