nerdexam
(ISC)2

CISSP-ISSAP · Question #14

The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the…

The correct answer is C. IPcomp. IPcomp (IP Payload Compression Protocol) is correct because it is specifically designed to compress IP datagrams before they are encrypted and transmitted, reducing packet size and improving throughput on slow or congested links - all without data loss (it uses lossless…

Infrastructure Security

Question

The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the following components reduces the size of data transmitted over congested network connections and increases the speed of such networks without losing data?

Options

  • AAH
  • BESP
  • CIPcomp
  • DIKE

How the community answered

(60 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    90% (54)
  • D
    7% (4)

Explanation

IPcomp (IP Payload Compression Protocol) is correct because it is specifically designed to compress IP datagrams before they are encrypted and transmitted, reducing packet size and improving throughput on slow or congested links - all without data loss (it uses lossless compression algorithms like DEFLATE).

AH (Authentication Header) is wrong because it provides data integrity and source authentication only - it adds a header for verification but does not compress or encrypt data.

ESP (Encapsulating Security Payload) is wrong because its role is encryption and integrity protection; it actually increases packet size by adding headers and trailers, not reduces it.

IKE (Internet Key Exchange) is wrong because it is the key management protocol used to negotiate and establish Security Associations (SAs) between peers - it handles key exchange, not data transmission optimization.

Memory tip: Think of IPcomp as "IP compress" - the "comp" directly signals its purpose. If a question mentions reducing size, congestion, or speed without data loss in an IPSec context, "comp = compress" points straight to the answer.

Topics

#IPcomp#IPSec components#data compression#network efficiency

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice