3 VPN Concepts Free Online FlashCards

What does a VPN provide across an untrusted network?

A virtual private network creates a protected connection across an untrusted network, allowing users or networks to communicate as though privately connected.

Does a VPN automatically make connected endpoints trustworthy?

No. A VPN protects traffic in transit, but trust in endpoints and networks beyond the gateway still depends on security policy.

What does a remote-access VPN connect?

A remote-access VPN connects an individual user device to an organization’s network, usually with access authenticated and authorized per user or device.

What does a site-to-site VPN connect?

A site-to-site VPN connects networks at separate locations, commonly using a VPN gateway at each site.

What happens during VPN tunneling?

Tunneling encapsulates one packet inside another: the original packet is the inner packet, and added headers form the outer packet used for routing.

What happens to an encapsulated packet at the receiving tunnel endpoint?

At the receiving tunnel endpoint, the outer wrapper is removed and the original packet is forwarded toward its destination.

Does tunneling alone guarantee encryption?

No. Tunneling encapsulates packets, but a tunnel is not necessarily encrypted; encryption is a separate protection.

What does encryption do to readable data?

Encryption transforms readable data into ciphertext so an unintended observer who intercepts it cannot readily understand it.

What does integrity protection help detect?

Integrity protection helps detect whether data has been altered.

What does VPN authentication verify?

Authentication verifies the identity of a user or VPN peer.

What does IKE do for IPsec VPNs?

For IPsec, IKE authenticates peers, negotiates security settings, and establishes keys.

What protections does ESP commonly provide?

ESP is the IPsec protocol commonly used to provide encryption and integrity protection.