Which of the following descriptions about OSPF packet authentication is incorrect?

Question

Options

• AOSPF message authentication will encrypt OSPF messages to ensure their security and confidentiality.
• BThe router supports two OSPF packet authentication methods: interface authentication and area authentication. When both authentication methods exist, the interface authentication method takes precedence.
• CIn OSPF interface authentication mode, the authentication mode and password of the directly connected interface of the adjacent router must be consistent.
• DAfter OSPF enables packet authentication, only OSPF packets that pass authentication can be received.

• A
  78% (14)
• B
  6% (1)
• C
  6% (1)
• D
  11% (2)

Explanation

Option A is incorrect because OSPF authentication does not encrypt OSPF messages - it only verifies the identity of the sender using methods like plaintext passwords or MD5 hashing. Authentication ensures integrity and trustworthiness, not confidentiality; the packet contents remain readable in transit.

Options B, C, and D are all accurate: interface-level authentication correctly overrides area-level authentication when both are configured (B); neighboring routers must agree on both the authentication type and the key/password to form an adjacency (C); and any OSPF packet that fails authentication is silently dropped, preventing rogue routers from participating (D).

Memory tip: Think of authentication as a bouncer checking IDs - it controls who gets in, but doesn't put anyone in a private room. Encryption is the private room. OSPF authentication is the bouncer only; if you need the private room (confidentiality), you need a separate mechanism like IPsec.

No community discussion yet for this question.