VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In IPsec tunnel mode, what is encapsulated and encrypted?

   • AOnly the payload of the original IP packet, leaving the original header in clear.
   • BOnly the TCP/UDP header and payload, but not the IP header.
   • CThe entire IP packet is encrypted but not authenticated.
   • DThe entire original IP packet, including its header and payload.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a typical advantage of SSL/TLS VPNs over IPsec VPNs?

   • AThey can be accessed from any device with a web browser, without requiring pre-installed VPN client software.
   • BThey are faster than IPsec VPNs because they use UDP instead of TCP.
   • CThey provide stronger encryption than IPsec VPNs.
   • DThey are only used for site-to-site connections, not remote access.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A macOS administrator is enabling FileVault on a Mac that is used by multiple users. They want to ensure that if one user forgets their password, the other users can still unlock the disk. They also want to allow a designated administrator to reset FileVault passwords without needing the recovery key. Which configuration should they use?

   • AEnable FileVault and store the recovery key in a safe
   • BEnable FileVault with a single user
   • CEnable FileVault and disable the recovery key
   • DEnable FileVault with multiple enabled users
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security administrator needs to protect sensitive files on a Windows server, but only a specific folder containing financial reports must be encrypted. The rest of the server's data should remain unencrypted to avoid performance overhead. Which encryption approach should they implement?

   • AFull-disk encryption with BitLocker
   • BFile-level encryption using EFS
   • CVolume encryption with BitLocker To Go
   • DWhole-disk encryption with VeraCrypt
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A hospital allows physicians to access the electronic medical record (EMR) system from personal tablets and smartphones while on call. The EMR is a web application that listens on HTTPS port 443. The IT department wants to avoid installing any VPN client software on personal devices and wants per-application access control so that only the EMR is reachable. Which solution best meets these requirements?

   • ADeploy a full-tunnel IPsec VPN client on each personal device
   • BDeploy an SSL/TLS VPN with a clientless web portal that proxies the EMR application
   • CUse L2TP/IPsec with pre-shared keys on each device
   • DConfigure a site-to-site IPsec tunnel between the hospital and each physician's home router
   Reveal Solution Discussion Select an answer first