Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CCNA > WAN Architectures > Flashcards

WAN Architectures Flashcards

1
Q

WAN stands for

A

Wide Area Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

MPLS stands for

A

Multi-Protocol Label Switching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Describe what a Leased Line is

A

A dedicated, private (not over the internet), physical connection between two sites.

Leased line typically means serial connections, with PPP or HDLC encapsulation. Basically dead at this point due to both cost and outdated tech

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

WAN via Ethernet typically involves which physical media?

A

Fiber

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When sending traffic between sites over shared infrastructure (like the internet), best practice is to utilize what?

A

IPsec VPN Tunnels

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

T/F: MPLS networks are shared infrastructure since many enterprises can connect to and share the same infrastructure to make WAN connections

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

T/F: MPLS networks are private infrastructure since VPNs seperate the ISP infrastructure into multiple, smaller networks

A

F

MPLS networks still are shared infrastructure. VPNs just allow the ISP network to be utilized in such a way to provide virtually private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

MPLS allows VPNs to be created over MPLS infrastructure through the use of:

A

Labels

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an MPLS CE router

A

Customer edge, sits at the border of the enterprise LAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is an MPLS PE router

A

Provider edge, connects to a CE router and other MPLS infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an MPLS P router

A

Provider, connects to other P routers and PE routers, but doesn’t connect to CE routers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When are MPLS labels added to frames?

A

When PE routers receive frames from CE routers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where are MPLS labels placed on a frame?

A

Between the L2 and L3 header

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

T/F: MPLS is generally transparent to CE routers, and CE routers don’t need to be MPLS capable

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

T/F: When using an L3 MPLS VPN, two CEs at different sites in a WAN will peer with their PE routers, and the two CE routers will learn about eachother’s routes through this peering

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

T/F: When using an L2 MPLS VPN, the CE and PE routers do not form peerings

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

T/F: When using an L2 MPLS VPN, the ISP network is entirely transparent to the CE routers, and basically acts like a big switch

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

T/F: When using an L2 MPLS VPN, if a routing protocol is used, the two CE routers will peer directly with eachother

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Three of the most common internet access technologies are:

A

Fiber, Cable, and DSL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

DSL stands for:

A

Digital Subscriber Line

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

DSL provides internet connectivity to customers over:

A

Phone lines

22
Q

What is the function of a modem

A

Converts data into a format suitable to be sent over phone/CATV lines

23
Q

Cable Internet provides internet connectivity to customers over:

A

Cable TV lines (CATV)

24
Q

T/F: A modem is required to provide internet access over DSL

A

T

DSL connections require a modem to convert internet data into a format suitable for phone lines

25
Q

T/F: A modem is required to provide internet access over Cable

A

T

CATV connections require a modem to convert internet data into a format suitable for Cable TV lines

26
Q

T/F: A modem is required to provide internet access over Fiber

A

F

Fiber is designed specifically for internet connections, so no modem is required. However, an ONT (Optical Network Terminator) is required for a fiber connection. This is usually built into a home router

27
Q

If you have one connection to one ISP, this is referred to as:

A

Single Homed

28
Q

If you have two connections to one ISP, this is referred to as:

A

Dual Homed

29
Q

If you have one connection each to two ISPs, this is referred to as:

A

Multihomed

30
Q

If you have two connections each to two ISPs, this is referred to as:

A

Dual Multihomed

31
Q

Two common kinds of Internet VPNs are:

A
  • Site-to-Site VPNs using IPsec
  • Remote-access VPNs using TLS
32
Q

What is the purpose of a site-to-site VPN

A

A VPN between two devices that is used to connect two sites together over the internet, primarily using IPsec

33
Q

Describe the encapsulation performed by IPsec VPNs when forwarding packets between two VPN enabled routers

A

Original packet is encrypted, encapsulated with a VPN header, and encapsulated again with a new IP header. Then sent over the internet to the destination device, encapsulated and decrypted

34
Q

T/F: In a site-to-site VPN, there are only two tunnel endpoints, and all other devices at each site don’t need to create a VPN for themselves

A

T

For site-to-site VPNs the tunnel only needs to be formed between the two site routers, all other devices can send unencrypted data to the tunnel endpoints

35
Q

T/F: IPsec doesn’t support broadcast and multicast traffic, only unicast

A

T

36
Q

Describe some limitations of IPsec VPNs

A
  • IPsec doesn’t support broadcast and multicast traffic. Therefore, routing protocols can’t be used over the tunnel (can be solved with GRE over IPsec)
  • Configuring a full mesh of tunnels between sites is labor intensive (Cisco DMVPN can solve)
37
Q

T/F: GRE creates tunnels like IPsec, but doesn’t encrypt traffic

A

T

38
Q

T/F: GRE can encapsulate a wide variety of L3 protocols as well as broadcast and multicast messages

A

T

39
Q

Describe the packet encapsulation performed by GRE over IPsec

A

Original packet is encapsulated by a GRE header and a new IP header, then encrypted with an IPsec VPN header and a new IP header

[] == encrypted
{[IP packet | GRE header | IP header] IPsec header | IP header}

40
Q

Describe what DMVPN does

A

Allows routers to dynamically create a full mesh of IPsec tunnels without having to manually configure every single tunnel

41
Q

What is the simplified approach to using DMVPN to form a full mesh of IPsec tunnels?

A
  1. Configure IPsec tunnels to a hub site (hub and spoke topology)
  2. The hub router gives each router information about how to form an IPsec tunnel with the other routers
42
Q

T/F: DMVPN provides the configuration simplicity of hub-and-spoke, and the efficiency of direct spoke-to-spoke communication

A

T

43
Q

Remote-Access VPNs serve what purpose:

A

Connect remote end devices to access company internal resources securely over the internet

44
Q

Remote-Access VPNs typically use:

A

TLS (Transport Layer Security). Formerly SSL, but renamed to TLS when standardized by the IETF

45
Q

T/F: Remote-Access VPNs typically use IPsec and Site-to-Site VPNs typically use TLS

A

F

Remote-Access typically uses TLS and Site-to-Site typically uses IPsec

46
Q

Company A uses an MPLS VPN to connect its offices together. Which of the following routers does NOT run MPLS?

a) PE
b) P
c) CE

A

CE

MPLS operation is performed by P and PE routers

47
Q

Which of the following MPLS VPN types allows CE routers to directly form OSPF peerings with each other?

a) L2 MPLS VPN
b) L2.5 MPLS PVN
c) L3 MPLS VPN

A

a) L2 MPLS VPN

48
Q

Which of the following internet access technologies takes advantage of already-installed phone lines?

a) Cable Internet
b) DSL
c) Fiber
d) MPLS

A

b) DSL

49
Q

Which of the following protocols can be used in combination with IPsec to provide more flexibility by allowing multicast traffic to be forwarded in the tunnel?

a) TLS
b) Site-to-Site VPN
c) GRE
d) Remote-Access VPN

A

c) GRE

50
Q

Which of the following technologies can you use to tunnel any L3 protocol through an IP transport network?

a) GRE
b) PPPoA
c) IPsec
d) PPPoE

A

a) GRE

51
Q

Compare and contrast IPsec in tunnel mode vs transport mode

A

Tunnel mode == Encrypts whole packet, requires additional L3 header to be added

Transport mode == Doesn’t encrypt IP header (only payload is encrypted), no additional L3 header required

52
Q

Which IPsec mode is required for NAT traversal?

A

Tunnel mode

The common L3 header in transport mode can screw with NAT traversal

CCNA (38 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions