Ccna Chapter 8

Front 1

Which action do IPsec peers take during the IKE Phase 2 exchange?

Back 1

negotiation of IPsec policy

Front 2

A network administrator plans to deploy an SSL VPN on a Cisco IOS router. Which SSL VPN mode would require the user to download a Java applet to connect to POP3, SMTP, and SSH services?

Back 2

thin client mode

Front 3

When CCP Quick Setup is used to configure a VPN-capable router, what is the strongest level of encryption allowed?

Back 3

3DES

Front 4

A network administrator is planning to implement centralized management of Cisco VPN devices to simplify VPN deployment for remote offices and teleworkers. Which Cisco IOS feature would provide this solution?

Back 4

Cisco Easy VPN

Front 5

What protocol is used by IPsec to calculate shared keys and to negotiate the parameters to be used by IPsec SAs?

Back 5

IKE

Front 6

The use of 3DES within the IPsec framework is an example of which of the five IPsec building blocks?

Back 6

confidentiality

Front 7

Refer to the exhibit. How will traffic that does not match that defined by access list 101 be treated by the router?

Back 7

It will be sent unencrypted.

Front 8

How many bytes of overhead are added to each IP packet while it is transported through a GRE tunnel?

Back 8

24

Front 9

What VPN solution uses a server to push IPsec policies to mobile clients so that they can access company resources over a secure IPsec tunnel?

Back 9

Cisco Easy VPN

Front 10

Which statement describes an important characteristic of a site-to-site VPN?

Back 10

It must be statically set up.

Front 11

What is the purpose of the "Generate Mirror..." button in site-to-site VPN wizard of CCP?

Back 11

to produce the required CLI commands to configure the router on the other side of the tunnel

Front 12

When configuring an IPsec VPN, what is used to define the traffic that is sent through the IPsec tunnel and protected by the IPsec process?

Back 12

crypto ACL

Front 13

Which factor is a drawback of providing remote connectivity and work solutions to employees?

Back 13

system security being maintained by employees themselves

Front 14

Which three statements describe the IPsec protocol framework? (Choose three.)

Back 14

AH uses IP protocol 51.
ESP provides encryption, authentication, and integrity.
AH provides integrity and authentication.

Front 15

Refer to the exhibit. Based on the CCP settings that are shown, which Easy VPN Server component is being configured?

Back 15

group policy

Front 16

A network administrator has acquired two different VPN-capable routers that will be installed in a network. Which factor must be verified between two routers prior to configuring a VPN tunnel?

Back 16

device interoperability

Front 17

Refer to the exhibit. A site-to-site VPN is required from R1 to R3. The administrator is using the CCP Site-to-Site VPN wizard on R1. Which IP address should the administrator enter in the highlighted field?

Back 17

10.2.2.2

Front 18

Refer to the exhibit. Which pair of crypto isakmp key commands would correctly configure PSK on the two routers?

Back 18

R1# crypto isakmp key cisco123 address 209.165.200.227

R2# crypto isakmp key cisco123 address 209.165.200.226

Front 19

What are two characteristics of SSL VPNs? (Choose two.)

Back 19

They can use noncompany-managed devices.
They require only a web browser on the client computer.

Front 20

What can be used as a VPN gateway when setting up a site-to-site VPN?

Back 20

Cisco router

Front 21

What is required for a host to use an SSL VPN to connect to a remote network device?

Back 21

A web browser must be installed on the host.

Front 22

Which statement describes the operation of the IKE protocol?

Back 22

It calculates shared keys based on the exchange of a series of data packets.

Front 23

With the Cisco Easy VPN feature, which process ensures that a static route is created on the Cisco Easy VPN Server for the internal IP address of each VPN client?

Back 23

Reverse Route Injection

Front 24

What is the purpose of configuring multiple crypto ACLs when building a VPN connection between remote sites?

Back 24

When multiple combinations of IPsec protection are being chosen, multiple crypto ACLs can define different traffic types.

Front 25

Which authentication method is available when specifying a method list for group policy lookup using the CCP Easy VPN Server wizard?

Back 25

radius