1 00:00:00,000 --> 00:00:03,784 [AUDIO LOGO] 2 00:00:03,784 --> 00:00:07,580 3 00:00:07,580 --> 00:00:10,860 Congratulations on completing another skill. 4 00:00:10,860 --> 00:00:14,730 Now it's time for a review in the form of a quiz. 5 00:00:14,730 --> 00:00:17,960 Let's jump in with our first question. 6 00:00:17,960 --> 00:00:20,890 If you enable area 0 authentication 7 00:00:20,890 --> 00:00:24,490 but do not provide a key for the virtual link, 8 00:00:24,490 --> 00:00:27,310 what will happen on IOS XE? 9 00:00:27,310 --> 00:00:32,740 10 00:00:32,740 --> 00:00:35,030 So one of our keys here, of course, 11 00:00:35,030 --> 00:00:38,470 is that we are, in fact, talking about IOS XE. 12 00:00:38,470 --> 00:00:40,040 Keep that in mind. 13 00:00:40,040 --> 00:00:41,770 And of course, the question is, what 14 00:00:41,770 --> 00:00:46,670 happens if we don't provide a key on the actual virtual link? 15 00:00:46,670 --> 00:00:48,710 So what are our choices here? 16 00:00:48,710 --> 00:00:51,370 Well, we have number one says, the virtual link 17 00:00:51,370 --> 00:00:55,750 will come up using default key 0. 18 00:00:55,750 --> 00:00:58,713 That actually sounds correct. 19 00:00:58,713 --> 00:01:00,130 Let's hold on to that for a minute 20 00:01:00,130 --> 00:01:01,670 and look at the other answers. 21 00:01:01,670 --> 00:01:04,000 Number two says, the virtual link 22 00:01:04,000 --> 00:01:07,720 will come up by using default key 1. 23 00:01:07,720 --> 00:01:10,300 Now, if you remember, when we were configuring this, 24 00:01:10,300 --> 00:01:12,400 we were using key 1. 25 00:01:12,400 --> 00:01:15,070 So there's not a default key 1. 26 00:01:15,070 --> 00:01:16,610 There's just the one we created. 27 00:01:16,610 --> 00:01:19,720 So that would make two an incorrect answer, because there 28 00:01:19,720 --> 00:01:21,460 is no default key 1. 29 00:01:21,460 --> 00:01:25,000 Answer number three says that the virtual link will come up 30 00:01:25,000 --> 00:01:27,230 without authentication. 31 00:01:27,230 --> 00:01:32,530 Now, if you remember, this is actually what IOS XR did. 32 00:01:32,530 --> 00:01:35,650 But we're talking about IOS XE. 33 00:01:35,650 --> 00:01:39,850 So this would be incorrect for IOS XE. 34 00:01:39,850 --> 00:01:44,210 Number four, the virtual link will not come up. 35 00:01:44,210 --> 00:01:47,410 By the way, this is the answer I would prefer. 36 00:01:47,410 --> 00:01:50,800 I would actually prefer that the virtual link did not come up. 37 00:01:50,800 --> 00:01:54,500 Sadly, however, this is not the case. 38 00:01:54,500 --> 00:01:56,860 The virtual link in fact will come up. 39 00:01:56,860 --> 00:02:03,340 And as answer one says, it will come up using a default key 0. 40 00:02:03,340 --> 00:02:08,919 So in this case, that makes answer one the correct answer. 41 00:02:08,919 --> 00:02:11,920 Next question, if you configure OSPF 42 00:02:11,920 --> 00:02:15,550 timers using the following command, what will 43 00:02:15,550 --> 00:02:17,620 be the resulting Hello timer? 44 00:02:17,620 --> 00:02:23,770 ip ospf dead-interval minimal hello-multiplier 4. 45 00:02:23,770 --> 00:02:29,230 46 00:02:29,230 --> 00:02:31,090 So this is fairly straightforward 47 00:02:31,090 --> 00:02:33,390 if we remember what these things do. 48 00:02:33,390 --> 00:02:38,500 Minimal simply means that it will be 1 second. 49 00:02:38,500 --> 00:02:40,860 But remember that the minimal here is 50 00:02:40,860 --> 00:02:42,930 referring to the dead-interval. 51 00:02:42,930 --> 00:02:45,990 You then set the Hello multiplier. 52 00:02:45,990 --> 00:02:48,773 And in this case, we're setting it to 4. 53 00:02:48,773 --> 00:02:50,190 This simply means that we're going 54 00:02:50,190 --> 00:02:54,120 to send four times Hellos, because again, this 55 00:02:54,120 --> 00:02:58,780 is going with the Hellos, per every dead interval. 56 00:02:58,780 --> 00:03:02,850 So if we're going to send four Hellos in 1 second 57 00:03:02,850 --> 00:03:07,800 and 1 second, of course, is 1,000 milliseconds, 58 00:03:07,800 --> 00:03:09,960 we divide this by 4. 59 00:03:09,960 --> 00:03:13,920 This is going to be 250 milliseconds. 60 00:03:13,920 --> 00:03:16,530 Therefore, our correct answer is going 61 00:03:16,530 --> 00:03:19,620 to be three, 250 milliseconds. 62 00:03:19,620 --> 00:03:24,830 No need to go down the list here since it's just math. 63 00:03:24,830 --> 00:03:27,620 Final question, which of the following 64 00:03:27,620 --> 00:03:32,570 is provided using OSPF MD5 authentication? 65 00:03:32,570 --> 00:03:37,782 66 00:03:37,782 --> 00:03:39,240 Now, of course, the big key to this 67 00:03:39,240 --> 00:03:41,490 is to remember that the MD5 is-- 68 00:03:41,490 --> 00:03:43,960 well, it's providing authentication. 69 00:03:43,960 --> 00:03:45,750 So let's go down our list. 70 00:03:45,750 --> 00:03:49,440 Does authentication provide data integrity? 71 00:03:49,440 --> 00:03:50,850 That would generally be something 72 00:03:50,850 --> 00:03:54,090 like a hash, something like that would verify 73 00:03:54,090 --> 00:03:55,840 the data has not been changed. 74 00:03:55,840 --> 00:03:58,730 And the answer is no, it does not. 75 00:03:58,730 --> 00:04:01,500 Does it provide LSA validation? 76 00:04:01,500 --> 00:04:03,060 Not directly. 77 00:04:03,060 --> 00:04:05,100 You could possibly make an argument 78 00:04:05,100 --> 00:04:07,470 that two could be correct just simply 79 00:04:07,470 --> 00:04:11,340 because I won't take an LSA from a nonvalid neighbor. 80 00:04:11,340 --> 00:04:15,670 But it's certainly not doing LSA validation itself. 81 00:04:15,670 --> 00:04:18,000 And we sort of just gave away number three 82 00:04:18,000 --> 00:04:21,240 that what it does do is neighbor validation. 83 00:04:21,240 --> 00:04:24,720 It makes sure that you will only neighbor up with the routers 84 00:04:24,720 --> 00:04:26,760 that you intend to neighbor up with. 85 00:04:26,760 --> 00:04:30,150 Does it give data privacy, which would probably normally 86 00:04:30,150 --> 00:04:32,190 be referred to as encryption? 87 00:04:32,190 --> 00:04:38,190 And the answer is no, not in OSPF using MD5 authentication. 88 00:04:38,190 --> 00:04:41,910 We do not get encryption or data privacy. 89 00:04:41,910 --> 00:04:46,000 And nothing about this gives us compression. 90 00:04:46,000 --> 00:04:50,580 So number five, LSA compression, no, this just isn't something 91 00:04:50,580 --> 00:04:51,580 that we provide. 92 00:04:51,580 --> 00:04:53,850 So this means that our answer for this question 93 00:04:53,850 --> 00:04:56,370 is number three. 94 00:04:56,370 --> 00:04:58,510 So that concludes this quiz. 95 00:04:58,510 --> 00:05:01,140 If you feel you were missing any of the information needed 96 00:05:01,140 --> 00:05:03,010 to answer any of these questions, 97 00:05:03,010 --> 00:05:04,860 I would encourage you to go back and review 98 00:05:04,860 --> 00:05:08,200 the sources referenced on the bottom of each question. 99 00:05:08,200 --> 00:05:11,850 Otherwise, congratulations on completing Authentication, 100 00:05:11,850 --> 00:05:14,280 Virtual Links, and Optimization. 101 00:05:14,280 --> 00:05:16,500 I hope this has been informative for you, 102 00:05:16,500 --> 00:05:19,550 and I'd like to thank you for viewing. 103 00:05:19,550 --> 00:05:22,000