SSCP · Question #576
In which phase of Internet Key Exchange (IKE) protocol is peer authentication performed?
The correct answer is B. Phase 1. IKE operates in two phases. Phase 1 establishes a secure, authenticated channel between the two peers - its primary goal is mutual peer authentication and the negotiation of the IKE SA (Security Association). Authentication can be done via pre-shared keys, digital certificates…
Question
Options
- APre Initialization Phase
- BPhase 1
- CPhase 2
- DNo peer authentication is performed
How the community answered
(33 responses)- A6% (2)
- B88% (29)
- C3% (1)
- D3% (1)
Explanation
IKE operates in two phases. Phase 1 establishes a secure, authenticated channel between the two peers - its primary goal is mutual peer authentication and the negotiation of the IKE SA (Security Association). Authentication can be done via pre-shared keys, digital certificates, or public key encryption. Phase 2 uses the secure channel established in Phase 1 to negotiate the IPsec SAs that protect the actual data traffic (defining encryption/integrity algorithms for the tunnel). There is no 'Pre Initialization Phase' in the IKE standard.
Topics
Community Discussion
No community discussion yet for this question.