200-301 · Question #1434
How does IPsec provide secure networking for applications within an organization?
The correct answer is C. It enables sets of security associations between peers.. IPsec provides secure networking by enabling sets of security associations (SAs) between peers, which define the security parameters for communication.
Question
Options
- AIt takes advantage of FTP to secure file transfers between nodes on the network.
- BIt provides GRE tunnels to transmit traffic securely between network nodes.
- CIt enables sets of security associations between peers.
- DIt leverages TFTP providing secure file transfers among peers on the network.
How the community answered
(27 responses)- A7% (2)
- B4% (1)
- C89% (24)
Why each option
IPsec provides secure networking by enabling sets of security associations (SAs) between peers, which define the security parameters for communication.
IPsec does not take advantage of FTP; FTP is an application-layer protocol for file transfer, and IPsec operates at the network layer to secure IP communications, independent of specific application protocols.
While IPsec can be used to secure GRE tunnels, GRE itself is a separate tunneling protocol, and IPsec provides the security mechanisms, not the GRE tunnels directly.
IPsec operates by establishing Security Associations (SAs) between communicating peers. Each SA is a simplex connection that defines the security parameters, including cryptographic algorithms, keys, and protocols (Authentication Header or Encapsulating Security Payload), necessary for secure communication, ensuring data confidentiality, integrity, and authenticity for applications.
IPsec does not leverage TFTP; TFTP is an insecure file transfer protocol that IPsec could protect, but it doesn't provide the security mechanisms itself.
Concept tested: IPsec security associations (SAs)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ipsec/configuration/15-2m/sec-ipsec-15-2m-book/sec-ipsec-concept.html
Topics
Community Discussion
No community discussion yet for this question.