Quản trị mạng Chapter13.

Dao Xuan Hung - Take Exam
Exam questions


1 . Which command would you use to troubleshoot VPDN operation?
show vpn
debug vpdn event
debug vpdn incoming
show vpdn event

2 . What command troubleshoots VPDN operation?
show vpdn
debug vpn
debug vpdn
debug vpdn op

3 . Two Offices locations are trying to connect to each other over a VPN, but the connection is failing. Which common
problem causes an IPSEC VPN to fail?
ACLs configured in the IPSEC traffic path blocking ISAKMP, ESP, and AH traffic.
Multiple transform sets configured but only one transform set is specified in the crypto map entry.
Crypto ACL configuration errors where permit is used to specify that matching packets must be encrypted.
Multiple interfaces sharing the same crypto map set.

4 . Which statement describes the differences between IPSec and Cisco Encryption Technology(CET)?
CET supports AH, ESP and Anti-Replay, which are not available with IPSec
IPSec supports AH, ESP and Anti-Replay, which are not available with CET
CET is the implementation of IPSec in the Cisco Secure Services package.

IPSec is used to encrypt IP-only packets, whereas CET is used to encrypt only non-IP packets.

5 . What two commands would you use to initiate the VPDN at an ISP?

vpn enable
vpdn outgoing
enable vpdn incoming
enable vpdn outgoing
vpdn enable
enable vpn outgoing

6 . What protocol permits tunneling of link layer frames within a VPDN?
L2F
LZF
L3F
L4F

7 . Router LabA is a Cisco 827 ADSL router configured as a PPPoE client. Part of the configuration of router LabA is
displayed below: "interface dialer 0 ip address negotiated ip nat outside encapsulation ppp dialer pool 1 ppp chap hostname
HanoiCTT ppp chap password ccnp" What is missing under the Interface Dialer0 configuration of LabA?
Request-dialin
Request-dialout
IP mtu 1492
IP mtu 1500
DSL operating-mode auto
Protocol pppoe

8 . HanoiCTT works from home via a Virtual Private Network connection. From her remote Internet connection she enters
an ISP’s login page. Once logged in, the ISP’s owned device creates a secure tunnel straight to the main offices enterprise
network. What kind of VPN is this?

An intranet VPN
An extranet VPN
A client initiated VPN
A Network Access Server initiated VPN

9 . Which of the following technologies permits tunneling of data-link layer frames with VPDN (Virtual Private Dial-up
Network)?
PPP
PPTP
L2F
MPPP

10 . What command displays events that are part of NORMAL tunnel establishment or shutdown in VPDN?
debug vpdn events
show vpdn events
debug vpdn normal events
debug vpdn events normal

11 . Which three are IKE Phase 2 Negotiate parameters in the IPSec protocol within Phase 1?
Negotiating Phase 1 parameters
Encryption
Key Exchange
Integrity checking user hashes
Authentication
Implementing tunnel mode

12 . What command will display 12f protocol errors?
debug vpdn 12f-errors
show vpdn 12f-errors
debug vpdn errors-12f

show vpdn 12f

13 . The HanoiCTT network is using VPNs to allow access to the corporate network. How is a Virtual Private Network
(VPN) connection better then a conventional point-to-point T1 connection? (Choose only one answer)
VPNs can provide reserved bandwidth for the individual user.
VPN users are not tied to a specific fixed location.
VPNs offer more local control of the quality of service.
VPNs offer better queuing mechanisms than T1 connections.
None of the above.

14 . VPN (Virtual Private Networks) enable service providers to:
Buy fewer routers
Increase bandwidth
Replace corporate dialup services
Decrease broadcast traffic

15 . An IPSec tunnel has just been created on the HanoiCTT network, and you wish to verify it. Which command will
display the configured IKE policies?
show crypto isakmp policy
show crypto ipsec
show crypto isakmp
show crypto map

16 . What is the function of the l2f protocol in VPDNs?
Tunneling link level protocols over higher protocols
Network authentication
User authentication
Establish multiple virtual paths to a remote destination

17 . 16. HanoiCTT would like to provide VPN security between its remote sites. After reviewing the HanoiCTT

requirements, you recommend that the HanoiCTT should protect the entire original IP packet by encrypting it and
encapsulating it inside a new, unencrypted IP header. The unencrypted header will be used to route the packet through the
Internet.Which mode will accomplish this?
IPSec Mode
Transport Mode
Channel Mode
Tunnel Mode
Host-to-host Mode
Protect Mode

18 . Which commands would you use to troubleshoot your VPDN operation? Choose two.
show vpn
debug vpdn
show vpdn events
debug vpdn event

19 . Which two statements are true when an IPSec-protected path is configured for transport mode? (Choose two)
The payload of the packet is protected but the original IP address exposed.
The application endpoints must also be the IPSec endpoints.
IPSec gateways provide IPSec services to hosts.
Security is provided for the transport layer and above only.
Encrypted packets are encapsulated in another IP packet for routing.

20 . What is a benefit of choosing an Internet-based VPN over a point-to-point T1 connection?
VPNs offer more local control of the quality of service.
VPN users are not tied to a specific fixed location.
VPNs can provide reserved bandwidth for the individual user.
VPNs offer better queuing mechanisms than T1 connections.

Showing page 1 of 1 :

1
Go!




© 2004 HanoiCTT. All rights reserved.