NE NE Network Security 2

Question 1

Which VPN protocol uses UDP port 500 and ESP to create encrypted tunnels between sites?

Accepted Answer

IPsec IKEv2

Answer

IPsec IKEv2 uses UDP 500 for key exchange and ESP (Encapsulating Security Payload) for encryption and integrity.

Question 2

What is the purpose of Network Address Translation (NAT) in relation to security?

Accepted Answer

It hides internal IP addresses from external networks

Answer

NAT obscures internal IP addressing by substituting public addresses, making it harder for external parties to map internal topology.

Question 3

Which type of ACL can filter traffic based on both source and destination IP addresses and port numbers?

Accepted Answer

Extended ACL

Answer

Extended ACLs (Cisco numbered 100–199) match on source/destination IP, protocol, and port, giving granular traffic control.

Question 4

What is a Man-in-the-Middle (MitM) attack?

Accepted Answer

Intercepting and potentially altering communication between two parties

Answer

In a MitM attack, the attacker secretly relays and can modify messages between two parties who believe they are communicating directly.

Question 5

Which protocol is used to centralize authentication, authorization, and accounting for network access?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) centralizes AAA services, commonly used with 802.1X and VPN authentication.

NE - Network Engineer Practice Test