3.4 Identify and Describe Tunneling Protocols (e.g., SSH, TLS, IKE) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   A user is shopping on an e-commerce website. The browser shows a padlock icon, indicating the connection is secure. The user's traffic is encrypted between the browser and the web server. Which protocol is providing this encryption?

   • ATLS
   • BIKE
   • CSSH
   • DIPsec
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is migrating from an on-premises data center to a cloud provider. The cloud provider offers a managed load balancing service that supports TLS termination. The company's security policy requires that all traffic between the load balancer and the backend servers be encrypted. The backend servers are virtual machines in the cloud. Which approach should the company use to meet this requirement?

   • ADo not encrypt the backend traffic, since the cloud provider's network is already secure.
   • BUse SSH tunneling between the load balancer and the backend servers.
   • CConfigure the load balancer to use TLS for the backend connections, and install TLS certificates on the backend servers.
   • DUse an IPsec VPN between the load balancer and the backend servers.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of SSH tunneling?

   • ATo compress data to improve network performance.
   • BTo provide a secure method for transferring files between systems.
   • CTo encrypt network traffic so that it cannot be read by unauthorized parties.
   • DTo authenticate users using digital certificates.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a security association (SA) in the context of IPsec?

   • AA firewall rule that allows or denies traffic through a VPN.
   • BA log entry that records VPN connection attempts.
   • CA digital certificate used to authenticate a VPN gateway.
   • DA set of rules that defines how traffic is encrypted and authenticated for a specific connection.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A remote worker needs to connect to the corporate network to access internal resources. The company uses a VPN solution that requires the client to establish a secure tunnel before any data is sent. The VPN client and the VPN gateway must first authenticate each other and agree on encryption keys. Which protocol is responsible for this initial authentication and key exchange?

   • AIKE
   • BSSH
   • CTLS
   • DHTTPS
   Reveal Solution Discussion Select an answer first