US Garments wants all encrypted data communication between corporate office and remote location. They want to achieve following results:

l Authentication of users l Anti-replay l Anti-spoofing l IP packet encryption They implemented IPSec using Authentication Headers (AHs). Which results does this solution provide? Each correct answer represents a complete solution. Choose all that apply.

Question

US Garments wants all encrypted data communication between corporate office and remote location. They want to achieve following results:

l Authentication of users l Anti-replay l Anti-spoofing l IP packet encryption They implemented IPSec using Authentication Headers (AHs). Which results does this solution provide? Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

A. Anti-replay AH includes a sequence number field in its header that allows the receiver to detect and discard duplicate or out-of-order packets, directly providing anti-replay protection as defined in RFC 4302. D. Anti-spoofing AH applies an HMAC over the IP packet including source address fields, cryptographically binding the packet to its claimed origin and preventing address spoofing by an unauthenticated third party.

Answer

B. IP packet encryption IP packet payload encryption is exclusively provided by IPSec ESP (Encapsulating Security Payload) - AH performs no encryption and leaves the payload in plaintext.

Answer

C. Authentication of users AH authenticates the IP packet at the network layer using machine credentials or pre-shared keys, not user-level credentials, so user authentication is handled by IKE or an external AAA system rather than AH itself.

US Garments wants all encrypted data communication between corporate office and remote location. They want to achieve following results: l Authentication of users l Anti-replay l Anti-spoofing l IP…

Question

Options

How the community answered

Why each option

Topics

Community Discussion