312-50V11 · Question #523
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?
The correct answer is C. ESP transport mode. ESP transport mode is the correct IPSec configuration when confidentiality is required between hosts on the same LAN, as it encrypts the payload while keeping original IP headers intact.
Question
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?
Options
- AAH Tunnel mode
- BAH promiscuous
- CESP transport mode
- DESP confidential
How the community answered
(25 responses)- C96% (24)
- D4% (1)
Why each option
ESP transport mode is the correct IPSec configuration when confidentiality is required between hosts on the same LAN, as it encrypts the payload while keeping original IP headers intact.
AH (Authentication Header) provides integrity and peer authentication but does not offer any data encryption or confidentiality, making it unsuitable when confidentiality is the priority.
'AH promiscuous' is not a valid IPSec mode - no such mode exists in the IPSec protocol suite.
ESP (Encapsulating Security Payload) provides confidentiality through encryption, along with authentication and integrity. Transport mode protects the payload between two communicating hosts on the same network without encapsulating a new IP header, making it the correct choice for intra-LAN host-to-host confidentiality. AH cannot provide this because it lacks encryption capability entirely.
'ESP confidential' is not a valid IPSec mode name - the correct term is ESP transport mode or ESP tunnel mode.
Concept tested: IPSec ESP transport mode for intra-LAN confidentiality
Source: https://datatracker.ietf.org/doc/html/rfc4303
Topics
Community Discussion
No community discussion yet for this question.