CCNA Guide to Cisco Networking, Fourth Edition Chapter 14 Solutions
Chapter 14 Solutions
Review Questions
1. Which statement accurately defines IPsec?
2. Which command establishes an SSH key pair?
3. What two methods can be used to configure VPNs on a Cisco router?
4. What services are provided by an IPS? (Choose all that apply)
5. What services are provided by an IDS?
6. What is the correct command sequence to protect all 4 of a router’s VTY lines with SSH?
7. Which two protocols are supported by IPSec?
2
8. What two modes are supported by IPSec?
9. Which command successfully sets the SSH Timeout for connections to 1 minute and 30
seconds?
10. What functionality is supported by the Cisco SDM? (Choose all that apply)
11. Select the authentication algorithms supported by IPSec. (Choose all that apply)
a. ESP
12. AES What encryption algorithms are supported by IPSec? (Choose all that apply)
13. Which tunneling protocols provide a secure tunnel for the data to travel through? (Choose
14. What are the common services that provide authentication services on Cisco routers?
15. The term authentication in Cisco’s AAA model provides what service?
3
16. The term authorization in Cisco’s AAA model provides what service?
17. The term accounting in Cisco’s AAA model provides what service?
18. What is the key reason for using SSH connections when connecting remotely to a router?
19. What are you configuring when building a Cisco VPN with IPSec?
20. After building a default VPN with the SDM your transform set name would be ESP-3DES-
SHA. What does this tell you about the protocols and algorithms used?
a. That you are using 3DES as the authentication algorithm and SHA as the
encryption algorithm
Case Projects
Case Project 1
The recommendation should be to setup client-to-site VPNs.
Case Project 2
Answers vary based on student’s understanding of firewall technologies. Answers could include:
Secure VPNs, IPSec protocol, security audit wizard, and access list.
Case Project 3
Given the requirements listed students must create the plan. One solution could be patches are
installed and rotated monthly. For example, in January patches are installed in the Development
4