nerdexam
GIAC

GSLC · Question #454

Which of the following statements about IPSec are true? Each correct answer represents a complete solution. Choose two.

The correct answer is B. It uses Authentication Header (AH) for data integrity. D. It uses Encapsulating Security Payload (ESP) for data confidentiality. IPSec relies on the Authentication Header (AH) for data integrity and the Encapsulating Security Payload (ESP) for data confidentiality, which are its two primary security protocols.

Security Architecture & Engineering

Question

Which of the following statements about IPSec are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt uses Internet Protocol (IP) for data integrity.
  • BIt uses Authentication Header (AH) for data integrity.
  • CIt uses Password Authentication Protocol (PAP) for user authentication.
  • DIt uses Encapsulating Security Payload (ESP) for data confidentiality.

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    91% (51)
  • C
    5% (3)

Why each option

IPSec relies on the Authentication Header (AH) for data integrity and the Encapsulating Security Payload (ESP) for data confidentiality, which are its two primary security protocols.

AIt uses Internet Protocol (IP) for data integrity.

The Internet Protocol (IP) itself is a connectionless routing protocol with no built-in security or integrity mechanisms - IPSec was created specifically to add these missing capabilities.

BIt uses Authentication Header (AH) for data integrity.Correct

The Authentication Header (AH) protocol provides data integrity and origin authentication in IPSec by cryptographically signing the IP header and payload, ensuring packets have not been altered in transit.

CIt uses Password Authentication Protocol (PAP) for user authentication.

Password Authentication Protocol (PAP) is a PPP link-layer protocol that transmits credentials in cleartext and is not part of the IPSec protocol suite.

DIt uses Encapsulating Security Payload (ESP) for data confidentiality.Correct

The Encapsulating Security Payload (ESP) protocol provides data confidentiality in IPSec by encrypting the packet payload, and can optionally also provide integrity and anti-replay protection.

Concept tested: IPSec AH and ESP protocol functions

Source: https://www.rfc-editor.org/rfc/rfc4301

Topics

#IPSec#Authentication Header#Encapsulating Security Payload#network security protocols

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSLC Practice