IPSec VPN ensures the safe transmission of user business data on the Internet through which of the following aspects? (Multiple choice)

Question

Options

• AThe receiver verifies whether the identity of the sender is legitimate
• BData is transmitted over the Internet in the form of ciphertext
• CReceiver rejects old or duplicate packets
• DThe receiver verifies the received data

• A
  100% (41)

Explanation

All four options are correct because IPSec VPN is a comprehensive security framework that addresses four distinct attack surfaces simultaneously. A is correct because IPSec uses authentication mechanisms (via AH or ESP with HMAC) to verify the sender's identity, preventing impersonation attacks. B is correct because ESP (Encapsulating Security Payload) encrypts the payload so data traverses the Internet as ciphertext, protecting against eavesdropping. C is correct because IPSec embeds sequence numbers in each packet and the receiver uses a sliding window to reject any packet that arrives out of order or is a duplicate, neutralizing replay attacks. D is correct because IPSec computes an integrity check value (ICV) using HMAC over the packet data, allowing the receiver to detect any tampering in transit.

Memory tip: Use the acronym AICE - Authentication, Integrity, Confidentiality (encryption), and Exclusion of replays - to recall the four pillars IPSec provides. On exams, if a question lists all four of these security properties as options, all of them are correct because IPSec was specifically designed to solve all four problems at once.

No community discussion yet for this question.