3.4 Identify and Describe Tunneling Protocols (e.g., SSH, TLS, IKE) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement accurately describes SSH tunneling?

   • AIt encrypts only the payload, leaving headers visible for inspection.
   • BIt creates an encrypted channel that can carry other protocols securely.
   • CIt establishes a VPN by using IPsec security associations.
   • DIt is used primarily for encrypting web traffic between a browser and a server.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network administrator needs to securely transfer a database backup from a production server to a backup server in a different data center. The only connectivity between the two servers is over the internet, and the administrator wants to use a protocol that provides encryption and is commonly available on Linux servers. Which protocol should the administrator use?

   • ASSH
   • BTLS
   • CIPsec
   • DIKE
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which protocol is commonly used to create a TLS tunnel for secure web browsing?

   • AFTP
   • BIPsec
   • CSSH
   • DHTTPS
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying a new internal web application that will be accessed by employees from both the office and remote locations. The security team wants to ensure that all access to the application is encrypted. The application is hosted on a server that only supports HTTP. Which solution should the security team implement to meet this requirement?

   • AUse an IPsec VPN for all remote employees.
   • BUse SSH tunneling for all client connections to the application.
   • CPlace a TLS-terminating reverse proxy in front of the application server.
   • DLeave the application as HTTP, since it is internal and the network is trusted.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A network engineer is setting up a new site-to-site VPN between two offices. The engineer has configured the IPsec parameters, including the encryption algorithm (AES-256), authentication (SHA-256), and Diffie-Hellman group 14. The tunnel is established, but the engineer notices that the data traffic is not being encrypted. Which of the following is the most likely reason for this issue?

   • AThe TLS certificates on the VPN gateways have expired.
   • BThe IPsec security associations (SAs) for the data plane were not established during IKE Phase 2.
   • CThe Diffie-Hellman group is too weak.
   • DThe SSH service is not running on the VPN gateway.
   Reveal Solution Discussion Select an answer first