210-260 · Question #44
Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto isakmp as command. What does the given output show?
The correct answer is A. IPSec Phase 1 is established between 10.10.10.2 and 10.1.1.5. Phase 1 of IPsec is used to establish a secure channel between the two peers that will be used for further data transmission. The ASAs will exchange secret keys, they authenticate each other and will negotiate about the IKE security policies. This is what happens in phase 1…
Question
Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto isakmp as command. What does the given output show?
Options
- AIPSec Phase 1 is established between 10.10.10.2 and 10.1.1.5
- BIPSec Phase 2 is established between 10.10.10.2 and 10.1.1.5
- CIPSec Phase 1 is down due to a QM_IDLE state
- DIPSEc Phase 2 is down due to a QM_IDLE state
How the community answered
(28 responses)- A82% (23)
- B4% (1)
- C4% (1)
- D11% (3)
Explanation
Phase 1 of IPsec is used to establish a secure channel between the two peers that will be used for further data transmission. The ASAs will exchange secret keys, they authenticate each other and will negotiate about the IKE security policies. This is what happens in phase 1: Authenticate and protect the identities of the IPsec peers. Negotiate a matching IKE policy between IPsec peers to protect the IKE exchange. Perform an authenticated Diffie-Hellman exchange to have matching shared secret keys. Setup a secure tunnel for IKE phase 2.
Topics
Community Discussion
No community discussion yet for this question.