CHAPTER 9 – WEB, REMOTE ACCESS, AND VPN SECURITY
TRUE/FALSE
1. HTTPS is used primarily in native HTTP communications and does not encrypt data in IP-level
communications.
2. Port 21 is a control port for FTP commands that controls how data is sent.
3. NFS is a connectionless protocol that runs within UDP.
4. Windows Server 2003 enables the installation of the Internet Explorer Enhanced Security
Configuration component that should be installed to provide strong security options for this server
operating system.
5. Windows 2000 Professional and Windows XP Professional do not offer RAS services and rely on their
server counterparts to provide this service.
6. The maximum downstream transmission speed of ADSL is 6.0 Mbps.
7. CSLIP supports network connection authentication to prevent someone from intercepting a
communication.
8. A VPN is a private network that is like a tunnel through a larger network.
9. MS-CHAP v2 is used for clients who access RAS through special devices such as smart cards, token
cards, and others that use certificate authentication.
10. A Windows 2000/2003 server can be set up as a VPN server by implementing Routing and Remote
Access Services.
MODIFIED TRUE/FALSE
1. When used with S-HTTP, CMS is used to provide encryption for MIME data and to apply a digital
signature to MIME data. ______________________________
2. In SSL, the client makes a secure connection request, and the server replies with a digital certificate
accompanied by a public key. _________________________
3. With FTP, Port 20 is a control port for FTP commands that control how data is sent.
_________________________
4. The NFS software that was originally developed by Sun Microsystems uses remote procedure calls via
TCP port 111. _________________________
5. In Internet Explorer, the restricted sites zone is used to designate specific sites that are safe to access.
_________________________
6. Mozilla is an open-source Web browser that is installed in Mac OS X by default.
_________________________
7. ISDN basic rate interface consists of two channels. _________________________
8. X.25 is more commonly used in Europe and other countries than in the United States.
_________________________
9. Remote access protocols are used to carry network packets over a WAN link.
_________________________
10. PPP supports network protocols, such as IPX/SPX, NetBEUI, and TCP/IP.
_________________________
MULTIPLE CHOICE
1. Which protocol is used to exchange information over the World Wide Web?
a.
HTTP
c.
NFS
b.
FTP
d.
SMB
2. Which of the following protocols provides for both authentication and encryption?
a.
HTTP
c.
S-HTTP
b.
HTTP-S
d.
HTTPS
3. Which security method is defined in RFP 2630?
a.
RAS
c.
MOSS
b.
S-HTTP
d.
CMS
4. Which security method is used to provide encryption for MIME data and to apply a digital signature to
MIME data?
a.
MOSS
c.
SMTP
b.
S-HTTP
d.
FERN
5. Which FTP command transfers files in binary format?
a.
ASCII
c.
base
b.
binary
d.
hex
6. Which FTP command ends the file transfer session and exits the FTP mode?
a.
bye
d.
Both a and b
b.
quit
e.
Both a and c
c.
close
7. Which FTP command sends a file to another computer?
a.
push
c.
transfer
b.
send
d.
put
8. Which FTP command obtains multiple files from another computer?
a.
get
c.
retrieve
b.
input
d.
mget
9. Which FTP command transmits a file to another computer?
a.
send
c.
put
b.
transmit
d.
upload
10. Which protocol is particularly suited to computers that perform high-volume transaction processing
involving records stored within data files or databases, and in situations in which data files are
distributed among several servers?
a.
FTP
c.
NFS
b.
SMB
d.
HTTPS
11. What protocol does Samba use?
a.
NFS
c.
RPC
b.
SMB
d.
TCP
12. What is the default security option in Samba?
a.
security = user
c.
security = share
b.
security = server
d.
None of the above
13. Which security option in Samba means that the current user can access computers through Samba and
must supply a user account and password for each computer that is accessed?
a.
security = user
c.
security = server
b.
security = share
d.
security = default
14. Which security option in Samba means that users can log on anonymously?
a.
security = user
c.
security = default
b.
security = share
d.
security = server
15. Which security option in Samba is used to designate a different computer to provide access through
Samba?
a.
security = user
c.
security = server
b.
security = share
d.
None of the above
16. What must be installed for Windows-based computers to use Samba?
a.
An NTFS partition
c.
The SMB protocol
b.
File and Printer Sharing
d.
Nothing needs to be installed
17. Which of the following content is disabled in the Internet Explorer Enhanced Security Configuration
zone “Internet zone using High security”?
a.
ActiveX controls
c.
Executables
b.
Scripts
d.
All of the above
18. Which of the following options is a preconfigured security setting in the Internet Explorer Enhanced
Security Configuration component?
a.
None
c.
Medium-low
b.
Medium-high
d.
Maximum
19. Mozilla is an open-source Web browser that is installed in Red Hat Linux 9.x by default when the
_____ desktop is used.
a.
GNU
c.
GNOME
b.
KDE
d.
LINX
20. Which Mozilla security option manages the revocation of certificates and enables or disables the use of
OCSP?
a.
SSL
c.
Validation
b.
Certificates
d.
Security
21. Which GUI features are included in Netscape but not in Mozilla?
a.
Buddy list
c.
News
b.
Mail
d.
All features are identical
22. How many simultaneous RAS connections does Windows XP Professional allow?
a.
1
c.
10
b.
2
d.
hundreds
23. Which of the following operating systems can connect through RAS?
a.
MS–DOS
d.
Both a and b
b.
Netware
e.
Both b and c
c.
Linux
24. ISDN basic rate interface consists of how many channels?
a.
1
c.
3
b.
2
d.
4
25. What is the size of the ISDN basic rate interface channel that is used for communications signaling?
a.
16 Kbps
c.
64 Kbps
b.
24 Kbps
d.
128 Kbps
26. What is the size of the ISDN basic rate interface channel that is used for data, voice, and graphics
transmissions?
a.
16 Kbps
c.
56 Kbps
b.
24 Kbps
d.
64 Kbps
27. How many channels are used for data, voice, and graphics transmissions in an ISDN basic rate
interface?
a.
1
c.
3
b.
2
d.
4
28. What is the maximum transmission speed of X.25?
a.
64 Kbps
c.
1.024 Mbps
b.
128 Kbps
d.
2.048 Mbps
29. What was the maximum transmission speed of X.25 before being upgraded in 1992?
a.
16 Kbps
c.
64 Kbps
b.
24 Kbps
d.
128 Kbps
30. What is the maximum upstream transmission speed of DSL?
a.
1.2 Mbps
c.
6 Mbps
b.
2.3 Mbps
d.
60 Mbps
31. What is the maximum downstream transmission speed of DSL?
a.
2.3 Mbps
c.
60 Mbps
b.
6 Mbps
d.
128 Mbps
32. Which of the following are considered to be line devices?
a.
Modems
d.
Only a and c
b.
ISDN adapters
e.
a, b, and c
c.
Fax cards
33. What is displayed in the figure above?
a.
b.
c.
d.
34. Which of the following protocols encapsulate PPP and create special tunnels over a public network
such as the Internet that reflect intranets and VPNs?
a.
PPTP
d.
Both a and b
b.
L2TP
e.
Both b and c
c.
IPSec
35. What is displayed in the figure above?
a.
b.
c.
d.
YES/NO
1. Does PPP use an additional network communications standard, called Layer Two Forwarding, that
enables forwarding on the basis of MAC addressing, in addition to IP addressing?
2. In the Windows Server 2003 RAS, callback option “Set by Caller” is the phone number provided by
the remote computer?
3. Is IAS a protocol that a RAS or VPN server can use to defer a user’s access request to a central
RADIUS server?
4. Are the permissions of a remote access policy a combination of those configured under the user
account and the remote access policy?
5. Was CHAP developed especially for use with VPNs?
6. Does the RAS “Strong” encryption option enable clients to use 56-bit IPSec, Triple DES, or MPPE
128-bit encryption?
7. Does HTTP enable the establishment of a connection, as well as provide for the exchange of
resources?
8. Have Netscape and Microsoft implemented S-HTTP to protect data transported via their Web
browsers?
9. Do Internet browsers such as Internet Explorer, Netscape, and Mozilla all enable you to configure SSL
and certificate security?
10. Does NFS send data in record streams instead of in bulk file streams?
COMPLETION
1. NFS security is handled through the /etc/hosts.allow and the /etc/hosts.____________________ files.
2. In the ____________________ browser, security configuration is combined with privacy
configuration options.
3. One of the functions of a remote access protocol is to ____________________ a packet formatted for
a network transport protocol, so that it can be transmitted from a point at one end of a WAN to another
point.
4. When you use a modem to connect to the Internet, you are also most likely using
_________________________ for network communication.
5. With ____________________ security set up, the server calls back the remote computer to verify its
telephone number, in order to discourage an attacker from trying to access the server.
6. The ________________________________________ server is used to provide authentication services
for all RAS or VPN servers on a network, ensuring that a consistent remote access policy is used.
7. ______________________________ is a syntax for encapsulating information in an encrypted format.
8. S-HTTP provides ____________________ security for HTTP-transported information, but it is only
used by some vendors’ applications.
9. SSL uses ____________________ encryption, which employs asymmetrical public and private keys.
10. ____________________ is an application that enables the transfer of data from one remote device to
another, using the TCP protocol.
MATCHING
Match the following acronyms to the appropriate definition.
a.
CSLIP
f.
PAP
b.
CMS
g.
PPTP
c.
HTTPS
h.
SSL
d.
IAS
i.
SMB
e.
MIME
j.
TAPI
1. Used to establish and maintain security for RAS, Internet, and VPN access
2. An interface for communications line devices
3. Used by S-HTTP for encapsulating information in an encrypted format
4. Used by Windows-based systems to enable sharing files and printers
5. A nonencrypted plaintext password authentication protocol
6. Uses RSA encryption along with digital certificates
7. Compresses header information in each packet sent across a remote link
8. A protocol used with SMTP
9. Enables connectivity to a network through the Internet, intranets, and VPNs
10. Uses Secure Sockets Layer to implement security
9. ANS: G PTS: 1 REF: 426
10. ANS: C PTS: 1 REF: 425
SHORT ANSWER
1. Provide five examples of vital protocols and services that users employ every day on the Internet.
2. What are four features of HTTP/1.1?
3. What five types of data does CMS handle?
4. Name three of the most popular Internet browsers.
5. What four types of security zones does Internet Explorer allow you to configure?
6. List 10 different security measures that can be configured for an Internet zone in Internet Explorer.
7. What are the four default values for the security zones in the Internet Explorer Enhanced Security
Configuration component in Windows Server 2003?
8. On which operating systems can Mozilla run?
9. List eight types of connections that are supported by a RAS server.
10. List six network transport and remote communication protocols with which RAS is compatible.