nerdexam
GIAC

GSEC · Question #167

Which of the following statements about IPSec are true? Each correct answer represents a complete solution. Choose two.

The correct answer is B. It uses Authentication Header (AH) for data integrity. D. It uses Encapsulating Security Payload (ESP) for data confidentiality. IPSec uses AH for data integrity verification and ESP for data confidentiality through encryption, which are its two core security protocols.

Defense in Depth and Protocols

Question

Which of the following statements about IPSec are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt uses Internet Protocol (IP) for data integrity.
  • BIt uses Authentication Header (AH) for data integrity.
  • CIt uses Password Authentication Protocol (PAP) for user authentication.
  • DIt uses Encapsulating Security Payload (ESP) for data confidentiality.

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    72% (26)
  • C
    19% (7)

Why each option

IPSec uses AH for data integrity verification and ESP for data confidentiality through encryption, which are its two core security protocols.

AIt uses Internet Protocol (IP) for data integrity.

The Internet Protocol (IP) itself is a connectionless Layer 3 routing protocol that provides no built-in security or integrity mechanisms - IPSec was specifically created to compensate for this gap.

BIt uses Authentication Header (AH) for data integrity.Correct

The Authentication Header (AH) protocol provides connectionless integrity and data origin authentication for IP packets by computing a hash over the packet contents, ensuring the data has not been altered in transit.

CIt uses Password Authentication Protocol (PAP) for user authentication.

PAP (Password Authentication Protocol) is a PPP-layer authentication protocol used in legacy dial-up connections and is not part of the IPSec protocol suite.

DIt uses Encapsulating Security Payload (ESP) for data confidentiality.Correct

The Encapsulating Security Payload (ESP) protocol provides confidentiality by encrypting the IP packet payload using symmetric ciphers such as AES, and can optionally also provide integrity and authentication for the encrypted data.

Concept tested: IPSec Authentication Header and ESP protocol roles

Source: https://www.rfc-editor.org/rfc/rfc4301

Topics

#IPSec#AH#ESP#data integrity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSEC Practice