SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
Search
Test your basic knowledge |
CCIE Sec Encryption Ipsec
Start Test
Study First
Subjects
:
cisco
,
it-skills
,
ccie
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. DoS attacks are more probable with this mode.
IPSEC (aggressive mode)
IKE
AH
'MD5 - SHA-1 - or RSA'
2. IPsec implements using a shim header between L2 and L3
HMAC-MD5/HMAC-SHA
IKE
hash algorithms
AH/ESP
3. You check it by hashing data and appending the hash value to the data as you send it across the network to a peer.
AH
IPSEC BENEFIT
Hashing
MD5
4. 'has a Next Protocol field which identifies the next Layer 4 transport protocol in use - TCP or UDP'
IPSEC (aggressive mode)
message authentication codes (MAC).
AH/ESP
Difffie-Hellman
5. The protocol of choice for key management and establishing security associations between peers on the Internet.
3DES
ISAKMP
RSA
Tunnel Mode (ipsec)
6. The receiving device then encrypts the data with the second key.
AES
3DES
MD5
AH
7. Uses protocol number 51.
AH
MD5
3DES
DES
8. The receiving device decrypts the data with the third key.
3DES
'DES - 3DES - or AES.'
IPSEC (aggressive mode)
Tunnel Mode (ipsec)
9. Hybrid protocol that defines the mechanism to derive authenticated keying material and negotiation of security associations (SA).
IKE
ISAKMP
HMAC
IPSEC BENEFIT
10. 'Finally - the receiving devices decrypt the data with the first key.'
Tunnel Mode (ipsec)
hash algorithms
3DES
RSA
11. Has a trailer which identifies IPsec information and ESP integrity-check information.
ESP
IPSEC (aggressive mode)
Difffie-Hellman
MD5
12. It also provides protection for ISAKMP peer identities with encryption.
IKE
IPSEC (aggressive mode)
SHA
IPSEC (main mode)
13. Provide authentication in Internet Key Exchange (IKE) Phase 2.
MD5
3DES
ESP
HMAC
14. Negotiation of the ISAKMP policy by offering and acceptance of protection suites
IPSEC (main mode)
3DES
IPSEC BENEFIT
AH/ESP
15. Verify whether the data has been altered.
'IPSEC (phase1 -step1)'
Hashing
AES
3DES
16. A variable block- length and key-length cipher.
AES
IPSEC (aggressive mode)
ISAKMP
3DES
17. Provides authentication and encryption of the payload.
ESP
Hashing
DES
HMAC-MD5/HMAC-SHA
18. Integrity checks are done
19. 'Developed in 1977 by Ronald Rivest - Adi Shamir - and Leonard Adleman (therefore - RSA).'
ESP
IKE
3DES
RSA
20. Where the original Layer 3 header and payload inside an IPsec packet is encapsulated. Tunnel mode does add overhead to each packet and uses some additional CPU resources.
3DES
Transport Mode (Ipsec)
Tunnel Mode (ipsec)
ISAKMP
21. Used for integrity checks on peer and data sent by peer and for authentication checks.
AH
SHA
3DES
ISAKMP
22. 'A 56-bit encryption algorithm - meaning the number of possible keys
SHA
IPSEC (aggressive mode)
AH
DES
23. 'including Internet Security Association and Key Management Protocol (ISAKMP) - Secure Key Exchange Mechanism for the Internet (SKEME) - and Oakley.'
IPSEC (main mode)
3DES
AH
IKE
24. 'often called public-key algorithms - do not rely on a randomly generated shared encryption key; instead - they create two static keys. These static keys are completely different - but mathematically bound to each other; what one key encrypts - the o
IPSEC (aggressive mode)
3DES
Asymetric Encryption Protocols
3DES
25. Uses protocol number 50.
DES
IPSEC (main mode)
ESP
MD5
26. 'Digital signatures. Peer X encrypts a hash value with his private key and then sends the data to Peer Y. Peer Y obtains Peer X
'IPSEC (phase1 -step3)'
RSA
ISAKMP
AH/ESP
27. Takes variable-length clear-text data to produce fixed-length hashed data that is unreadable.
MD5
GRE
Hashing
IKE
28. Turns clear-text data into cipher text with an encryption algorithm. The receiving station decrypts the data from cipher text into clear text. The encryption key is a shared secret key that encrypts and decrypts messages.
Antireplay
MD5
DES
3DES
29. Used in IPsec for two discreet purposes:
SHA
RSA
ESP
ESP
30. That authenticate data packets and ensure that data is not tampered with or modified.
DSA
hash algorithms
Origin Auth (DH auth)
'MD5 - SHA-1 - or RSA'
31. ' is defined in RFC 3174. has as output a 160-bit value -'
hash algorithms
3DES
SHA
RSA
32. 'Three keys encrypt the data - which results in a 168-bit encryption key. The sending device encrypts the data with the first 56-bit key.'
Antireplay
3DES
SHA
IKE
33. Benefits are that the preshared authentication can be based on ID versus IP address and the speed of the process.
IPSEC (aggressive mode)
Hashing
3DES
RSA/DSA
34. 'The sending device decrypts the data with the second key - which is also 56 bits in length.'
IPSEC (aggressive mode)
hash algorithms
3DES
Hashing
35. It uses UDP 500 and is defined by RFC 2409.
'MD5 - SHA-1 - or RSA'
SHA
Difffie-Hellman
IKE
36. 'in most cases - this mode is preferred with certificates.'
AES
Hashing
IPSEC (main mode)
RSA
37. 'provides everything required to securely connect over a public media - such as the Internet.'
IPSEC
'IPSEC (phase1 -step1)'
IKE
HMAC
38. IPSEC performs this function by using a sequence field in the IPsec header combined with integrity checks.
HMAC-MD5/HMAC-SHA
ESP
Antireplay
Tunnel Mode (ipsec)
39. Act of encapsulating a packet within another packet.
hash algorithms
AH
Tunneling
3DES
40. Main disadvantage of asymmetric algorithms is that they are slow.
AH
IPSEC (aggressive mode)
RSA/DSA
Asymetric Encryption Protocols
41. 'establishes ISAKMP SA in three messages -because it negotiates a ISAKMP policy and a DJ nonce exchange together.'
IPSEC (aggressive mode)
AES
Hashing
ESP
42. 'defines the mode of communication - creation - and management of security associations.'
Origin Auth (DH auth)
ISAKMP
Asymetric Encryption Protocols
AES
43. 'MACs with hash algorithms -'
IKE
'DES - 3DES - or AES.'
ISAKMP
hash-based message authentication codes (HMAC).
44. 'group 5 identifies a 1536-bit key - provides for highest security but is the slowest of all groups.'
'IPSEC (phase1 -step3)'
Difffie-Hellman
AH/ESP
RSA
45. IPSEC tunnels data through IP using one of two protocols?
3DES
ESP
MD5
AH/ESP
46. 'key lengths are 128 - 192 - or 256 bits to encrypt blocks of equal length.'
IPSEC (main mode)
Difffie-Hellman
Difffie-Hellman
AES
47. Key exchange for IPSEC
DSA
3DES
'IPSEC (phase1 -step3)'
IKE
48. 'Encryption - where Peer X uses Peer Y
RSA
message authentication codes (MAC).
IPSEC (aggressive mode)
IPSEC (phase2)
49. 'is a more secure version of MD5 - and hash-based message authentication codes (HMAC) provides further security with the inclusion of a key-based hash.'
IPSEC (main mode)
SHA
MD5
'DES - 3DES - or AES.'
50. Uses the D-H algorithm to come to agreement over a public network.
IPSEC (phase2)
IKE
Difffie-Hellman
Difffie-Hellman