Infrastructure (Final)

Front 1

1. IPSec is supported by which of the following task forces?

Back 1

Internet Engineering

Front 2

2. With IPSec authentication, how many endpoints in the communication process must be trusted?

Back 2

both endpoints

Front 3

3. Which type of encryption uses multiple keys?

Back 3

asymmetric

Front 4

4. Which type of encryption uses only a single key?

Back 4

both A and B (symmetric and hash)

Front 5

5. IPSec uses digital signatures on __ packet(s) of info.

Back 5

each

Front 6

6. Which of the following parameters is negotiated when setting up a security association?

Back 6

transport or tunnel mode

Front 7

7. Which IPSec mode does not encrypt packet data?

Back 7

AH

Front 8

8. Which IPSec mode is used between two routers?

Back 8

tunnel

Front 9

9. Which of the following best describes a security association?

Back 9

the security terms negotiated between two hosts using IPSec

Front 10

10. How many ways are there for Win Server 2003 to authenticate IPSec connections.

Back 10

three

Front 11

11. The second window of the IP Filter Wizard asks for the source IP address for the filter. This can be statically configured as which of the following?

Back 11

all of the above (My IP address, specific DNS name, any IP address)

Front 12

12. What is the main disadvantage to third party certificates?

Back 12

cost

Front 13

13. Which of the following services can be configured to use certificates?

Back 13

all of the above (e-mail, EFS, smart cards)

Front 14

14. Kerberos uses a security boundary called a(n) __.

Back 14

realm

Front 15

15. Which of the following is an IPSec policy installed by default on Win Server 2003?

Back 15

Server (Request Security)

Front 16

16. How much ICMP traffic is allowed by the default IPSec policies?

Back 16

all

Front 17

17. How many policies can be assigned at a time on a single machine running Win Server 2003?

Back 17

one

Front 18

18. A single server can be configured with how many IPSec policies?

Back 18

as many as desired

Front 19

19. After an IPSec policy is assigned, when does it take effect?

Back 19

upon restarted the IPSec Policy Agent

Front 20

20. How many filter actions (used for security rules) exist by default on Win Server 2003?

Back 20

three

Front 21

21. What defines what is done to traffic that matches an IP filter list?

Back 21

filter actions

Front 22

22. Each filter action requires how many security methods?

Back 22

at least one

Front 23

23. Which two algorithms are used for AH and ESP data integrity?

Back 23

SHA1 and MD5

Front 24

24. Which two algorithms are used for ESP data encryption?

Back 24

DES and 3DES

Front 25

25. Which of the following is the most common hashing algorithm for commercial apps?

Back 25

MD5

Front 26

26. In cryptography, what does a key refer to?

Back 26

a large number that is difficult to guess

Front 27

27. Which type of encryption uses a public and private key?

Back 27

asymmetrical

Front 28

28. What mode of IPSec communication is characterized by the communication between two hosts?

Back 28

transport mode

Front 29

29. Which of the following is the process used by two IPSec hosts to negotiate their security parameters?

Back 29

IKE

Front 30

30. A certificate follows which standard?

Back 30

X.509

Front 31

31. In AD, a domain is equivelant to which of the following in relation to Kerberos?

Back 31

realm

Front 32

32. The default IPSec policies are configured to use which of the following for authentication by default?

Back 32

Kerberos

Front 33

33. How many IPSec policies can be used without being assigned?

Back 33

zero

Front 34

34. MD5 stands for __.

Back 34

Message Digest 5

Front 35

35. 3DES performs how many rounds of encryption with how many keys?

Back 35

three rounds three keys