IS3230 CHAPTER 12

Question 1

As part of AAA, this provides the ability of a system to collect statistic on networks or users for auditing and billing purposes. This enables the tracking of systems usage, start and stop times of resources, and number of packets, as well as other metrics that identify what was used and for how long is called ___.

Answer 1

ACCOUNTING

Question 2

An IPSec authentication protocol that is used to prove the identity of the sender and ensure the data has not been tampered with is called ___.

Answer 2

AUTHENTICATION HEADER (AH)

Question 3

Network service that provide security through a framework of access controls and policies, enforcement of policies, and information needed for billing purposes is called ___.

Answer 3

AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING (AAA)

Question 4

____provides authentication over a PPP link.

Answer 4

CHALLENGE HANDSHAKE AUTHENTICATION PROTOCOL (CHAP)

Question 5

Authentication and encryption protocol for IPSec that encrypts Internet Protocol (IP) packets and ensures their integrity is called ___.

Answer 5

ENCAPSULATED SECURITY PAYLOAD (ESP)

Question 6

A framework enabling multiple authentication mechanisms over various connections is called ___.

Answer 6

EXTENSIBLE AUTHENTICATION PROTOCOL (EAP)

Question 7

A tunneling protocol that encapsulates packets inside Internet Protocol (IP) tunnels is called ___.

Answer 7

GENERIC ROUTING ENCAPSULATION (GRE)

Question 8

Provides identification to communication partners via a secure connection is called ___.

Answer 8

INTERNET KEY EXCHANGE (IKE)

Question 9

A protocol that secures IP communications by authentication and encrypting each IP packet is called ___.

Answer 9

INTERNET PROTOCOL SECURITY (IPSec)

Question 10

A protocol that provides the framework for the negotiation of algorithms, protocols, modes and keys for IKE is called ___.

Answer 10

INTERNET SECURITY ASSOCIATION AND KEY MANAGEMENT PROTOCOL (ISAKMP)

Question 11

This sets up a point-to-point connection between two computer systems that can be transmitted over multiple types of networks is called ___.

Answer 11

LAYER 2 TUNNELING PROTOCOL (L2TP)

Question 12

An algorithm that applies a hash function to a message, creating a 128-bit message digest. This algorithm is used to ensure the data has not been changed in any manner is called ___.

Answer 12

MESSAGE DIGEST 5 (MD5)

Question 13

Proveds a service to dial-in users. This server allows a computer system to connect to the network through either a phone line or the Internet is called ___.

Answer 13

NETWORK ACCESS SERVER (NAS)

Question 14

A protocol that allows computer systems to exchange key agreement over an insecure network is called ___.

Answer 14

OAKLEY

Question 15

A data-link protocol that provides authentication over PPP is called ___.

Answer 15

PASSWORD AUTHENTICATION PROTOCOL (PAP)

Question 16

A protocol for communication between two computers. Typically, the connection from the client to the server isomer a telephone line and is called ___.

Answer 16

POINT-TO-POINT PROTOCOL (PPP)

Question 17

A protocol that seats up a point-to-point connection between two computer systems over an Internet Protocol (IP) network is called ___.

Answer 17

POINT-TO-POINT TUNNELING PROTOCOL (PPTP)

Question 18

A server that provides an authentication service for users that are dialing into a network or accessing it from the Internet is called ___.

Answer 18

REMOTE ACCESS SERVER (RAS)

Question 19

A client/server protocol that provides authentication, authorization, and accounting for a remote dial-in system is called ___.

Answer 19

REMOTE AUTHENTICATION DIAL IN USER SERVICE (RADIUS)

Question 20

Records the configuration the computer systems need to support an IPSec connection is called ___.

Answer 20

SECURITY ASSOCIATION (SA)

Question 21

A remote access client/server protocol that provides authentication and authorization capabilities to users that are accessing the network remotely and is not a secure protocol is called ___.

Answer 21

TERMINAL ACCESS CONTROLLER ACCESS CONTROL SYSTEM (TACACS)

Question 22

A remote access client/server protocol. It is a Cisco proprietary protocol and provides authentication, authorization, and accounting is called ___.

Answer 22

TERMINAL ACCESS CONTROLLER ACCESS CONTROL SYSTEM PLUS (TACACS+)

Question 23

The sending of messages to a single network destination. The opposite of this is broadcast, where data is sent to all network destinations is called ___.

Answer 23

UNICAST

Question 24

1. RADIUS uses TCP.

TRUE OR FALSE

Answer 24

FALSE

Question 25

2. AAA stands for ___.

Answer 25

Authentication
Authorization
Accounting

Question 26

3. Which of the following bed describes the act of verifying that users are who they say they are?
4. Identification
5. Authentication
6. Authorization
7. Auditing

Answer 26

Authentication

Question 27

4. Which of the following are authentication protocols used with PPP (Select three)
5. CHES
6. CHAP
7. EAP
8. MAP
9. PAP

Answer 27

CHAP
EAP
PAP

Question 28

5. TACACS+ encrypts the entrée data packet.

TRUE OR FALSE

Answer 28

TRUE

Question 29

6. What portion of TACACS+ provides AAA capabilities?
7. NAS
8. Client
9. TACACS+ daemon
10. XTACACS

Answer 29

TACACS+ daemon

Question 30

7. What are examples of Web authentication? (Select three)
8. Knowledge-based authentication
9. Identification
10. Certificates
11. User ID/password
12. Remote access server

Answer 30

Knowledge-based authentication
Certificates
User ID/password

Question 31

8. MD5 is a cryptographic ___ function.

Answer 31

Hash

Question 32

9. Cisco developed the TACACS_ and XTACACS.

TRUE OR FALSE

Answer 32

TRUE

Question 33

10. Which of the following is used to validate the communication between a RADIUS server and a RADIUS client?
11. NAM
12. TACACS daemon
13. RAS
14. Shared secret

Answer 33

Shared secret

Question 34

11. PAP is a ___ handshake.

Answer 34

Two-way

Question 35

12. CHAP is a ___ handshake.

Answer 35

Three-way

Question 36

13. What is a program that runs in the background?
14. RAS
15. Encryption
16. Daemon
17. PAP

Answer 36

Daemon

Question 37

14. What is the de facto standard for IPSec key exchange?
15. OAKLEY
16. IKE
17. ISAKMP
18. RADIUS

Answer 37

IKE