QUESTION: 13

Which of the following statements about IPsec and IKE following are correct? (Choose three answers)

With IPsec there are two ways to establish the security association, manual mode (manual) and IKE auto-negotiation (Isakmp) mode.
IKE aggressive mode can be selected based on negotitations initiated by the tunnel endpoint IP address or ID, to find the corresponding authentication word and finalize negotiations.
The NAT traversal function is used to delete the IKE negotiation verification process for UDP port numbers, while achieving a VPN tunnel to discover the NAT gateway function. If a NAT gateway device is used, then the data transfer after the IPsec uses UDP encapsulation.
IKE security mechanisms include DH Diffie-Hellman key exchange and distribution; improve the security front (Perfect Forward Secrecy PFS), encryption, and SHA1 algorithms.

Answer(s): A,B,C

QUESTION: 14

In the attack shown below, a victim host packet captures the traffic. According to the information shown, what kind of attack is this?

SYN Flood
SYN-ACK Flood
ACK-Flood
Connection Flood

Answer(s): C

Reveal Solution Next Question

QUESTION: 15

In IPsec VPN with NAT traversal, you must use IKE aggressive mode.

TRUE
FALSE

Answer(s): B

Reveal Solution Next Question

A man in the middle attack refers to an intermediate that sees the data exchange between server and client. To the server, all messages appear to be sent to or received from the client; and to the client all the packets appear to have been sent to or received from the server. If a hacker is using the man-in-the-middle attack, the hacker will send at least two data packets as shown to achieve this attack.

Which of the following packet 1 and packet 2 Field Description is correct? (Choose two answers)

Packet 1:
Source IP 1.1.1.1 Source MAC C-C-C
The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
Packet 1: Source IP 1.1.1.3
Source MAC C-C-C
The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
Packet 2:
Source IP 1.1.1.2 Source MAC C-C-C
The purpose of IP 1.1.1.1 The purpose of Mac A-A-A
Packet 2:
Source IP 1.1.1.3 Source MAC C-C-C
The purpose of IP 1.1.1.1 The purpose of Mac A-A-A

Answer(s): A,C

Reveal Solution Next Question

Free H12-721 Exam Braindumps (page: 4)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16