1.5 Describe Cryptography Security Components Such as Hashing, Encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, Preshared Key, Certificate-Based Authorization, and Post-Quantum Cryptography 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Why is NAT Traversal (NAT-T) needed for IPsec?

   • ABecause IPsec uses TCP, which is incompatible with NAT.
   • BBecause NAT changes the IP address, breaking IPsec's authentication.
   • CBecause IPsec cannot work over IPv4.
   • DBecause IPsec's ESP protocol does not work through NAT without modification.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A service provider wants to offer a secure proxy service that allows clients to tunnel arbitrary UDP traffic through the provider's infrastructure. The solution must support many concurrent clients and be resilient to network changes. The provider is considering MASQUE and a traditional TLS VPN. Which factor most strongly favors MASQUE?

   • AMASQUE is the only protocol that can tunnel UDP traffic.
   • BMASQUE can multiplex many streams over a single QUIC connection, reducing overhead and improving scalability.
   • CMASQUE uses a simpler handshake than TLS, requiring fewer round trips.
   • DMASQUE does not require certificates, simplifying deployment.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which IPsec mode encrypts the entire IP packet, including the original IP header?

   • AMain mode
   • BTunnel mode
   • CTransport mode
   • DAggressive mode
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does NAT-T enable IPsec to work across NAT devices?

   • ABy disabling encryption on the IPsec packets.
   • BBy encapsulating IPsec packets in UDP.
   • CBy using a static IP address for the VPN gateway.
   • DBy using TCP port 443 for all IPsec traffic.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A network engineer is comparing TLS 1.3 over TCP with QUIC for a new real-time application. The application requires low latency and must handle frequent network changes (e.g., switching from Wi-Fi to cellular). Which advantage does QUIC provide over TCP/TLS?

   • AQUIC eliminates the need for a certificate.
   • BQUIC uses a simpler handshake that requires fewer round trips than TLS 1.3.
   • CQUIC supports connection migration, allowing the connection to survive IP address changes.
   • DQUIC provides stronger encryption than TLS 1.3.
   Reveal Solution Discussion Select an answer first