A GRE IP tunnel
A leased line
A VPN gateway
A dedicated ISP
New headers from one or more VPN protocols encapsulate the original packets.
All packets between two hosts are assigned to a single physical medium to ensure that the packets are kept private.
Packets are disguised to look like other types of traffic so that they will be ignored by potential attackers.
A dedicated circuit is established between the source and destination devices for the duration of the connection.
High-speed broadband technology can be replaced with leased lines.
VPNs can be used across broadband connections rather than dedicated WAN links.
VPNs prevents connectivity to SOHO users.
VPNs require a subscription from a specific Internet service provider that specializes in secure connections.
Cisco AnyConnect Secure Mobility Client with SSL
Cisco Secure Mobility Clientless SSL VPN
Remote access VPN using IPsec
A toy manufacturer has a permanent VPN connection to one of its parts suppliers.
All users at a large branch office can access company resources through a single VPN connection.
A mobile sales agent is connecting to the company network via the Internet connection at a hotel.
A small branch office with three employees has a Cisco ASA that is used to create a VPN connection to the HQ.
An employee who is working from home uses VPN client software on a laptop in order to connect to the company network.
The VPN connection is not statically defined.
VPN client software is installed on each host.
Internal hosts send normal, unencapsulated packets.
Individual hosts can enable and disable the VPN connection.
A mobile user who connects to a router at a central site
A branch office that connects securely to a central site
A mobile user who connects to a SOHO site
A central site that connects to a SOHO site without encryption
This tunnel mode is not the default tunnel interface mode for Cisco IOS software.
This tunnel mode provides encryption.
The data that is sent across this tunnel is not secure.
This tunnel mode does not support IP multicast tunneling.
A GRE tunnel is being used.
IPsec works at Layer 3, but can protect traffic from Layer 4 through Layer 7.
IPsec uses algorithms that were developed specifically for that protocol.
IPsec implements its own method of authentication.
IPsec is a Cisco proprietary standard.
DH algorithms allow unlimited parties to establish a shared public key that is used by encryption and hash algorithms.
DH algorithms allow two parties to establish a shared secret key that is used by encryption and hash algorithms.
DH algorithms allow unlimited parties to establish a shared secret key that is used by encryption and hash algorithms.
DH algorithms allow two parties to establish a shared public key that is used by encryption and hash algorithms.
It ensures that the data cannot be read in plain text.
It ensures that the data has not changed while in transit.
It ensures that the data is coming from the correct source.
It ensures that the data cannot be duplicated and replayed to the destination.
Is a Cisco router used at the destination of the remote access tunnel?
What applications or network resources do the users need for access?
Are both encryption and authentication required?
Do users need to be able to connect without requiring special VPN software?
Any device can connect to the network without authentication.
Clients use SSH to access network resources.
Security is provided by prohibiting network access through a browser.
Clients do not require special software.
IPsec is specifically designed for web-enabled applications.
Specific PC client configuration is required to connect to the VPN.
IPsec authenticates by using shared secrets or digital certificates.
IPsec authentication is one-way or two-way.
Key lengths range from 40 bits to 256 bits.
The EIGRP configuration is incorrect.
The tunnel IP addresses are incorrect.
The tunnel source interfaces are incorrect.
The tunnel destinations addresses are incorrect.