NSE Network Security Protocols & Technologies 2

Question 1

Which IPsec mode encapsulates the entire original IP packet, including its header, inside a new IP packet?

Accepted Answer

Tunnel mode

Answer

Tunnel mode encapsulates the entire original IP packet within a new IP packet, making it ideal for VPN gateways.

Question 2

What is the primary function of the SSL/TLS handshake process?

Accepted Answer

Negotiating cipher suites and exchanging keys

Answer

The TLS handshake negotiates cipher suites, authenticates the server (and optionally the client), and establishes session keys.

Question 3

Which protocol provides network access control by authenticating devices before granting LAN or WLAN access?

Accepted Answer

802.1X

Answer

IEEE 802.1X is a port-based NAC standard that requires authentication before a device can access the network.

Question 4

What distinguishes TACACS+ from RADIUS in terms of protocol and separation of functions?

Accepted Answer

TACACS+ uses TCP and separates authentication from authorization; RADIUS uses UDP and combines them

Answer

TACACS+ uses TCP and separates authentication, authorization, and accounting into distinct functions, while RADIUS uses UDP and combines authentication and authorization.

Question 5

In the context of WPA3-Enterprise, what key exchange method replaces the Pre-Shared Key to provide forward secrecy?

Accepted Answer

Elliptic Curve Diffie-Hellman Ephemeral (ECDHE)

Answer

WPA3-Enterprise mandates ECDHE-based cipher suites to ensure perfect forward secrecy for each session.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Network Security Protocols & Technologies 2