CISSP-ISSAP · Question #14
The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the…
The correct answer is C. IPcomp. IPcomp (IP Payload Compression Protocol) is correct because it is specifically designed to compress IP datagrams before they are encrypted and transmitted, reducing packet size and improving throughput on slow or congested links - all without data loss (it uses lossless…
Question
The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the following components reduces the size of data transmitted over congested network connections and increases the speed of such networks without losing data?
Options
- AAH
- BESP
- CIPcomp
- DIKE
How the community answered
(60 responses)- A2% (1)
- B2% (1)
- C90% (54)
- D7% (4)
Explanation
IPcomp (IP Payload Compression Protocol) is correct because it is specifically designed to compress IP datagrams before they are encrypted and transmitted, reducing packet size and improving throughput on slow or congested links - all without data loss (it uses lossless compression algorithms like DEFLATE).
AH (Authentication Header) is wrong because it provides data integrity and source authentication only - it adds a header for verification but does not compress or encrypt data.
ESP (Encapsulating Security Payload) is wrong because its role is encryption and integrity protection; it actually increases packet size by adding headers and trailers, not reduces it.
IKE (Internet Key Exchange) is wrong because it is the key management protocol used to negotiate and establish Security Associations (SAs) between peers - it handles key exchange, not data transmission optimization.
Memory tip: Think of IPcomp as "IP compress" - the "comp" directly signals its purpose. If a question mentions reducing size, congestion, or speed without data loss in an IPSec context, "comp = compress" points straight to the answer.
Topics
Community Discussion
No community discussion yet for this question.