CompTIA
Exam Vouchers
Save money on CompTIA exams
| Question of the day
Sign up to receive
interactive practice questions
for MCSE, CompTIA
Cisco and other exams
| TestKing
Get MCSE, MCSD, CCNA, CCNP,A+, N+ and many more | * ExamSheets *
Guide for Success!
Actual Questions & Answers
MCSE, MCSD, A+ ,CCNA, CCNP
Oracle 8i, Oracle 9i Online practice tests
Certification sites Online university Online college Online education Distance learning Software forum Server administration forum Programming resources
|
|  |
| Author |
NetChild's Mon 70-216 QOD
|
NetChild1985
RedHater
Registered: Feb 2002
Location:
Country: Bulgaria
State:
Certifications: MCSA 2K;2K3, MCSE 2K, HP AIS & ASE
Working on: MCSE 2K3:Security
Total Posts: 2517
|
|
 NetChild's Mon 70-216 QOD
I'm continuing wbafrank and Pavlov's QOD as long as I'm preparing for this exam. Here's the first question for this week...
You are the administrator of your company's network. Your network consists of Windows 2000 server computer and Windows 2000 Professional computers. You create an IPSec policy named accountingsec for use by employees in your accounting department.
Your company is concerned that the keys used for encryption could be compromised and used to decrypt future communications. You want to prevent the re-use of previous-session keys. You also want to limit performance degradation. What should you do?
A. Decrease the frequency of policy checks for updates
B. On the Generate a new key every property, modify the time allocations
C. Select the Master key perfect forward secrecy check box
D. Select the Session key perfect forward secrecy check box
Good luck! We'll see you tomorrow with the correct answer! 
__________________
Using a digital nervous system
Report this post to a moderator
|
|
 03-24-03 07:34 AM
|
|
gcw123
Senior Member
M
Registered: Oct 2001
Location:
Country: Singapore
State:
Certifications: CCNA, CNE NW4/NW5/NW6, CNA NW4/NW5/NW6, MCP(210,215)
Working on: MCSE 2K, CCNP,
Total Posts: 347
|
|
|
|
03-24-03 08:44 AM
|
|
NetChild1985
RedHater
Registered: Feb 2002
Location:
Country: Bulgaria
State:
Certifications: MCSA 2K;2K3, MCSE 2K, HP AIS & ASE
Working on: MCSE 2K3:Security
Total Posts: 2517
|
|
|
|
03-24-03 10:14 AM
|
|
cramersaunders
Senior Member
M
Registered: Oct 2001
Location: Herford
Country: Germany
State:
Certifications: MCSE, MCSA, A+
Working on: MCDBA
Total Posts: 886
|
|
|
|
03-24-03 11:03 AM
|
|
NetChild1985
RedHater
Registered: Feb 2002
Location:
Country: Bulgaria
State:
Certifications: MCSA 2K;2K3, MCSE 2K, HP AIS & ASE
Working on: MCSE 2K3:Security
Total Posts: 2517
|
|
|
Re: NetChild's Mon 70-216 QOD
quote:
Originally posted by NetChild1985
I'm continuing wbafrank and Pavlov's QOD as long as I'm preparing for this exam. Here's the first question for this week...
You are the administrator of your company's network. Your network consists of Windows 2000 server computer and Windows 2000 Professional computers. You create an IPSec policy named accountingsec for use by employees in your accounting department.
Your company is concerned that the keys used for encryption could be compromised and used to decrypt future communications. You want to prevent the re-use of previous-session keys. You also want to limit performance degradation. What should you do?
A. Decrease the frequency of policy checks for updates
B. On the Generate a new key every property, modify the time allocations
C. Select the Master key perfect forward secrecy check box
D. Select the Session key perfect forward secrecy check box
Good luck! We'll see you tomorrow with the correct answer!
As I said the questions is tricky and the correct answer is: D
There are two types of keys that can be configured with Perfect Forward Secrecy, the Master and Sessions keys. Forcing Perfect Forward Secrecy for the Master key is the most secure option, however it can place an additional load on the networks domain controllers 'cause it requires re-authentication. Sessions keys are generated from the Master key. Although regeneration of these is not as secure, it is still highly secure and it meets the question's requirements for both security and limiting performance reductions.
__________________
Using a digital nervous system
Report this post to a moderator
|
|
|
03-25-03 08:58 AM
|
|
|
Click here for list of 70-216
study guides
MCSE exam notes
70-216 exam details
Forum Rules:
Who Can Read The Forum? Any registered user or guest.
Who Can Post New Topics? Any registered user.
Who Can Post Replies? Any registered user.
Changes: Messages can be edited by their author.
Posts: HTML code is OFF. Smilies are ON. vB code is ON. [IMG] code is ON. |
|
ExamNotes forum archive
|
