Fortinet
NSE4_FGT-6.4 · Question #20
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)
The correct answer is A. Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel. C. A phase 1 SA is bidirectional, while a phase 2 SA is directional. D. Phase 2 SA expiration can be time-based, volume-based, or both. See the full explanation below for the reasoning.
Question
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)
Options
- APhase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
- BAn SA never expires.
- CA phase 1 SA is bidirectional, while a phase 2 SA is directional.
- DPhase 2 SA expiration can be time-based, volume-based, or both.
- EBoth the phase 1 SA and phase 2 SA are bidirectional.
How the community answered
(41 responses)- A76% (31)
- B17% (7)
- E7% (3)
Community Discussion
No community discussion yet for this question.