IT 357 Exam 2 QUESTIONS WITH COMPLETE SOLUTIONS

Which of the following refers to encoding and decoding information using related but different keys for each process? Correct Answer: Asymmetric cryptography Which term is used to describe a public-key, cryptography-based mechanism for proving the source (and possibly integrity) of a dataset or message? Correct Answer: Digital signature Which term describes a VPN created between two individual hosts across a local or intermediary network? Correct Answer: Host-to-host VPN Which term describes encryption that protects the entire original IP packet's header and payload? Correct Answer: Tunnel mode encryption Which name is given to a VPN created between a client and a server either within the same local network or across a WAN link or intermediary network to support secure client interaction with the services of a resource host? Correct Answer: Client-to-server VPN A one-way function refers to a mathematical operation performed in one direction; reversing the operation is easy. Correct Answer: False Hashing verifies data integrity by using algorithms to produce unique numbers from datasets known as hash values. Correct Answer: True Which of the following is not an example of a VPN deployment model? Correct Answer: Symmetric VPN Which of the following is NOT an example of a VPN technology? Correct Answer: NAT VPN The difference between Authentication Header (AH) and Encapsulated Security Payload (ESP) in IPSEC is that Correct Answer: ESP provides confidentiality while AH does not IPSEC in transport mode adds a new IP header to the packet that needs protection. Correct Answer: False A split tunnel is a VPN connection that allows simultaneous access to the secured VPN link and unsecured access to the Internet across the same connection. Correct Answer: False Which of the following documents an organization's rules in a security policy for using a VPN? Correct Answer: Remote access policy Which term describes a process by which malicious