Free GIAC GSNA Exam Dumps June 2026

To implement IP filters at the headquarters, add source filters for the Boston distribution center for UDP port 1701 and IP protocol 50. Also,

add destination filters for the headquarters for UDP port 1701 and IP protocol 50.

The Windows 2000 Router service provides routing services in the LAN and WAN environments, and over the Internet, using secure virtual

private network (VPN) connections. The VPN connections are based on the Point-to-Point Tunneling Protocol (PPTP) and the Layer 2 Tunneling

Protocol (L2TP)

L2TP is very similar to PPTP but uses UDP, and therefore can be used over asynchronous transfer mode (ATM), Frame Relay, and X.25

networks as well. When L2TP is used over IP networks, it uses a UDP port 1701 packet format for both a control channel and a data channel.

L2TP can also be used with IPSec to provide a fully secured network link.

Further, IP packet filtering provides an ability to restrict the traffic into and out of each interface. Packet filtering is based on filters defined by

the values of source and destination IP addresses, TCP, and UDP port numbers, and IP protocol numbers.

Inbound filters that are applied to the receiving traffic allow the receiving computer to match the traffic with the IP Filter List for the source IP

address. Similarly, the outbound filters that are applied to the traffic leaving a computer towards a destination trigger a security negotiation

for the destination IP address.

That is why, to implement the IP filtering at the headquarters, you have to add a source address for the filters at the Boston center and a

destination address for the filters at the headquarters.

In order to ensure that the laptop users use smart cards for authentication, you will have to configure IEEE 802.1X authentication using the EAP-TLS protocol on the network.

The Unix utility sed (stream editor) is a text editing tool that can be used to edit text files without having to open them. This utility parses text

files and implements a programming language which can apply textual transformations to such files. It reads input files line by line

(sequentially), applying the operation which has been specified via the command line (or a sed script), and then outputs the line.

Answer D is incorrect. The more command is used to view (but not modify) the contents of a text file on the terminal screen at a time.

The syntax of the more command is as follows:

more [options] file_name

Where,

Answer A is incorrect. The less command is used to view (but not change) the contents of a text file, one screen at a time. It is similar

to the more command. However, it has the extended capability of allowing both forward and backward navigation through the file. Unlike

most Unix text editors/viewers, less does not need to read the entire file before starting; therefore, it has faster load times with large files.

The command syntax of the less command is as follows:

less [options] file_name

Where,

Answer C is incorrect. The vi editor is an interactive, cryptic, and screen-based text editor used to create and edit a file. It operates in

either Input mode or Command mode. In Input mode, the vi editor accepts a keystroke as text and displays it on the screen, whereas in

Command mode, it interprets keystrokes as commands. As the vi editor is case sensitive, it interprets the same character or characters as

different commands, depending upon whether the user enters a lowercase or uppercase character. When a user starts a new session with vi,

he must put the editor in Input mode by pressing the 'I' key. If he is not able to see the entered text on the vi editor's screen, it means that

he has not put the editor in Insert mode. The user must change the editor to Input mode before entering any text so that he can see the text

he has entered.

Confidentiality is a mechanism that ensures that only the intended and authorized recipients are able to read data. The data is so encrypted

that even if an unauthorized user gets access to it, he will not get any meaning out of it.

Answer D is incorrect. Authorization is a process that verifies whether a user has permission to access a Web resource. A Web server

can restrict access to some of its resources to only those clients that log in using a recognized username and password. To be authorized, a

user must first be authenticated.

Answer C is incorrect. Authentication is the process of verifying the identity of a user. This is usually done using a user name and

password. This process compares the provided user name and password with those stored in the database of an authentication server.

Answer B is incorrect. Data integrity is a mechanism that ensures that the data is not modified during transmission from source to

destination. This means that the data received at the destination should be exactly the same as that sent from the source.

In order to accomplish the given tasks, you will have to use the following commands:

router1(config)#ip domain-name network.com

router1(config)#crypto key zeroize rsa

router1(config)#crypto key generate rsa general-keys modulus 1024

router1(config)#ip ssh time-out 30

router1(config)#ip ssh authentication-retries 4

router1(config)#line vty 0 4

router1(config-line)#transport input ssh