A Complete Chapter Quiz

Security in the Internet:

IPSec, SSL/TLS, PGP, VPN, and
Firewalls

Compilation of all the quizzes (MCQs) for each and every chapters in the book of Data
Communications and Networking 4th Edition by Behrouz A. Forouzan.

1|P age
MCQs in Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls
www.PinoyBIX.com
1. _________ operates in the transport 7. IPSec defines two protocols: _______
mode or the tunnel mode. and ________.
A) IPSec A) AH; SSL
B) SSL B) PGP; ESP
C) PGP C) AH; ESP
D) none of the above D) all of the above
2. IKE creates SAs for _____. 8. In the ______ mode, IPSec protects
A) SSL information delivered from the transport
B) PGP layer to the network layer.
C) IPSec A) transport
D) VP B) tunnel
3. ______ provides either authentication C) either (a) or (b)
or encryption, or both, for packets at the D) neither (a) nor (b)
IP level. 9. ______ is the protocol designed to
A) AH create security associations, both
B) ESP inbound and outbound.
C) PGP A) SA
D) SSL B) CA
4. One security protocol for the e-mail C) KDC
system is _________. D) IKE
A) IPSec 10. A _______network is used inside an
B) SSL organization.
C) PGP A) private
D) none of the above B) public
5. Typically, ______ can receive C) semi-private
application data from any application D) semi-public
layer protocol, but the protocol is 11. SSL provides _________.
normally HTTP. A) message integrity
A) SSL B) confidentiality
B) TLS C) compression
C) either (a) or (b) D) all of the above
D) both (a) and (b) 12. The Internet authorities have
6. IKE is a complex protocol based on reserved addresses for _______.
______ other protocols. A) intranets
A) two B) internets
B) three C) extranets
C) four D) none of the above
D) five

2|P age
MCQs in Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls
www.PinoyBIX.com
13. An _________ is a network that 19. In ______, there is a single path from
allows authorized access from outside the fully trusted authority to any
users. certificate.
A) intranet A) X509
B) internet B) PGP
C) extranet C) KDC
D) none of the above D) none of the above
14. _________ is a collection of protocols 20. The combination of key exchange,
designed by the IETF (Internet hash, and encryption algorithms defines
Engineering Task Force) to provide a ________ for each SSL session.
security for a packet at the network level. A) list of protocols
A) IPSec B) cipher suite
B) SSL C) list of keys
C) PGP D) none of the above
D) none of the above 21. A ______ provides privacy for LANs
15. IKE uses _______. that must communicate through the
A) Oakley global Internet.
B) SKEME A) VPP
C) ISAKMP B) VNP
D) all of the above C) VNN
16. IPSec uses a set of SAs called the D) VPN
________. 22. _______ uses the idea of certificate
A) SAD trust levels.
B) SAB A) X509
C) SADB B) PGP
D) none of the above C) KDC
17. An ________ is a private network that D) none of the above
uses the Internet model. 23. IPSec in the ______ mode does not
A) intranet protect the IP header.
B) internet A) transport
C) extranet B) tunnel
D) none of the above C) either (a) or (b)
18. ______ is actually an IETF version of D) neither (a) nor (b)
_____. 24. ________ provides privacy, integrity,
A) TLS; TSS and authentication in e-mail.
B) SSL; TLS A) IPSec
C) TLS; SSL B) SSL
D) SSL; SLT C) PGP

3|P age
MCQs in Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls
www.PinoyBIX.com
D) none of the above B) tunnel
25. In _____, there can be multiple paths C) either (a) or (b)
from fully or partially trusted authorities. D) neither (a) nor (b)
A) X509 31. In the _______ mode, IPSec protects
B) PGP the whole IP packet, including the original
C) KDC IP header.
D) none of the above A) transport
26. ______ provides authentication at the B) tunnel
IP level. C) either (a) or (b)
A) AH D) neither (a) nor (b)
B) ESP 32. ______ was invented by Phil
C) PGP Zimmerman.
D) SSL A) IPSec
27. In _______, the cryptographic B) SSL
algorithms and secrets are sent with the C) PGP
message. D) none of the above
A) IPSec 33. A _______ layer security protocol
B) SSL provides end-to-end security services for
C) TLS applications.
D) PGP A) data link
28. ______ is designed to provide B) network
security and compression services to C) transport
data generated from the application D) none of the above
layer. 34. In PGP, to exchange e-mail
A) SSL messages, a user needs a ring of
B) TLS _______ keys.
C) either (a) or (b) A) secret
D) both (a) and (b) B) public
29. _______ provide security at the C) either (a) or (b)
transport layer. D) both (a) and (b)
A) SSL
B) TLS
C) either (a) or (b)
D) both (a) and (b)
30. The _______ mode is normally used
when we need host-to-host (end-to-end)
protection of data.
A) transport

4|P age
MCQs in Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls
www.PinoyBIX.com