Cryptography: VPNs, Hash Algorithms & Authentication

What is a primary goal of cryptography?

Which of the following is a cryptographic service?

What does integrity ensure in cryptographic services?

What is the purpose of hashing?

Which of the following is a peer authentication method?

What is the role of a Certificate Authority (CA)?

What is the primary purpose of key exchange in cryptography?

What is a characteristic of symmetric encryption?

Which CIA service does encryption directly support?

Which hash algorithm has a longer key-length, providing more security?

What is HMAC used for?

What is a digital signature's main property?

Why are digital certificates used?

What is the function of a Registration Authority?

What is the full name of AES?

What does VPN stand for?

What best describes integrity?

Which of the following is stronger?

In a Public Key Infrastructure (PKI), which element is responsible for issuing digital certificates?

What is the purpose of running the hash algorithm?

If Alice wants to send an encrypted message to Bob using asymmetric encryption so only Bob can read it, which key does Alice use to encrypt the message?

Which key is generally used to decrypt data from asymmetric encryption?

Which of the options best describes confidentiality?

Which type of encryption uses the same key for encryption and decryption?

Cryptography ensures confidentiality, integrity, and authentication.

Encryption is the sole method for ensuring data integrity.

Authentication verifies the sender's identity.

Symmetric encryption uses two different keys for encryption and decryption.

Asymmetric encryption is generally faster than symmetric encryption.

Hashing is a one-way function; it is easy to revert the hash to get the original data.

A digital certificate is signed by a Certificate Authority (CA).

Integrity ensures that data has not been altered during transmission.

Confidentiality means that only authorized parties can access the information.

MD5 is considered more secure than SHA-256.

HMAC uses a secret key in addition to a hashing algorithm.

The Diffie-Hellman algorithm is used for encrypting messages directly.

Digital signatures provide non-repudiation, meaning the sender cannot deny sending the message.

VPNs primarily offer integrity but not confidentiality.

Encryption always guarantees complete anonymity.

A shorter key length in encryption always means stronger security.

SSL VPN stands for Secure Socket Layer Virtual Private Network

Integrity checks can detect accidental or malicious data modification.

The main goal of integrity is to prevent unauthorized access to data.

Data origin authentication provides assurance that the data source is as claimed.

DES and 3DES are equally secure encryption algorithms.

The primary purpose of a firewall is to ensure data integrity.

Cryptography can be used to protect data at rest and in transit.

A Certificate Authority is responsible for issuing digital certificates.

The terms 'encryption' and 'cipher' refer to distinct concepts in cryptography.

Which of the following is a potential benefit of using VPNs?

What type of VPN allows individual users to connect to a private network from a remote location?

What is a key factor to consider when comparing security protocols?

In IPsec, which protocol provides data confidentiality?

Which of the following is used for key exchange in IPsec?

What is the purpose of AH (Authentication Header) in IPsec?

Which mode of IPsec encrypts the entire IP packet?

Which of the following is a typical component of a remote-access VPN setup?

In a site-to-site VPN, do clients typically need to be aware a VPN is being used?

What is the first phase of IKE negotiation focused on?

What command is used to see the ISAKMP policy on the router?

After a crypto map is configured, what must be done to activate it?

What type of information can be exchanged via an IPsec tunnel?

What command lets you see information regarding IPsec?

What does the acronym ESP stand for?

Which Diffie-Hellman group is included in the default configuration?

What does the command crypto isakmp key do?

When defining interesting traffic, what does the word ACL stand for?

Which of the following isn't an ESP protocol?

What command is used to enable a crypto map on the interface?

What is the command to verify the interface is using the crypto map?

After the configurations have been made, what should you do test and verify the VPN?

What type of data is encrypted with ESP?

Is all data in plaintext with AH?

A VPN provides cost savings.

In a site-to-site VPN, the client is aware of the VPN connection.

IPsec operates at the Data Link Layer.

IPsec provides security services such as confidentiality and integrity.

AH provides encryption.

ESP provides confidentiality.

AES is considered more secure than Double DES.

The Diffie-Hellman algorithm is used for key exchange.

IKE has one phase.

A remote-access VPN connects entire networks.

A VPN encrypts all traffic.

Using a VPN always slows down your internet speed.

VPN stands for Very Private Network.

IPsec is a single protocol.

IPsec can only operate in tunnel mode.

A longer key length generally indicates stronger encryption.

In IKE Phase 1, the peers negotiate the IPsec policy.

A crypto map is applied to a physical interface.

show crypto isakmp sa shows IPsec security associations.

VPNs are only used by large corporations.

Compatibility is not a benefit of VPNs.

A VPN cannot provide scalability.

AH and ESP protocols can be used together.

DH14 provides a stronger key exchange method than DH1.