Chapter 7 Study Guide

Question 1

What was the weakness of SSL v2?

Answer 1

• The usage of “export grade cipersuites”
• Crackable 40-bit session keys

Question 2

HTTP port

Answer 2

80

Question 3

HTTPS port

Answer 3

443

Question 4

SMTP port

Answer 4

25

Question 5

SMTPS port

Answer 5

465

Question 6

how is a SSL/TLS tunnel created?

Answer 6

• With a symetric key method (RCA or AES)
• Signature created with a defined hashing method (SHA-1 or MD5)

Question 7

Client Hello

Answer 7

• Sent from client to the server and defines cipher suites that the client supports

Question 8

Server Hello

Answer 8

• Sends back the digital certificate from the server and the selected cipher suite from the list the client sent

Question 9

Client Key Exchange

Answer 9

• Sent from the client and contains the information required to generate the session key

Question 10

Tunneling mode

Answer 10

Allows information to be inspected by firewalls. The information will still be encrypted over the internet

Question 11

Transport mode

Answer 11

End-to-end encryption, cannot be inspected

Question 12

Two phases of IPSEC

Answer 12

• IKE (Internet Key Exchange)
• Defines the policies

Question 13

Default port for the IPsec key exchange

Answer 13

• UDP 500

Question 14

Which protocol indicates the virtual private network (VPN) is using Authentication Header (AH)?

Answer 14

• 51