Chapter Review

The Cisco VPN 3000 Concentrator devices are a series of specialty appliances that perform VPN gateway services for organizations of all sizes. The VPN Concentrator can be used in remote access implementations, providing secure connections for mobile users and Small Office/Home Office (SOHO) locations, as well as LAN-to-LAN connections providing VPN access between branch locations. Many networks use the Concentrators for both types of networks.

Concentrator configuration and operations are via a menu-driven architecture, accessed by either a text-based CLI or a web-based interface. Generally, all tasks and functions can be performed using either interface, but the CLI must be used initially to configure an IP address on the private interface to allow web access.

The Concentrator functions and menu options break into three areas: Configuration, Administration, and Monitoring. Configuring the system sets the parameters that govern its use and functionality as a VPN device, but administration involves higher level activities, such as who is allowed to configure the system and what software runs on it. The Monitoring screens can be used to view the status of the many processes and activities essential to system administration and management, as well as the statistics the Concentrator compiles.

Questions

1.?	To make the VPN Concentrator accessible to a web browser, which interface must be configured by the CLI? Ethernet 0 Ethernet 1 Ethernet 2 Ethernet 3
2.?	The VPN 3000 Concentrator CLI console connection uses which of the following? A standard Cisco console kit with cable A rollover cable with no adapters required A straight-through serial connection A straight-through RJ-45 cable with no adapters required
3.?	What is the following screen? Welcome to Cisco Systems ?VPN 3000 Concentrator Series Command Line Interface Copyright (C) 1998-2003 Cisco Systems, Inc.-- : Set the time on your device. ... > Time Quick -> [ 10:13:37 ] CLI startup menu Manager startup menu CLI Quick Configuration Manager Quick Configuration
4.?	Which of the following is not one of the Quick Configuration steps? Define which tunneling protocols and encryption options will be used Change the admin password to improve system security Define the method(s) for assigning IP addresses to protected clients Define the IP routing method to be used
5.?	Which of the following wouldn’t a VPN Concentrator normally connect to in a remote access implementation? VPN 3002 Client VPN Client software VPN 3000 Concentrator PIX Firewall
6.?	Which is not one of the three types of preshared keys? Unique User Group Wildcard
7.?	When using the VPN Concentrator internal authentication server, which is not an accurate maximum number of entries (groups and users combined)? Model 3005/3015—100 Model 3030—500 Model 3060—800 Model 3080—1,000
8.?	Which of the following is not one of the four possible methods for the VPN Concentrator to assign IP addresses to the remote users? Use Address from Authentication Server Use a DHCP Server Use NAT inside Use Address Pools Use Client Address
9.?	What does the term split tunneling refer to? The capability to establish multiple simultaneous VPN connections The capability to allow multiple users to share a VPN connection The capability to allow the IPSec client to go directly to the Internet in Cleartext form for those destinations that don’t require encryption The capability to create different VPN connections based on security requirements
10.?	Which statement is true about VPN Concentrator client firewall requirements? Used to require a personal firewall for all VPN clients Used to configure firewall parameters for VPN Clients running on PIX firewalls Used to configure firewall parameters for VPN Clients running on non- Windows PCs Used to configure firewall parameters for VPN Clients running Microsoft Windows
11.?	Which is not a supported type of user authentication server? RADIUS server TACACS+ server Internal server RSA Security Inc. SecurID (SDI) server NT Domain server
12.?	When using the Identity Parameters tab to define a group, which of the following is not included? User name Group name Password Authentication server type
13.?	Which routing method is not supported using Configuration \| System \| IP Routing? Static routes OSPF Default gateways EIGRP
14.?	Which of the following is not a digital certificate type? Subordinate certificate CA certificate Secondary certificate Root certificate Identity certificate
15.?	Which is not one of the three keywords added to the [Main] section of the vpnclient.ini file for VPN Client Autoinitiation? AutoInitiationList AutoInitiationRetryInterval AutoInitiationNetworks AutoInitiationEnable

Answers

1.?	B. Ethernet 1
2.?	C. A straight-through serial connection
3.?	C. CLI Quick Configuration
4.?	D. Define the IP routing method to be used
5.?	C. VPN 3000 Concentrator (used for LAN-to-LAN implementations)
6.?	B. User
7.?	C. Model 3060—800 (should be 1,000)
8.?	C. Use NAT inside
9.?	C. Enables the IPSec client to go directly to the Internet in Cleartext form for those destinations that don’t require encryption
10.?	D. Used to configure firewall parameters for VPN Clients running Microsoft Windows
11.?	B. TACACS+ server
12.?	A. User name
13.?	D. EIGRP
14.?	A. Secondary certificate
15.?	C. AutoInitiationNetworks