MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. IPSec is designed to provide security at which layer?
   a. Application
   b. Network
   c. Data link
   d. Transport
   Answer: b. Networksanfoundry
2. Which protocol in IPSec provides authentication, integrity, and anti-replay, but not encryption?
   a. SSL
   b. ESP
   c. AH
   d. PGP
   Answer: c. AHinfraexam+1
3. IPSec can operate in which modes?
   a. Tunnel only
   b. Transport only
   c. Tunnel and Transport
   d. None
   Answer: c. Tunnel and Transportexamradar+1
4. ESP in IPSec provides which of the following services?
   a. Authentication
   b. Integrity
   c. Encryption
   d. All of the above
   Answer: d. All of the abovenetworklessons+1
5. Which component is responsible for negotiating Security Associations in IPSec?
   a. SSL
   b. IKE
   c. PGP
   d. AH
   Answer: b. IKEscribd+1
6. In tunnel mode, IPSec
   a. Protects only the payload
   b. Protects the entire IP packet
   c. Protects only the header
   d. Does not protect any part
   Answer: b. Protects the entire IP packetsanfoundry+2
7. Integrity in IPSec is usually implemented using
   a. MD5 or SHA
   b. DES or AES
   c. TCP or UDP
   d. X.509 certificates
   Answer: a. MD5 or SHAinfraexam+1
8. Which phase of IPSec negotiation establishes the secure, authenticated communication channel?
   a. Phase 1
   b. Phase 2
   c. Phase 3
   d. Phase 4
   Answer: a. Phase 1scribd+1
9. What does a Security Association (SA) define?
   a. Encryption algorithms only
   b. Parameters for a secure communication session
   c. Compression algorithms only
   d. Network topologies
   Answer: b. Parameters for a secure communication sessionscribd+1
10. Which protocol is used to configure keys in IPSec?
    a. DES
    b. SHA
    c. IKE
    d. ESP
    Answer: c. IKEscribd+1
11. IPSec can be used to secure communications in which environments?
    a. Only local networks
    b. Only wide area networks
    c. Both local and wide area networks
    d. Only wireless networks
    Answer: c. Both local and wide area networkscloudflare+1
12. What is the default port number for IKE?
    a. 443
    b. 500
    c. 80
    d. 25
    Answer: b. 500networklessons+1
13. The primary modes used in IKE Phase 1 are
    a. Passive and Active
    b. Main and Aggressive
    c. Tunnel and Transport
    d. TCP and UDP
    Answer: b. Main and Aggressivescribd+1
14. Which service does anti-replay protect against?
    a. Unauthorized access
    b. Packet duplication attacks
    c. Data corruption
    d. Hardware failure
    Answer: b. Packet duplication attacksscribd+1
15. Which symmetric encryption algorithms can be used in IPSec?
    a. AES and DES
    b. MD5 and SHA
    c. ECC and RSA
    d. PGP and SSL
    Answer: a. AES and DESinfraexam+1
16. Which protocol is assigned number 50 in IPSec?
    a. ESP
    b. AH
    c. IKE
    d. GRE
    Answer: a. ESPinfraexam
17. Which protocol uses number 51 in IPSec?
    a. ESP
    b. AH
    c. IKE
    d. GRE
    Answer: b. AHsanfoundry+1
18. IPSec in transport mode protects
    a. Only the IP header
    b. Only the payload delivered from transport to network layer
    c. Both header and payload
    d. Only TCP header
    Answer: b. Only the payload delivered from transport to network layercwipedia+1
19. Tunnel mode is commonly used for
    a. Host-to-host security
    b. Network-to-network security
    c. Application-to-application security
    d. None
    Answer: b. Network-to-network securityexamradar+1
20. Which of the following is not an authentication mechanism in IPSec?
    a. Pre-shared key
    b. Digital certificate
    c. Username and password
    d. RSA signature
    Answer: c. Username and passworditexamanswers+1
21. Which protocol in IPSec provides encryption?
    a. AH
    b. ESP
    c. TCP
    d. SSL
    Answer: b. ESPsanfoundry+1
22. What is the main difference between transport mode and tunnel mode?
    a. Header protection vs payload protection
    b. Speed
    c. Compression level
    d. Port usage
    Answer: a. Header protection vs payload protectionwayground+1
23. Diffie-Hellman is used in IPSec for
    a. Encryption
    b. Key exchange
    c. Authentication
    d. Packet marking
    Answer: b. Key exchangenetworklessons+1
24. Which authentication method does IKE support?
    a. Pre-shared key
    b. Digital certificates
    c. Both a & b
    d. None
    Answer: c. Both a & bitexamanswers+1
25. Which of the following statements about IPSec is false?
    a. Provides end-to-end encryption only at application layer
    b. Uses Security Associations
    c. Can work with IPv4 and IPv6
    d. Uses AH and ESP
    Answer: a. Provides end-to-end encryption only at application layergoodaccess+1
26. The function of ISAKMP is to
    a. Establish SAs and key management
    b. Route packets
    c. Encrypt payloads
    d. Scan for viruses
    Answer: a. Establish SAs and key managementscribd+1
27. Which protocol is used for encapsulation in IPSec VPNs?
    a. GRE
    b. ESP
    c. TCP
    d. UDP
    Answer: b. ESPnetworklessons+1
28. The main algorithm used for integrity in IPSec is
    a. MD5
    b. SHA-1
    c. SHA-2
    d. All of the above
    Answer: d. All of the aboveinfraexam+1
29. What is NOT a benefit of IPSec?
    a. Confidentiality
    b. Integrity
    c. Compression
    d. Authentication
    Answer: c. Compressionexamradar+1
30. An IPSec VPN tunnel requires matching which parameters?
    a. Encryption and hashing protocols
    b. IP addressing only
    c. MAC addressing only
    d. None
    Answer: a. Encryption and hashing protocolsscribd+1
31. The main phases in IPSec negotiation are
    a. Key exchange and data transfer
    b. Phase 1 and Phase 2
    c. Authentication and compression
    d. Encryption and routing
    Answer: b. Phase 1 and Phase 2networklessons+1
32. IP packets in tunnel mode are
    a. Sent unencrypted
    b. Enveloped with a new IP header
    c. Marked for fragmentation
    d. Sent with compressed header
    Answer: b. Enveloped with a new IP headerwayground+1
33. In transport mode, the original IP header is
    a. Encrypted
    b. Left intact
    c. Deleted
    d. Replaced
    Answer: b. Left intactexamradar+1
34. Pre-shared key is used in IPSec for
    a. Routing
    b. Authentication
    c. Packet forwarding
    d. Compression
    Answer: b. Authenticationitexamanswers+1
35. What is the role of sequence numbers in IPSec?
    a. Performance monitoring
    b. Anti-replay protection
    c. Address resolution
    d. DNS resolution
    Answer: b. Anti-replay protectionscribd+1
36. ESP stands for
    a. Endpoint Security Protocol
    b. Encapsulating Security Payload
    c. Enhanced Security Pack
    d. Ethernet Secure Packet
    Answer: b. Encapsulating Security Payloadinfraexam+1
37. Which is NOT an IPSec mode?
    a. Transport
    b. Tunnel
    c. Main
    d. Aggressive
    Answer: c. Mainscribd+1
38. Which encryption protocol is most recommended for IPSec?
    a. DES
    b. 3DES
    c. AES
    d. RC4
    Answer: c. AESnetworklessons+1
39. To achieve host-to-host security, IPSec should run in
    a. Tunnel mode
    b. Transport mode
    c. Aggressive mode
    d. Passive mode
    Answer: b. Transport modeexamradar+1
40. Security Associations in IPSec are established via
    a. IKE
    b. GRE
    c. TCP
    d. OSPF
    Answer: a. IKEscribd+1
41. AH in IPSec does NOT provide
    a. Authentication
    b. Integrity
    c. Encryption
    d. Anti-replay
    Answer: c. Encryptioninfraexam+1
42. Which IPSec component provides anti-replay protection?
    a. ESP
    b. Sequence numbers
    c. Tunnel mode
    d. IKE
    Answer: b. Sequence numbersscribd+1
43. Which IPSec element facilitates communication between devices with compatible settings and credentials?
    a. Security Policy
    b. Security Association
    c. Security Audit
    d. Security Gateway
    Answer: b. Security Associationscribd+1
44. Network-to-network communication via IPSec is best achieved using
    a. Transport mode
    b. Tunnel mode
    c. Aggressive mode
    d. Compression mode
    Answer: b. Tunnel modecwipedia+1
45. Which one is NOT typically a configuration parameter for IPSec?
    a. Encryption algorithm
    b. Compression ratio
    c. Hash algorithm
    d. Key strength
    Answer: b. Compression ratioexamradar+1
46. Which IPSec protocol performs data encapsulation for confidentiality?
    a. AH
    b. ESP
    c. GRE
    d. OSPF
    Answer: b. ESPnetworklessons+1
47. Which method is commonly used to initiate an IPSec connection without manual configuration?
    a. Dynamic Host Configuration Protocol
    b. Internet Key Exchange (IKE)
    c. Manual Keying
    d. ARP
    Answer: b. Internet Key Exchange (IKE)scribd+1
48. Encryption in IPSec is essential to guarantee
    a. Data reliability
    b. Data confidentiality
    c. Data redundancy
    d. Data latency
    Answer: b. Data confidentialityinfraexam+1
49. IPSec can be deployed over which IP protocol versions?
    a. IPv4 only
    b. IPv6 only
    c. Both IPv4 and IPv6
    d. None
    Answer: c. Both IPv4 and IPv6goodaccess+1
50. To troubleshoot IPSec tunnel issues, which should be checked for being identical on both ends?
    a. SA parameters and ISAKMP policies
    b. Routing tables
    c. VLAN configurations
    d. ARP tables
    Answer: a. SA parameters and ISAKMP policiesscribd+1

1. https://www.sanfoundry.com/computer-networks-questions-answers-ipsecurity/
2. https://infraexam.com/network-security-1-0/network-security-version-1-network-security-1-0-modules-18-19-vpns-group-exam-answers/
3. https://examradar.com/security-internet-ipsec-ssltls-pgp-vpn-firewalls-mcq-data-communication-networking/
4. https://networklessons.com/security/ipsec-internet-protocol-security
5. https://www.scribd.com/document/419585231/MCQ-32
6. https://www.sanfoundry.com/computer-networks-questions-answers-experienced/
7. https://server.cwipedia.in/DATA/SEM-VI/NIS/NIS%20MCQ%20%20QB%20cwipedia.pdf
8. https://www.scribd.com/document/681012273/IPSEC-VPN-Troubleshooting-Scenarios-1662193543
9. https://www.cloudflare.com/learning/network-layer/what-is-ipsec/
10. https://itexamanswers.net/8-3-9-check-your-understanding-ipsec-answers.html
11. https://wayground.com/admin/quiz/5e8ee0a555d3c5001c78ff0f/ip-security
12. https://www.goodaccess.com/blog/ipsec-vpn
13. https://itexamanswers.net/8-4-2-module-quiz-vpn-and-ipsec-concepts-answers.html
14. https://pinoybix.org/2017/08/mcq-in-security-in-the-internet-ipsec-ssl-tls-pgp-vpn-firewalls-forouzan.html
15. https://ipcisco.com/quiz/ipsec-vpn-overview/
16. https://wayground.com/admin/quiz/67465ac36d85ac6517745c55/842-module-quiz-vpn-and-ipsec-concepts-itexams
17. https://www.linkedin.com/posts/ajeet-kumar-45219890_hi-everyone-scenario-based-question-for-activity-7277258544150671360-DMG7
18. https://edurev.in/test/7074/Test-IP-Security
19. https://dev.to/hegdepavankumar/securing-connections-a-comprehensive-guide-to-ipsec-and-vpn-mastery-4eka
20. https://www.scribd.com/document/542001815/CH-32-Security-in-the-Internet-IPSec-SSLTLS-PGP-VPN-and-Firewalls-Multiple-Choice-Questions-and-Answers-PDF