Which of the following is not a method of IKE verifying remote peers?

Question

Options

• ADigital certificate authentication
• BAD certification
• CPre-shared key authentication
• DDigital Envelope Authentication

• A
  16% (9)
• B
  72% (41)
• C
  9% (5)
• D
  4% (2)

Explanation

"AD certification" is not a recognized IKE peer authentication method. IKE (Internet Key Exchange) has three standard mechanisms for verifying remote peers, and Active Directory certification is not one of them - it's a fabricated distractor that conflates Microsoft's AD Certificate Services with an actual IKE authentication mode.

Why the distractors are wrong (i.e., they ARE valid IKE methods):

• A (Digital certificate authentication): Valid - IKE uses X.509 digital certificates for mutual authentication, relying on a PKI infrastructure.
• C (Pre-shared key authentication): Valid - PSKs are the simplest IKE method; both peers are configured with an identical secret key in advance.
• D (Digital Envelope Authentication): Valid - Used in IKEv1's Public Key Encryption mode, it encrypts identity information asymmetrically to authenticate peers.

Memory tip: Remember the three real IKE methods as "CPD" - Certificates, Pre-shared keys, Digital Envelope. Anything that sounds like a Microsoft product name (like "AD") on an IKE authentication question is a red flag - IKE is a standards-based protocol independent of any vendor's directory services.

No community discussion yet for this question.