GSLC · Question #407
Which of the following protocols does IPsec use to perform various security functions in the network? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Internet Key Exchange B. Encapsulating Security Payload C. Authentication Header. IPsec uses Internet Key Exchange, Encapsulating Security Payload, and Authentication Header to provide key negotiation, encryption, and integrity protection respectively; SCCP is unrelated.
Question
Which of the following protocols does IPsec use to perform various security functions in the network? Each correct answer represents a complete solution. Choose all that apply.
Options
- AInternet Key Exchange
- BEncapsulating Security Payload
- CAuthentication Header
- DSkinny Client Control Protocol
How the community answered
(22 responses)- A86% (19)
- D14% (3)
Why each option
IPsec uses Internet Key Exchange, Encapsulating Security Payload, and Authentication Header to provide key negotiation, encryption, and integrity protection respectively; SCCP is unrelated.
Internet Key Exchange (IKE) is the protocol IPsec uses to negotiate, establish, and manage Security Associations (SAs) and cryptographic keys between peers.
Encapsulating Security Payload (ESP) provides confidentiality, data origin authentication, connectionless integrity, and optional anti-replay protection for IP packets.
Authentication Header (AH) provides connectionless data integrity, data origin authentication, and optional anti-replay protection but does not provide confidentiality.
Skinny Client Control Protocol (SCCP, also called Skinny) is a Cisco proprietary signaling protocol used for VoIP communication between Cisco Unified Communications Manager and IP phones, and is completely unrelated to IPsec.
Concept tested: IPsec protocol suite components - IKE, ESP, AH
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/ipsec-policy-design
Topics
Community Discussion
No community discussion yet for this question.