Chapter Review

Cisco Easy VPN is part of Cisco’s Unified Client Framework, in which VPN management is centralized across all Cisco VPN devices. The goal is to simplify VPN implementation, at least at the remote end. The Easy VPN strategy incorporates all VPN platforms, including VPN software client, VPN 3002 hardware client, Cisco routers, Cisco PIX Firewalls, and Cisco VPN 3000 Concentrators.

Cisco Easy VPN strategy incorporates centrally stored and managed configurations with dynamic configuration of end-user VPN devices. This should require less manual configuration by end users and field technicians, reducing errors and additional service calls.

The Cisco Easy VPN strategy has two main components: the Cisco Easy VPN Server and the Cisco Easy VPN Remote. The Easy VPN Server service allows a growing number of Cisco IOS routers, PIX Firewalls, and Cisco VPN 3000 Concentrators to act as VPN head- end devices in site-to-site or remote-access VPNs. In addition to providing VPN connections, these devices would store the client configurations and “push” those settings down to the Easy VPN Remote devices on their next connection.

Cisco VPN client software is available, for many common computer OSs bring those systems directly in contact with the VPN networks. While this isn’t a full part of the Easy VPN Remote family, the software client shares similar features and ease of configuration.

Questions

1.?	Which of the following Cisco products is not a Cisco Easy VPN Server? PIX Firewall IOS routers IDS Manager VPN Series Concentrator
2.?	Which two of the following are modes of operation of Cisco Easy VPN Remote? Server Client Network extension Push
3.?	Split tunneling refers to which one of the following? Running two simultaneous VPN connections Allowing two-way simultaneous exchanges Unsecured Internet connections in addition to secure VPN sessions Load balancing VPN circuits
4.?	Which of the following is marketed as both an Easy VPN Client and an Easy VPN Server? Cisco 800 Cisco 1700 PIX 501 Cisco VPN 3002
5.?	Which one of the following technologies is not typically used by VPN Clients? DSL Cable modem Dial-up modems T1 dedicated line
6.?	Which one is not a required Easy VPN Server configuration task? Applying Mode Configuration and Xauth Enabling Policy Lookup via AAA Configuring RADIUS Server Support Defining Group Policy Information for Mode Configuration Push
7.?	Which of the following is a new VPN keepalive scheme? Split Tunneling Control IKE Dead Peer Detection (DPD) Initial Contact Group-Based Policy Control
8.?	In setting up a Cisco VPN client connection to use preshared keys, what information is used to authenticate the connection? Digital certificates Local IP address Server IP address Group name and password
9.?	With which one of the following must the user configure their computer to support VPN? PIX Firewall with VPN service IOS Router with VPN service VPN 3002 Hardware client Cisco VPN Client
10.?	Which VPN implementation would not usually include NAT or PAT? PIX Firewall with VPN service IOS Router with VPN service Cisco VPN Client VPN 3002 Hardware client
11.?	Which of the following is not true about Management Center for VPN Routers v1.1 (Router MC)? It’s a component of Cisco Works It uses a web interface It’s a router-based Java application Developed configurations can be deployed directly to a device
12.?	Which of the following is not a supported feature of Management Center for VPN Routers v1.1 (Router MC)? Configuration rollback Transparent translation of VPN policies to CLI commands Simplified policy definitions Command-line interface for easy configuration
13.?	Which of the following Cisco Easy VPN Remote Phase Two features is only supported on the Cisco uBR905 and Cisco uBR925 cable access routers? Multiple Inside Interface Enhancements Simultaneous Easy VPN Client and Server Support Cisco Easy VPN Remote Web Manager NAT Interoperability Support
14.?	Which two of the following can be used for the Router Management Center server? Windows NT server Windows 2000 Professional Windows 2000 Server Sun Solaris 8.0 or above
15.?	Which of the following Cisco Easy VPN Remote Phase Two features allows a loopback address to be defined as the VPN tunnel source? Manual Tunnel Control Peer Host Name Enhancement Local Address Support NAT Interoperability Support

Answers

1.?	C. IDS Manager
2.?	B. Client and C. Network extension
3.?	C. Unsecured Internet connections in addition to secure VPN sessions
4.?	B. Cisco 1700
5.?	D. T1 dedicated line
6.?	C. Configuring RADIUS Server Support
7.?	B. IKE Dead Peer Detection (DPD)
8.?	D. Group name and password
9.?	D Cisco VPN Client
10.?	C. Cisco VPN Client
11.?	C It is a router-based Java application—it’s a Windows 2000 application.
12.?	D. Command-line interface for easy configuration—Web interface
13.?	C. Cisco Easy VPN Remote Web Manager
14.?	B. Windows 2000 Professional and C. Windows 2000 Server
15.?	C. Local Address Support