Huawei
H12-891_V1.0 · Question #305
IPsec SA (Security Association, Security Association) has two generation methods, namely manual method and IKE automatic negotiation method. Which of the following descriptions of these two methods…
The correct answer is A. Both manual and IKE-established SAs support dynamic refresh. See the full explanation below for the reasoning.
QoS and Network Security
Question
IPsec SA (Security Association, Security Association) has two generation methods, namely manual method and IKE automatic negotiation method. Which of the following descriptions of these two methods is wrong?
Options
- ABoth manual and IKE-established SAs support dynamic refresh.
- BThe lifetime of an SA established in IKE mode is controlled by the lifetime parameters configured
- CIn manual mode, all parameters required to establish SA, including encryption/verification keys,
- DIn IKE mode, the encryption/verification key required to establish SA is generated through the DH
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C12% (3)
- D4% (1)
Topics
#IPsec#IKE#Security Association#key management
Community Discussion
No community discussion yet for this question.