1. Which statement is most likely inaccurate
   1. SSL is a public-key encryption system used to provide secure communications over the Internet
   2. Encapsulating IP packets within other packets hides the source and destination information of the encapsulated packets, the encapsulating packet uses the source and destination address of the VPN gateway.
   3. The VPN policy should spell out who is permitted to have VPN access to your corporate network.
   4. Secure Shell (SSH) enables users to perform secure authenticated logons and encrypted communications between a client and host.
2. Which of the following is not a requirement of password policy guidelines needed to enforce password confidentiality?
   1. Required to be changed a minimum of every 90 days
   2. Must begin with a hard to guess symbol
   3. Contain no part of a user's name
   4. Must contain no repeating characters
3. Checking to determine if an employee still works at the company and if the employee still requires an account on a particular system or application:
   1. Should be done every 30 days when employees are required to change passwords.
   2. Should be done only if the firewall triggers a security warning to the Network administrator about an application or user account
   3. Should be a user accounts review done periodically by the Network administrator.
   4. Should be an employee access review done daily by the Network administrator to weed out fraudulent employees.
4. To view current users on the Linux system, you can type cat /etc/passwd or less /etc/passwd.
   1. True
   2. False
5. Allows the secure transmission of data across the Internet.

The above statement is true if the question is:

1. Why do you need security policies?
2. What do VPNs do that firewalls cannot do?
3. What is the main benefit of access control lists (ACLs)?
4. What is the major advantage of using firewalls instead of VPNs?