CertNexus ITS-110 Exam - Topic 1 Question 11 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 11
Topic #: 1

The network administrator for an organization has read several recent articles stating that replay attacks are on the rise. Which of the following secure protocols could the administrator implement to prevent replay attacks via remote workers' VPNs? (Choose three.)

AInternet Protocol Security (IPSec)

BEnhanced Interior Gateway Routing Protocol (EIGRP)

CPassword Authentication Protocol (PAP)

DChallenge Handshake Authentication Protocol (CHAP)

ESimple Network Management Protocol (SNMP)

FLayer 2 Tunneling Protocol (L2TP)

GInterior Gateway Routing Protocol (IGRP)

Show Suggested Answer

Suggested Answer: B

by Rikki at Feb 24, 2023, 05:18 PM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jose

4 months ago

L2TP could work too, but it needs IPSec for better security.

upvoted 0 times

...

William

4 months ago

Surprised that PAP is even listed, it’s not secure at all!

upvoted 0 times

...

Audra

4 months ago

EIGRP? Not really relevant for this issue.

upvoted 0 times

...

Julio

5 months ago

I think CHAP is also a good option here.

upvoted 0 times

...

Alexia

5 months ago

IPSec is definitely a solid choice for preventing replay attacks.

upvoted 0 times

...

Sue

5 months ago

I practiced a similar question where IPSec was definitely one of the correct answers, but I’m a bit confused about L2TP and its security features.

upvoted 0 times

...

Rene

5 months ago

CHAP seems like a good choice too since it uses a challenge-response mechanism, which should help prevent replay attacks.

upvoted 0 times

...

Elliott

5 months ago

I’m not too sure about PAP; I think it’s not secure enough against replay attacks, but I can't recall the details.

upvoted 0 times

...

Cassandra

5 months ago

I remember that IPSec is often mentioned as a strong option for securing VPNs, so I think that might be one of the answers.

upvoted 0 times

...

Melissa

5 months ago

Direct evidence is definitely the way to go. It's the most straightforward and credible type, so that's the one I'll be selecting.

upvoted 0 times

...

Annelle

5 months ago

I'm a bit unsure about this one. I'll need to re-read the question and think through the different participant needs more carefully.

upvoted 0 times

...

Aja

5 months ago

I think the statement about location D having the strongest RF signal strength might be correct, but I'm not entirely sure how to interpret the dB values accurately.

upvoted 0 times

...

Verlene

5 months ago

I'm pretty confident I know the answer to this one. The question is asking about products supported as "Extended" in DNA-C 1.1, so I'll focus on that.

upvoted 0 times

...

Jess

10 months ago

EIGRP? Really? I'd rather have my passwords stolen than use that protocol to protect against replay attacks.

upvoted 0 times

Alexia

9 months ago

F) Layer 2 Tunneling Protocol (L2TP)

upvoted 0 times

...

Skye

9 months ago

D) Challenge Handshake Authentication Protocol (CHAP)

upvoted 0 times

...

Darell

9 months ago

A) Internet Protocol Security (IPSec)

upvoted 0 times

...

Ramonita

10 months ago

I'm going with IPSec, L2TP, and CHAP. If that doesn't work, I'll just tell the examiner that my dog must have stepped on the keyboard when I was taking the test.

upvoted 0 times

Mira

8 months ago

User 3: Just make sure to have a backup plan in case it doesn't work.

upvoted 0 times

...

Trinidad

9 months ago

User 2: Yeah, L2TP and CHAP are also solid options.

upvoted 0 times

...

William

9 months ago

User 1: I think IPSec is a good choice.

upvoted 0 times

...

Kasandra

10 months ago

I hope the real exam doesn't have trick questions like this. It's like they're trying to see if we'll just randomly select three options without thinking it through.

upvoted 0 times

Eleonore

9 months ago

F) Layer 2 Tunneling Protocol (L2TP)

upvoted 0 times

...

Jina

9 months ago

D) Challenge Handshake Authentication Protocol (CHAP)

upvoted 0 times

...

Elliot

10 months ago

A) Internet Protocol Security (IPSec)

upvoted 0 times

...

Dallas

10 months ago

This is a pretty straightforward question. The correct answers are obvious - IPSec, L2TP, and CHAP. Anything else is just a distraction.

upvoted 0 times

Dalene

9 months ago

User 3: I agree, the other options like PAP and SNMP are not as secure.

upvoted 0 times

...

Janey

9 months ago

User 2: Yeah, those are the most secure protocols for VPNs.

upvoted 0 times

...

Kiley

10 months ago

User 1: I think the best options to prevent replay attacks are IPSec, L2TP, and CHAP.

upvoted 0 times

...

Tammi

10 months ago

I'm not sure why EIGRP, PAP, SNMP, and IGRP are even listed as options. Those are clearly not designed to mitigate replay attacks on VPNs.

upvoted 0 times

...

Judy

11 months ago

IPSec, L2TP, and CHAP seem like the most relevant options here to prevent replay attacks. IPSec provides strong encryption and authentication, L2TP creates a secure tunnel, and CHAP adds an extra layer of challenge-response authentication.

upvoted 0 times