Error in the Holiday training test.

Matt S

April 03, 2022 11:21

I can't find the name of the test now that I've taken it, but on the "Protect yourself over the holidays", episode, the first question says that you are at an airport on wifi and immediately connect to your company VPN, are you secure or not. 

The answer in the test is that yes, it is secure, but that isn't always true.  Many companies only send the LAN info across the VPN, but allow internet traffic to go out the local ISP instead of through the VPN.  If the owner of the wifi was malicious and routed the DNS of various websites like google or banking sites to their own site under HTTP, they could get passwords.  Or, if they were really tricky, route DNS of legitimate site to a similar enough URL that does have a certificate and is https that many people wouldn't notice.

So the correct answer to that question would be "it depends" or no, it's not.  It depends a lot on the VPN configuration of your organization and it's something people should be aware of and know what their organization's configuration is.

 

Matt

0

• 

  Christian Nostrom April 05, 2022 14:55

  Hello Matt,

  Thanks for your reply on the Protect Yourself Over The Holidays module.  Yes, it certainly does depend on how an organization sets up their VPN and we would hope that the Admin would take all of those scenarios into consideration.  I will send your information to our Courseware Team on your suggestion for that specific question.  Thanks so much for your input and we are always happy to hear comments on how to make our modules more effective.

  Thanks

  Christian

  0

  Comment actions Permalink
• 

  Matt S April 05, 2022 15:16

  My recomendation would be to add an answer "It depends on the VPN configuration", or something like that. :)

  0

  Comment actions Permalink
• 

  Trevor Wilson April 12, 2022 17:00

  Hey Matt,

  Thank you for the clarification!

  I will go ahead and append this to the request that Christian submitted.

  Thank you again!

  Trevor

  0

  Comment actions Permalink

Please sign in to leave a comment.