VPN Troubleshooting & Diagnosis for IT Ops

1. Which networking tool would you use to verify the VPN gateway is reachable from a client?

Ping

Tracert/Traceroute

Nslookup

Both A and B

2. A user's VPN client shows 'Local policy does not permit requested action.' What must you verify?

Windows Group Policy and VPN connection permissions

User's desktop icon alignment

Taskbar position settings

Application window transparency

3. Which command would you use on Linux to check active VPN connections?

Netstat -an or ss -an

Ipconfig /all

Wifiscan

Printer --status

4. A VPN session disconnects when the user locks their workstation. Which setting likely needs adjustment?

Idle timeout and keep-alive settings

Monitor sleep settings

Screensaver animation type

Window theme color

5. What does MFA (Multi-Factor Authentication) primarily protect against in VPN access?

Packet loss

Unauthorized access via compromised credentials

Slow download speeds

DNS leaks only

6. A VPN user reports intermittent packet loss. Which should you investigate on the VPN gateway?

CPU/memory utilization and NIC statistics

User's chair comfort level

Background wallpaper settings

Font size in applications

7. Which VPN protocol is known for being easier to tunnel through restrictive firewalls?

IKEv2

PPTP

SSTP (uses HTTPS/TCP 443)

GRE

8. A user's VPN connection shows 'No Internet' despite successful connection. What is likely misconfigured?

VPN gateway DHCP pool or routing

User's monitor brightness

Corporate logo colors

Email signature format

9. What is the primary purpose of Perfect Forward Secrecy (PFS) in VPN negotiations?

Increase connection speed

Prevent session key reuse and limit damage from key compromise

Reduce latency

Enable split tunneling

10. A remote user cannot access internal resources after connecting to VPN. Which should you check?

VPN routes and firewall rules for internal subnets

User's monitor resolution

Client keyboard layout

Internet speed test results

11. A remote user reports inability to connect to the corporate VPN. Which OSI layer would you investigate first for basic connectivity?

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

Layer 2 (Data Link)

12. A VPN client shows 'Certificate Expired' error. What should you do first?

Restart the VPN client

Verify server certificate validity on VPN gateway

Clear browser cache

Check user's local system time

13. Which Windows service must be running for SSTP VPN connectivity?

RAS (Remote Access Service)

DHCP Server

DNS Client

Task Scheduler

14. A user reports 'Split tunnel not working.' What does split tunneling allow?

Multiple simultaneous VPN connections

Some traffic through VPN, some direct to internet

VPN connection on two devices

Faster encryption algorithms

15. Which VPN protocol uses UDP port 500 for key exchange?

OpenVPN

IPsec (IKE)

L2TP

SSTP

16. A VPN user experiences slow throughput. Which metric should you check on the VPN gateway first?

Memory utilization and active session count

User's ISP speed

Client disk space

Corporate firewall color coding

17. What does IPsec provide in a VPN connection?

Only encryption

Only authentication

Encryption and authentication

Only compression

18. A user receives 'Authentication Failed' when connecting to the VPN. Which should you verify first?

VPN server CPU load

User credentials and directory service connectivity

Client firewall rules

ISP bandwidth throttling

19. Which encryption protocol is considered more secure for modern VPN implementations?

PPP