Timedora
Free Practice Quiz Question List

3 VPN Concepts Online Quiz Questions

Use this free practice quiz with 20 questions to review 3 VPN Concepts, test your knowledge, and prepare for your next test or exam.

20 questions
01
Choose one
1 point

An employee working from home uses VPN software on a laptop to connect to company applications. Which type of VPN best describes this connection?

  1. A

    A site-to-site VPN

  2. B

    A remote-access VPN

  3. C

    A public transport network

  4. D

    An access policy

02
True or false
1 point

True or false: VPN traffic is encrypted whenever it is carried through a tunnel, because tunneling itself guarantees encryption.

  1. A

    True

  2. B

    False

03
Fill in the blank
1 point

In a VPN, the process of carrying an original packet inside an outer packet is called .

04
Written response
1 point

What is the name for the original packet carried inside the added outer packet in a tunnel?

05
Choose one
1 point

A company needs a device or service that ends VPN connections and links them to its protected network. Which VPN component performs this role?

  1. A

    It carries encapsulated packets across the intervening network.

  2. B

    It records user activity but does not terminate VPN connections.

  3. C

    VPN gateway: it terminates VPN connections and connects them to the protected network.

  4. D

    It replaces the need for access policy.

06
Choose all
1 point

Select all security protections that a secure VPN commonly combines to protect communication.

  1. A

    Encryption, which transforms readable data into ciphertext

  2. B

    Tunneling, which by itself guarantees that packets cannot be read

  3. C

    Integrity protection, which helps detect alteration

  4. D

    Authentication, which verifies a user or VPN peer

  5. E

    Access policy, which automatically encrypts every packet

07
True or false
1 point

True or false: Once a device connects through a VPN, the device and every network beyond the VPN gateway are automatically trustworthy.

  1. A

    True

  2. B

    False

08
Fill in the blank
1 point

For IPsec VPNs, authenticates peers, negotiates security settings, and establishes keys.

09
Written response
1 point

Which IPsec protocol is commonly used to provide encryption and integrity protection?

10
Choose all
1 point

Select all statements that correctly describe IKE’s role in an IPsec VPN.

  1. A

    IKE can authenticate VPN peers.

  2. B

    IKE can negotiate security settings.

  3. C

    IKE replaces IPsec as the protocol that protects the data packets.

  4. D

    IKE can establish keys for the VPN connection.

  5. E

    IKE determines which internal resources each user may access.

11
Choose one
1 point

In IPsec tunnel mode, what happens to the original IP packet?

  1. A

    It encrypts only the outer routing headers and leaves the original packet outside the tunnel.

  2. B

    It protects an entire original IP packet by encapsulating it in a new packet.

  3. C

    It authenticates a user but does not protect data packets.

  4. D

    It connects a user device directly to a VPN client.

12
Choose one
1 point

A company wants permitted traffic to pass between the networks at its branch office and headquarters through a protected connection. Which VPN design best fits this goal?

  1. A

    A remote-access VPN, because each branch employee must connect individually from a personal device

  2. B

    An access policy, because it connects two networks without VPN gateways

  3. C

    A public transport network, because it provides the protected connection itself

  4. D

    A site-to-site VPN, because gateways can connect the two locations’ networks

13
Open ended
1 point

An employee wants to reach authorized company resources from home using a remote-access VPN. Describe how the connection is established and identify the roles of the client, public network, gateway, authentication, and access policy.

14
Choose one
1 point

What does tunneling do in a VPN?

  1. A

    It transforms readable data into ciphertext.

  2. B

    It carries one packet inside another packet for transport across an intervening network.

  3. C

    It verifies the identity of a user or VPN peer.

  4. D

    It determines which internal resources a user may reach.

15
Choose one
1 point

What is the role of the public or transport network in a VPN connection?

  1. A

    It carries encapsulated VPN packets between the VPN endpoints.

  2. B

    It terminates VPN connections and links them to a protected network.

  3. C

    It negotiates IPsec security settings and establishes keys.

  4. D

    It decides which internal resources a user may access.

16
True or false
1 point

A VPN tunnel necessarily encrypts the packets it carries.

  1. A

    True

  2. B

    False

17
Choose one
1 point

In a remote-access VPN, what does the VPN client on the user's device do?

  1. A

    It carries encapsulated packets across the intervening network.

  2. B

    It initiates the VPN and sends the user's traffic through it.

  3. C

    It determines which internal resources the user may reach.

  4. D

    It negotiates security parameters and keys for IPsec.

18
Choose one
1 point

A VPN sends private-network traffic across an intervening public network by tunneling. Which description correctly explains how tunneling carries the traffic?

  1. A

    The original packet is carried inside another packet, whose outer headers support routing across the intervening network.

  2. B

    The original packet is converted into a user credential before it crosses the network.

  3. C

    The original packet is discarded and replaced by a packet generated at the destination.

  4. D

    The original packet is split into separate encrypted keys.

19
Written response
1 point

What acronym names the protocol commonly used with IPsec to authenticate peers, negotiate security settings, and establish keys?

20
Written response
1 point

An organization wants a service that can authenticate VPN users, authorize their access, and record their activity. What type of service may it use?