H12-725_V4.0 · Question #11
Which of the following is not a functional feature of AH?
The correct answer is D. Data encryption. Authentication Header (AH) is designed for authentication and integrity - not confidentiality. Data encryption (D) is provided by ESP (Encapsulating Security Payload), AH's IPsec sibling. AH explicitly lacks encryption because its purpose is to authenticate packets, not hide…
Question
Which of the following is not a functional feature of AH?
Options
- AIntegrity check
- BAnti-replay
- CData source verification
- DData encryption
How the community answered
(30 responses)- A17% (5)
- B10% (3)
- C3% (1)
- D70% (21)
Explanation
Authentication Header (AH) is designed for authentication and integrity - not confidentiality. Data encryption (D) is provided by ESP (Encapsulating Security Payload), AH's IPsec sibling. AH explicitly lacks encryption because its purpose is to authenticate packets, not hide their contents.
The distractors are all genuine AH features: integrity check (A) ensures packets haven't been tampered with in transit using a hash (HMAC); anti-replay (B) uses a sequence number field to reject duplicate or delayed packets; and data source verification (C) confirms the packet genuinely came from the claimed sender via shared keys.
Memory tip: Think of AH as the "authentication-only" protocol - it covers the 3 A's: Authentication (source), Anti-replay, and hAsh (integrity). Whenever you see encryption, that's ESP, not AH.
Topics
Community Discussion
No community discussion yet for this question.