312-50V11 · Question #940
Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite provides different functionality. Collective IPsec does everything except.
The correct answer is C. Work at the Data Link Layer. IPsec is a Network Layer (Layer 3) protocol suite that provides encryption, authentication, and header/payload protection, but it does not operate at the Data Link Layer (Layer 2).
Question
Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite provides different functionality. Collective IPsec does everything except.
Options
- AProtect the payload and the headers
- BEncrypt
- CWork at the Data Link Layer
- DAuthenticate
How the community answered
(23 responses)- B9% (2)
- C87% (20)
- D4% (1)
Why each option
IPsec is a Network Layer (Layer 3) protocol suite that provides encryption, authentication, and header/payload protection, but it does not operate at the Data Link Layer (Layer 2).
IPsec can protect both payload and headers - AH protects the entire packet including headers, while ESP protects the payload, so this is a valid IPsec function.
IPsec does provide encryption through the ESP (Encapsulating Security Payload) protocol, making this a valid capability of the suite.
IPsec operates at Layer 3 of the OSI model, not the Data Link Layer (Layer 2). It uses protocols like AH (Authentication Header) and ESP (Encapsulating Security Payload) to secure IP packets at the network layer, making Layer 2 operation outside its scope and design purpose.
IPsec provides authentication through the AH (Authentication Header) protocol and IKE (Internet Key Exchange), so authentication is a core IPsec function.
Concept tested: IPsec protocol suite OSI layer operation
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security
Topics
Community Discussion
No community discussion yet for this question.