200-301 · Question #1696
Which fact must the engineer consider when implementing IPsec on a new network?
The correct answer is A. The tunnel secures the entire packet and transport only safeguards the payload.. IPsec Tunnel Mode: In tunnel mode, the entire original IP packet (including the header and payload) is encapsulated and encrypted. This mode is typically used for site-to-site VPNs, where the traffic between two networks needs to be fully secured. IPsec Transport Mode: In transpo
Question
Which fact must the engineer consider when implementing IPsec on a new network?
Options
- AThe tunnel secures the entire packet and transport only safeguards the payload.
- BThe AH and ESP operate on top of the TCP protocol and use ports 50 and 51 respectively.
- CIPsec tunnel mode has lower overhead than transport mode.
- DThe AH is used only in combination with ESP.
How the community answered
(16 responses)- A94% (15)
- B6% (1)
Explanation
IPsec Tunnel Mode: In tunnel mode, the entire original IP packet (including the header and payload) is encapsulated and encrypted. This mode is typically used for site-to-site VPNs, where the traffic between two networks needs to be fully secured. IPsec Transport Mode: In transport mode, only the payload of the IP packet is encrypted, while the original IP header is left intact. This mode is often used for end-to-end communication between two devices, such as in host-to-host scenarios.
Topics
Community Discussion
No community discussion yet for this question.