70-216 - Moc 2153 - Ipsec - L2 - Implementing Ipsec

Front 1

You control IPSec by using a policy configuration that you manage in _ _ _ _

Back 1

IP Security Policy Managemen

Front 2

To configure IPSec policies for computers, you must have the appropriate administrator rights to _ _ or be a member of the local system's _ group.

Back 2

Group Policy
Administrators

Front 3

Managing IPSec Policies:
Manage only the computer on which the console is running, Click _ _

Back 3

Local Computer.

Front 4

Manage IPSec policies for any domain members Click _ _ _ for this computer's _ .

Back 4

Manage domain policy for this computer's domain

Front 5

Manage IPSec policies for a domain of which the computer that is running this console is not a member Click _ _ policy for _ _.

Back 5

Manage domain
another domain

Front 6

Using Predefined IPSec Policies
Client (Respond Only)
This policy is for computers that _ _ _secure communications
enables _ with computers requesting _

Back 6

do not require
negotiation
IPSec

Front 7

Using Predefined IPSec Policies
Server (Request Security)

-This policy is for computers that require secure communications _ _ _ _
-enables the computer to accept _ _, but always attempts to _ _ _ by requesting security from the original sender.
- This policy allows the entire communication to be _ if the other computer is _ _ for IPSec.

Back 7

most of the time
unsecured traffic
secure additional communications
unsecured
not enabled

Front 8

Using Predefined IPSec Policies
Secure Server (Require Security)
This policy is for computers that _ require _ communications.
- This policy _ _ incoming communications, and outgoing traffic is _ _.

Back 8

always
secure
rejects unsecured
always secured

Front 9

The transport mode _ and _ data flowing between any two computers running Windows 2000

Back 9

authenticates
encrypts

Front 10

_ _ is the default IPSec mode.

Back 10

Transport mode

Front 11

The transport mode provides _ for the network and can potentially support a secure connection with _ _ _ _ computer

Back 11

security
more than one other

Front 12

_ mode is used to create secure communications for remote networks.

Back 12

Tunnel

Front 13

The advantage of tunnel mode is that data is _between the two tunnel ends, regardless of the _.

Back 13

secure
destination

Front 14

When you configure IPSec for tunnel mode, _ communications between networks are _, without requiring you to _ _on each computer.

Back 14

all
secure
configure IPSec

Front 15

Tunnel mode for IPSec _ and _ data flowing within an IP tunnel that is created between two _

Back 15

authenticates
encrypts
routers

Front 16

Windows 2000 requires _ _ _ to implement tunnel mode for IPSec.

Back 16

Routing and Remote Access

Front 17

Windows 2000 supports _ tunnel mode connections, but only _ _ at a time. Each tunnel connection requires a _ rule.

Back 17

multiple
one tunnel
separate

Front 18

You can create_ IPSec policies to select which _ require _ and the security _ that are used for encryption

Back 18

customized
computers
encryption
methods

Front 19

IPSec policies use _ to govern how and when a policy is invoked

Back 19

rules

Front 20

A rule provides the ability to initiate and control secure actions based on the _ , destination, and _ of IP traffic.

Back 20

source
type

Front 21

Each IPSec policy may contain _ rules.

Back 21

multiple

Front 22

Components of a Rule:

Tunnel _
_ Type
_ Method
IP _ List
_ Action

Back 22

Endpoint
Network
Authentication
Filter
Filter

Front 23

Encryption types:
SHA - FIPS accepted for U.S. _ _. This high-security method uses a _ bit key.

Back 23

government contracts
160

Front 24

Encryption types:
MD5 - Most widely used method for _ _. This high-security method uses a single _ bit key and has a _ performance overhead.

Back 24

commercial applications
128-bit
lower

Front 25

56-bit DES - Method used for most _ applications and _ business traffic, such as e-mail. This low-security method uses a single _ bit key.

Back 25

exported
low-security
56-bit

Front 26

40-bit DES Method supported for application exports to _. This low-security method uses a single _-bit key. The _-bit Data Encryption Standard (DES) is not _ compliant.

Back 26

France
40-bit
40
RFC

Front 27

3DES _ _ method. Uses _ _-bit keys. 3DES processes each block three times, using a unique key each time. This high-security method increases processor utilization by a factor of about 2.5 compared with other DES encryption.

Back 27

Most secure
3
56

Front 28

Before secured data can be exchanged, a _ _ between the two computers must be established

Back 28

security association (SA)

Front 29

In an SA, both computers _ how to exchange and protect information.

Back 29

negotiate

Front 30

The initiating computer sends an _ _of potential security _to the responding _.

Back 30

offer list
levels
peers

Front 31

The responder either _ _ _ accepting the offer, or discards the offer and sends back a message indicating that _ _was chosen.

Back 31

sends a reply
no offer

Front 32

If the active policies allow _ communications with non-IPSec-capable computers, a _ _ is established.

Back 32

unsecured
soft SA

Front 33

If active policies are compatible, a _, or _ _is established.

Back 33

secured
hard, SA

Front 34

IPSec at the _ _level provides protection for server applications and services, without _ those server applications and services that use IP for transport of data.

Back 34

IP transport
modifying

Front 35

By default, the Secure Server policy is _

Back 35

disabled

Front 36

IPsec is a security service that gives administrators the ability to apply various security methods to the _ data packet regardless of which program generates the data.

Back 36

IP

Front 37

Your organization operates on an IP-based network. You want to provide secure end-to-end security for your intranet by securing all IP-based traffic to and from your Windows 2000-based application servers. Which policy should you assign to your application servers?

Back 37

Secure Server (Require Security).

Front 38

IPSec at the _ _level provides protection for server applications and services, without _ those server applications and services that use IP for transport of data.

Back 38

IP transport
modifying

Front 39

By default, the Secure Server policy is _

Back 39

disabled

Front 40

IPsec is a security service that gives administrators the ability to apply various security methods to the _ data packet regardless of which program generates the data.

Back 40

IP

Front 41

Your organization operates on an IP-based network. You want to provide secure end-to-end security for your intranet by securing all IP-based traffic to and from your Windows 2000-based application servers. Which policy should you assign to your application servers?

Back 41

Secure Server (Require Security).