CCNA Security v2.0 Chapter 8 Simulator Exam Online

Refer to the exhibit. How will traffic that does not match that defined by access list 101 be treated by the router?

What three protocols must be permitted through the company firewall for establishment of IPsec site-to-site VPNs? (Choose three.)

Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?

What is the purpose of configuring multiple crypto ACLs when building a VPN connection between remote sites?

Consider the following configuration on a Cisco ASA:

crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac

What is the purpose of this command?

Which transform set provides the best protection?

Which three ports must be open to verify that an IPsec VPN tunnel is operating properly? (Choose three.)

When is a security association (SA) created if an IPsec VPN tunnel is used to connect between two sites?

In which situation would the Cisco Discovery Protocol be disabled?

Which two statements accurately describe characteristics of IPsec? (Choose two.)

Which action do IPsec peers take during the IKE Phase 2 exchange?

Which three statements describe the IPsec protocol framework? (Choose three.)

Which statement accurately describes a characteristic of IPsec?

Which two IPsec protocols are used to provide data integrity?

What is the function of the Diffie-Hellman algorithm within the IPsec framework?

Refer to the exhibit. What HMAC algorithm is being used to provide data integrity?

What is needed to define interesting traffic in the creation of an IPsec tunnel?

Refer to the exhibit. What algorithm will be used for providing confidentiality?

Which technique is necessary to ensure a private transfer of data using a VPN?

Which statement describes a VPN?

Which protocol provides authentication, integrity, and confidentiality services and is a type of VPN?

What is the purpose of NAT-T?

Which term describes a situation where VPN traffic that is is received by an interface is routed back out that same interface?

What is an important characteristic of remote-access VPNs?

Which type of site-to-site VPN uses trusted group members to eliminate point-to-point IPsec tunnels between the members of a group?

Refer to the exhibit. Which pair of crypto isakmp key commands would correctly configure PSK on the two routers?

Which two protocols must be allowed for an IPsec VPN tunnel is operate properly (Choose two.)?