Which of the following protocols uses the Internet key Exchange (IKE) protocol to set up security associations (SA)? (ISC)2 CISSP-ISSAP Exam

The correct answer is D. ISAKMP. ISAKMP (Internet Security Association and Key Management Protocol) is the framework specifically designed to establish, negotiate, and manage Security Associations, and it uses IKE as its key exchange mechanism to do so - making D correct. While IPSec (A) relies on the…

Infrastructure Security

Question

Options

AIPSec
BL2TP
CLEAP
DISAKMP

How the community answered

(70 responses)

A
4% (3)
B
1% (1)
C
1% (1)
D
93% (65)

Explanation

ISAKMP (Internet Security Association and Key Management Protocol) is the framework specifically designed to establish, negotiate, and manage Security Associations, and it uses IKE as its key exchange mechanism to do so - making D correct. While IPSec (A) relies on the ISAKMP/IKE combination for its SA setup, IPSec is the broader VPN protocol suite rather than the protocol that directly invokes IKE; L2TP (B) is a tunneling protocol that pairs with IPSec but handles its own SA establishment differently and does not natively use IKE; LEAP (C) is a Cisco-proprietary wireless authentication protocol entirely unrelated to IKE or SA negotiation.

Memory tip: Think of the acronym layering - ISAKMP is the manager that calls on IKE to do the key exchange work; IPSec is the tenant that moves in after ISAKMP/IKE prepare the secured "room" (SA). If you remember "ISAKMP manages, IKE exchanges," the relationship locks in.

Topics

#ISAKMP#IKE#Security Associations#Key Management

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice