Securing Network Communications

Question 1

What is a Virtual Private Network (VPN)?

Answer 1

Extends a private network over a public one, enabling users to securely send and receive data

Question 2

What is a Site-to-Site VPN?

Answer 2

Establishes secure tunnels over the public internet for interconnecting remote sites

Question 3

What is a Client-to-Site VPN?

Answer 3

Connects individual devices directly to the organization’s headquarters, enabling remote users to access the network

Question 4

What is a Clientless VPN?

Answer 4

Secures remote access through browser-based VPN tunnels without needing client software or hardware configuration

Question 5

What is a Full Tunnel VPN?

Answer 5

Maximizes security by encrypting all traffic to the headquarters while integrating clients with the network

Question 6

What is a Split Tunnel VPN?

Answer 6

Divides traffic and network requests and then routes them to the appropriate network

Question 7

What is a Transport Layer Security (TLS)?

Answer 7

A protocol that provides cryptographic security for security connections and is used for security web browsing and data transfer

Question 8

What is a Transmission Control Protocol (TCP)?

Answer 8

Used by TLS to establish secure connections between a client and a server, but it may slow down the connection

Question 9

What is a Datagram Transport Layer Security (DTLS)?

Answer 9

A UDP-based version of TLS protocol that offers the same security level as TLS while maintaining faster operations

Question 10

What is an Internet Protocol Security (IPSec)?

Answer 10

A protocol suite for secure communication through authentication and data encryption in IP networks

Question 11

What is a Transport Mode?

Answer 11

Employs the original IP header, ideal for client-to-site VPNs and is advantageous when dealing with MTU constraint

Question 12

What is a Tunneling Mode?

Answer 12

Employed for site-to-site VPN and adds an extra header that can increase packet-size and exceed the MTU

Question 13

What is an Authentication Header (AH)?

Answer 13

Offers connectionless data integrity and data origin authentication for IP datagrams using cryptographic hash as identification information

Question 14

What is an Encapsulating Security Payload (ESP)?

Answer 14

Employed for providing authentication, integrity, replay protection, and data confidentiality by encrypting the packet’s payload

Question 15

What is a Software-Defined Wide Area Network (SD-WAN)?

Answer 15

A virtualized approach to managing and optimizing wide area network connections to guide traffic between remote sites, data centers, and cloud environments

Question 16

What is SASE (Secure Access Service Edge)?

Answer 16

A network architecture combining network security and WAN capabilities in a single cloud-based service to secure and connect users and data across distributed locations