Topic 1 · Question 225
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Top comment
Salilgen▲ 45Highly votedFebruary 09, 2021 09:53 am
I think last answer is YES: Windows 2016 can encrypt data
9 more highly voted comments
hercu▲ 24Highly votedMarch 14, 2021 02:49 pm
Box 3 is also "NO".
You cannot encrypt ALL kind of traffic from Azure VMs sent to the Internet!
You can only encrypt traffic between two TRUSTED endpoints. Obviously the Internet isn't the trusted endpoint. In order to make it work, the use of a VPN gateway is required, and then the traffic can be encrypted "over" the public connection - Internet, between Azure VMs/vNets and the trusted on-premises locations.
"You can use an Azure VPN gateway to send encrypted traffic between your virtual network and your on-premises location across a public connection, or to send traffic between virtual networks." References: https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
You cannot encrypt ALL kind of traffic from Azure VMs sent to the Internet!
You can only encrypt traffic between two TRUSTED endpoints. Obviously the Internet isn't the trusted endpoint. In order to make it work, the use of a VPN gateway is required, and then the traffic can be encrypted "over" the public connection - Internet, between Azure VMs/vNets and the trusted on-premises locations.
"You can use an Azure VPN gateway to send encrypted traffic between your virtual network and your on-premises location across a public connection, or to send traffic between virtual networks." References: https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
Hibin▲ 23Highly votedAugust 26, 2021 11:52 pm
Windows CAN encrypt data, which is all that is being asked for.
In matters like this where the correct answer is ambiguous, I'm inclined to go with the one that makes Microsoft look good.
In matters like this where the correct answer is ambiguous, I'm inclined to go with the one that makes Microsoft look good.
Hibin▲ 23Highly votedAugust 26, 2021 11:52 pm
Windows CAN encrypt data, which is all that is being asked for.
In matters like this where the correct answer is ambiguous, I'm inclined to go with the one that makes Microsoft look good.
In matters like this where the correct answer is ambiguous, I'm inclined to go with the one that makes Microsoft look good.
thebadfella▲ 20Highly votedAugust 22, 2021 10:43 am
By default, any Windows doesn't encrypt outgoing/incoming traffic unless there a VPN setup. So answer is correct "No"
SimonR2▲ 12Highly votedApril 01, 2021 04:33 pm
There is no VPN gateway required. This is simply asking about enrypting network traffic which pretty much every webserver in existance is able to do, whether its based on the internet or internal network communications.
The two endpoints don't necessarily have to trust each other. Its usually one-sided unless with the server needing to prove its trustworthy, unless there is client cert authentication too. All that needs to happen is that a server presents a public cert on the initial client connection and the client decides whether or not to trust the server during the TLS handshake. This depends on details on the cert such as the CA and available ciphers they agree upon.
Once the TLS handshake is completed and both sides have the the symmetric keys then the server begins encrypting data and sending it out over the network for the client to decrypt and vice versa.
Can an azure VM that runs windows server 2016 encrypt network traffic? The answer is definitely Yes, or microsoft would be going quickly out of business.
The two endpoints don't necessarily have to trust each other. Its usually one-sided unless with the server needing to prove its trustworthy, unless there is client cert authentication too. All that needs to happen is that a server presents a public cert on the initial client connection and the client decides whether or not to trust the server during the TLS handshake. This depends on details on the cert such as the CA and available ciphers they agree upon.
Once the TLS handshake is completed and both sides have the the symmetric keys then the server begins encrypting data and sending it out over the network for the client to decrypt and vice versa.
Can an azure VM that runs windows server 2016 encrypt network traffic? The answer is definitely Yes, or microsoft would be going quickly out of business.
bytoki▲ 10Highly votedJune 10, 2021 03:24 am
Definitely this is the 2nd most BS question from Microsoft after that Powershell in CLI question
bytoki▲ 10Highly votedJune 10, 2021 03:24 am
Definitely this is the 2nd most BS question from Microsoft after that Powershell in CLI question
genti_81▲ 9Highly votedMarch 29, 2021 11:54 pm
Please read the article carefully. It is so annoying just to spit out the answer just because you misinterpret some terms wrong. and also do listen to those that has more experience and share facts not just what is in your mind. All of this are based on logic and facts. Do not just think. Share it! It says clearly if Win 10 and Win server 2016 can be encrypted or not.
Reading this article
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/require-encryption-when-accessing-sensitive-network-resources
It says on very first row that it neither of Win 10 and Win 2016 server have network package encrypted by default. I don't assume that it is correct answer on Box 3 but I know that someone will explain it way better than me. Don't be self-centered and stubborn. We all are here to learn. Share your knowledge please.
Reading this article
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/require-encryption-when-accessing-sensitive-network-resources
It says on very first row that it neither of Win 10 and Win 2016 server have network package encrypted by default. I don't assume that it is correct answer on Box 3 but I know that someone will explain it way better than me. Don't be self-centered and stubborn. We all are here to learn. Share your knowledge please.
wruberte▲ 7Highly votedMarch 09, 2021 06:56 pm
Up vote here on the 3rd item being ridiculously incorrect. A Windows VM can be configured to encrypt outbound data to internet. A simple example is TLS Communication with a URL endpoint by an app hosted on a VM.