How many messages does Internet Key Exchange (IKE) use to negotiate SA characteristics when running in aggressive mode?

The correct answer is A. 3 messages. The Aggressive Mode is an exchange in the first phase of IKE/ISAKMP (The ISAKMP Aggressive Exchange) is like the Main Mode, but some messages are embedded to the others. The first message proposes the policy, and passes data for key-exchange, the nonce and some information for…

Network Security

Question

Options

A3 messages
B4 messages
C5 messages
D2 messages
E6 messages

How the community answered

(28 responses)

A
79% (22)
C
4% (1)
D
7% (2)
E
11% (3)

Explanation

The Aggressive Mode is an exchange in the first phase of IKE/ISAKMP (The ISAKMP Aggressive Exchange) is like the Main Mode, but some messages are embedded to the others. The first message proposes the policy, and passes data for key-exchange, the nonce and some information for identification. The second message is a response which authenticates the responder and concludes the policy and key-exchange. At this point all the information for encryption key for the ISAKMP SA is exchanged and last the message could be encrypted, but doesn't have to be. The last message is used for authenticating the initiator and provides a proof of participation in the exchange. The identity of the responder could not be protected, but by encrypting the last message the identity of the initiator is protected.

Topics

#IKE#aggressive mode#IPsec#SA negotiation

Community Discussion

No community discussion yet for this question.

Full 350-029 Practice