Which two statements are correct about IPsec security associations? (Choose two.)

The correct answer is B. IPsec security associations are unidirectional. D. IPsec security associations are established during IKE Phase 2 negotiations. A security association (SA) is a unidirectional agreement between the VPN participants regarding the methods and parameters to use in securing a communication channel. Full bidirectional communication requires at least two SAs, one for each direction. An IPsec tunnel consists…

IPsec VPNs

Question

Options

AIPsec security associations are bidirectional.
BIPsec security associations are unidirectional.
CIPsec security associations are established during IKE Phase 1 negotiations.
DIPsec security associations are established during IKE Phase 2 negotiations.

How the community answered

(14 responses)

A
14% (2)
B
79% (11)
C
7% (1)

Explanation

A security association (SA) is a unidirectional agreement between the VPN participants regarding the methods and parameters to use in securing a communication channel. Full bidirectional communication requires at least two SAs, one for each direction. An IPsec tunnel consists of a pair of unidirectional SAs-one SA for each direction of the tunnel- that specify the security parameter index (SPI), destination IP address, and security protocol (Authentication Header [AH] or Encapsulating Security Payload [ESP] employed. ipsec-basics.html

Topics

#IPsec security associations#unidirectional SA#IKE Phase 2#SA establishment

Community Discussion

No community discussion yet for this question.

Full JN0-231 Practice