156-215.80 · Question #457
Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.
The correct answer is A. Main. IKE Phase 1 establishes a secure authenticated channel and operates in Main mode (or optionally Aggressive mode), with Main mode being the standard default.
Question
Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.
Options
- AMain
- BAuthentication
- CQuick
- DHigh Alert
How the community answered
(22 responses)- A91% (20)
- C5% (1)
- D5% (1)
Why each option
IKE Phase 1 establishes a secure authenticated channel and operates in Main mode (or optionally Aggressive mode), with Main mode being the standard default.
IKE Phase 1 in Main mode uses a six-message exchange to authenticate peers and establish the ISAKMP Security Association (SA), spreading identity information across multiple messages to protect peer identities. Main mode provides stronger identity protection compared to Aggressive mode, making it the standard Phase 1 operating mode referenced in IKE specifications and most vendor implementations.
Authentication is a function performed during Phase 1, not a named IKE operating mode; valid IKE Phase 1 modes are Main and Aggressive.
Quick mode is the operating mode used in IKE Phase 2, which negotiates the IPsec SAs for data encryption, not Phase 1.
'High Alert' is not an IKE negotiation mode; it has no definition within the IKE or IPsec protocol standards.
Concept tested: IKE Phase 1 Main mode negotiation
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14106-how-vpn-works.html
Topics
Community Discussion
No community discussion yet for this question.