nerdexam
Cisco

200-301 · Question #1434

How does IPsec provide secure networking for applications within an organization?

The correct answer is C. It enables sets of security associations between peers.. IPsec provides secure networking by enabling sets of security associations (SAs) between peers, which define the security parameters for communication.

Submitted by wei.xz· Mar 5, 2026

Question

How does IPsec provide secure networking for applications within an organization?

Options

  • AIt takes advantage of FTP to secure file transfers between nodes on the network.
  • BIt provides GRE tunnels to transmit traffic securely between network nodes.
  • CIt enables sets of security associations between peers.
  • DIt leverages TFTP providing secure file transfers among peers on the network.

How the community answered

(27 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    89% (24)

Why each option

IPsec provides secure networking by enabling sets of security associations (SAs) between peers, which define the security parameters for communication.

AIt takes advantage of FTP to secure file transfers between nodes on the network.

IPsec does not take advantage of FTP; FTP is an application-layer protocol for file transfer, and IPsec operates at the network layer to secure IP communications, independent of specific application protocols.

BIt provides GRE tunnels to transmit traffic securely between network nodes.

While IPsec can be used to secure GRE tunnels, GRE itself is a separate tunneling protocol, and IPsec provides the security mechanisms, not the GRE tunnels directly.

CIt enables sets of security associations between peers.Correct

IPsec operates by establishing Security Associations (SAs) between communicating peers. Each SA is a simplex connection that defines the security parameters, including cryptographic algorithms, keys, and protocols (Authentication Header or Encapsulating Security Payload), necessary for secure communication, ensuring data confidentiality, integrity, and authenticity for applications.

DIt leverages TFTP providing secure file transfers among peers on the network.

IPsec does not leverage TFTP; TFTP is an insecure file transfer protocol that IPsec could protect, but it doesn't provide the security mechanisms itself.

Concept tested: IPsec security associations (SAs)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ipsec/configuration/15-2m/sec-ipsec-15-2m-book/sec-ipsec-concept.html

Topics

#IPsec#Security Associations

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice