NSE4_FGT-7.0 · Question #53
Which statement about the IP authentication header (AH) used by IPsec is true?
The correct answer is C. AH provides data integrity bur no encryption. The question asks for a true statement about the capabilities of the IP Authentication Header (AH) protocol used within IPsec.
Question
Which statement about the IP authentication header (AH) used by IPsec is true?
Options
- AAH does not provide any data integrity or encryption.
- BAH does not support perfect forward secrecy.
- CAH provides data integrity bur no encryption.
- DAH provides strong data integrity but weak encryption.
How the community answered
(30 responses)- A3% (1)
- C93% (28)
- D3% (1)
Why each option
The question asks for a true statement about the capabilities of the IP Authentication Header (AH) protocol used within IPsec.
AH explicitly provides data integrity and data origin authentication, making the statement that it provides none incorrect.
Perfect Forward Secrecy (PFS) is a property of the key exchange process (e.g., IKE) used with IPsec, not a direct function of the AH protocol itself, which handles packet authentication.
The IP Authentication Header (AH) protocol in IPsec is designed to provide connectionless data integrity, data origin authentication, and anti-replay services for IP packets, but it explicitly does not offer any confidentiality through encryption.
AH provides strong data integrity and authentication, but it offers no encryption whatsoever, not weak encryption.
Concept tested: IPsec Authentication Header (AH) features
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/ipsec/ipsec-security-architecture
Topics
Community Discussion
No community discussion yet for this question.