VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 5)

Questions 21–25

1. 21application · easy

   A Linux administrator needs to encrypt a new data partition on a server running Ubuntu 22.04. The requirement is that the partition can be unlocked with a passphrase at boot time and that the encryption metadata (including the cipher and key slots) be stored in a standard, portable format. Which tool should the administrator use?

   • AFileVault with a recovery key
   • Bdm-crypt without LUKS
   • Ccryptsetup with LUKS
   • DBitLocker with a startup key
   Reveal Solution Discussion Select an answer first
2. 22application · easy

   A graphic design studio issues MacBook Pro laptops to its designers. The studio's security policy requires that all data on the internal SSD be encrypted at rest. The laptops have Apple T2 security chips. Which configuration should the IT administrator use to meet this requirement while allowing users to log in with their existing passwords?

   • AEncrypt individual files with macOS's built-in ZIP encryption
   • BEnable FileVault, which uses the T2 chip to protect the volume key and integrates with the user's login password
   • CEnable BitLocker with a TPM protector
   • DUse LUKS to encrypt the internal SSD
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A Linux administrator is setting up LUKS encryption on a new server. They want to allow multiple administrators to unlock the disk with different passphrases, and they need to be able to revoke one administrator's passphrase without affecting the others. Which LUKS feature should they use?

   • AMultiple key slots
   • BA single master passphrase
   • CTPM-based key storage
   • DFile-level encryption
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A network engineer is troubleshooting a site-to-site IPsec VPN that is not passing traffic. The VPN tunnel is established, but no data is flowing. The engineer suspects a problem with the IPsec security association (SA). Which of the following is the most likely cause?

   • AThe VPN is using transport mode instead of tunnel mode
   • BThe VPN is using AH instead of ESP
   • CThe VPN is using the wrong encryption algorithm
   • DThe IPsec SA has expired and needs to be renegotiated
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which encryption method does Apple FileVault use to encrypt the startup disk on macOS?

   • A3DES
   • BRSA-2048
   • CXTS-AES-128 with a 256-bit key
   • DBlowfish
   Reveal Solution Discussion Select an answer first