VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is a primary security weakness of the Point-to-Point Tunneling Protocol (PPTP) that makes it unsuitable for secure communications today?

   • AIt only works over IPv6 networks, limiting its deployment in most current networks.
   • BIt does not support any form of authentication, leaving the connection open to man-in-the-middle attacks.
   • CIt relies on a static pre-shared key that is never changed, making it easy to guess.
   • DIt uses the RC4 encryption algorithm, which is considered weak and can be broken with moderate computational effort.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   An organization is migrating from Windows to Linux servers. They currently use BitLocker for full-disk encryption on Windows. On Linux, they need to implement disk encryption that provides a similar level of protection and supports multiple administrators with individual passphrases. They also want to ensure that the encryption metadata is portable and can be managed with standard Linux tools. Which solution should they choose?

   • ABitLocker on Linux
   • BFileVault on Linux
   • CLUKS with multiple key slots
   • Ddm-crypt with a single passphrase
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   An organization is implementing IPsec VPNs. They need to ensure that the data payload is encrypted and that the original IP header is also protected. Which IPsec mode should they use?

   • ATunnel mode with AH
   • BTransport mode with AH
   • CTransport mode with ESP
   • DTunnel mode with ESP
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A regional bank is deploying a remote-access solution for 200 loan officers who work from home on company-issued laptops. The security team requires mutual authentication using certificates, strong encryption for all traffic, and the ability to reach resources on multiple internal subnets without re-establishing tunnels. The compliance officer also wants the tunnel to be invisible to the loan officers' home routers. Which VPN technology should the bank choose?

   • APPTP with MS-CHAPv2 authentication
   • BL2TP without IPsec
   • CIPsec in tunnel mode with IKEv2 and certificate-based authentication
   • DSSL/TLS VPN using a clientless web portal
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which Linux tool is commonly used with LUKS to create and manage encrypted volumes?

   • Aiptables
   • Bgpg
   • Copenssl
   • Dcryptsetup
   Reveal Solution Discussion Select an answer first