Other Useful Protocols - CompTIA Network+ N10-009 - 1.4

Question 1

ICMP

Answer 1

Protocol. “Text message your device.”
Ping command, TTL

Question 2

GRE

Answer 2

Generic Routing Encapsulation -
The “tunnel” between two end points
Encapsulates traffic inside of IP
no built in Encryptions

Question 3

VPN

Answer 3

Protocol that uses a set of rules to transmit data between a device and a VPN server.

Question 4

IPSec

Answer 4

Protocol that provides level of encryption over a tunnel.
Provides digital signatures in every packet

Question 5

What are the two core IPSec protocols

Answer 5

Authentication Header (AH), Encapsulation Security Payload (ESP)

Question 6

Steps before IPSec can send encrypted data across the network

Answer 6

Internet Key Exchange (IKE)

Question 7

Internet Key Exchange (IKE)

Answer 7

A Security Association (SA) -
Allows both sides of the convo to agree on the encryption and decryption keys to be used for duration of VPN tunnel -

Question 8

What are the two phases to key exchange process?

Answer 8

Phase 1 Use Diffie-Hellman to create a shared secret key
udp/500
ISAKMP Internet Security Association and Key Management Protocol

Phase 2
Coordinate ciphers used for encryption and key sizes
And Negotiates an inbound and outbound SA for IPsec tunnel

Question 9

Phase 2 ISAKMP Tunnel ESP Tunnel

Answer 9

Coordinate Ciphers and key sizes
Negotiate an inbound and outbound SA for IPsec

Question 10

ISAKMP tunnel is built at which phase of SA

Answer 10

1
UDP/500

Question 11

WHat happens at phase 2 of the IKE

Answer 11

Includes encrypted data over ESP tunnel. Gives us foundation to send encrypted data over IPSec tunnel.

Question 12

transport mode

Answer 12

a IPsec header placed between the data as header and footer. Leaving the original IP header in front.

Question 13

tunnel mode

Answer 13

original IP header is and data is all encrypted. Given a new IP header and ipsec headers and trailers we saw in transport mode.

Question 14

Which version of IPSec mode gives you the most protection of original data?

Answer 14

tunnel

Question 15

AH

Answer 15

it validates info you receive over ipsec tunnel. as AH header.

Question 16

ESP

Answer 16

Encapsulation security payload
Encrypts original data and adds ESP header and trailer to packets.
Encrypts and Authenticates.