NSE4 · Question #456
Which of the following authentication methods are supported in an IPsec phase 1? (Choose two.)
The correct answer is C. RSA signature D. Pre-shared keys. IPsec Phase 1 authentication supports Pre-shared Keys (PSK) for symmetric key exchange and RSA signatures, which leverage digital certificates for asymmetric authentication.
Question
Which of the following authentication methods are supported in an IPsec phase 1? (Choose two.)
Options
- AAsymmetric Keys
- BCA root digital certificates
- CRSA signature
- DPre-shared keys
How the community answered
(50 responses)- A8% (4)
- B4% (2)
- C88% (44)
Why each option
IPsec Phase 1 authentication supports Pre-shared Keys (PSK) for symmetric key exchange and RSA signatures, which leverage digital certificates for asymmetric authentication.
While RSA signature authentication uses asymmetric key cryptography, 'Asymmetric Keys' is a broad cryptographic concept rather than a specific, named authentication method directly configured in IPsec Phase 1.
CA root digital certificates are essential for establishing the trust chain when using certificate-based authentication (like RSA signatures), but they are not the authentication *method* itself; they enable the trust in the peer's certificate.
RSA signature authentication is a method used in IPsec Phase 1 where peers authenticate by signing data with their private RSA key, verifiable by the other peer's public key obtained from a digital certificate.
Pre-shared keys (PSK) are a common and straightforward authentication method for IPsec Phase 1, requiring both communicating peers to be configured with the exact same secret key.
Concept tested: IPsec Phase 1 authentication methods
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/453198/ipsec-vpn
Topics
Community Discussion
No community discussion yet for this question.