An employee working from home uses VPN software on a laptop to connect to company applications. Which type of VPN best describes this connection?
3 VPN Concepts Online Quiz Questions
Use this free practice quiz with 20 questions to review 3 VPN Concepts, test your knowledge, and prepare for your next test or exam.
True or false: VPN traffic is encrypted whenever it is carried through a tunnel, because tunneling itself guarantees encryption.
- A
True
- B
False
In a VPN, the process of carrying an original packet inside an outer packet is called .
What is the name for the original packet carried inside the added outer packet in a tunnel?
A company needs a device or service that ends VPN connections and links them to its protected network. Which VPN component performs this role?
- A
It carries encapsulated packets across the intervening network.
- B
It records user activity but does not terminate VPN connections.
- C
VPN gateway: it terminates VPN connections and connects them to the protected network.
- D
It replaces the need for access policy.
Select all security protections that a secure VPN commonly combines to protect communication.
- A
Encryption, which transforms readable data into ciphertext
- B
Tunneling, which by itself guarantees that packets cannot be read
- C
Integrity protection, which helps detect alteration
- D
Authentication, which verifies a user or VPN peer
- E
Access policy, which automatically encrypts every packet
True or false: Once a device connects through a VPN, the device and every network beyond the VPN gateway are automatically trustworthy.
- A
True
- B
False
For IPsec VPNs, authenticates peers, negotiates security settings, and establishes keys.
Which IPsec protocol is commonly used to provide encryption and integrity protection?
Select all statements that correctly describe IKE’s role in an IPsec VPN.
- A
IKE can authenticate VPN peers.
- B
IKE can negotiate security settings.
- C
IKE replaces IPsec as the protocol that protects the data packets.
- D
IKE can establish keys for the VPN connection.
- E
IKE determines which internal resources each user may access.
In IPsec tunnel mode, what happens to the original IP packet?
- A
It encrypts only the outer routing headers and leaves the original packet outside the tunnel.
- B
It protects an entire original IP packet by encapsulating it in a new packet.
- C
It authenticates a user but does not protect data packets.
- D
It connects a user device directly to a VPN client.
A company wants permitted traffic to pass between the networks at its branch office and headquarters through a protected connection. Which VPN design best fits this goal?
- A
A remote-access VPN, because each branch employee must connect individually from a personal device
- B
An access policy, because it connects two networks without VPN gateways
- C
A public transport network, because it provides the protected connection itself
- D
A site-to-site VPN, because gateways can connect the two locations’ networks
An employee wants to reach authorized company resources from home using a remote-access VPN. Describe how the connection is established and identify the roles of the client, public network, gateway, authentication, and access policy.
What does tunneling do in a VPN?
- A
It transforms readable data into ciphertext.
- B
It carries one packet inside another packet for transport across an intervening network.
- C
It verifies the identity of a user or VPN peer.
- D
It determines which internal resources a user may reach.
What is the role of the public or transport network in a VPN connection?
- A
It carries encapsulated VPN packets between the VPN endpoints.
- B
It terminates VPN connections and links them to a protected network.
- C
It negotiates IPsec security settings and establishes keys.
- D
It decides which internal resources a user may access.
A VPN tunnel necessarily encrypts the packets it carries.
- A
True
- B
False
In a remote-access VPN, what does the VPN client on the user's device do?
- A
It carries encapsulated packets across the intervening network.
- B
It initiates the VPN and sends the user's traffic through it.
- C
It determines which internal resources the user may reach.
- D
It negotiates security parameters and keys for IPsec.
A VPN sends private-network traffic across an intervening public network by tunneling. Which description correctly explains how tunneling carries the traffic?
- A
The original packet is carried inside another packet, whose outer headers support routing across the intervening network.
- B
The original packet is converted into a user credential before it crosses the network.
- C
The original packet is discarded and replaced by a packet generated at the destination.
- D
The original packet is split into separate encrypted keys.
What acronym names the protocol commonly used with IPsec to authenticate peers, negotiate security settings, and establish keys?
An organization wants a service that can authenticate VPN users, authorize their access, and record their activity. What type of service may it use?