nerdexam
(ISC)2

SSCP · Question #578

What is NOT true with pre shared key authentication within IKE / IPsec protocol?

The correct answer is B. Needs a Public Key Infrastructure (PKI) to work. Pre-shared key (PSK) authentication does NOT require a Public Key Infrastructure (PKI). PSK relies on a shared secret (simple password or passphrase) configured manually on both endpoints. PKI is required for certificate-based authentication, which is a separate and distinct…

Submitted by yuriko_h· Apr 18, 2026Network and Communications Security

Question

What is NOT true with pre shared key authentication within IKE / IPsec protocol?

Options

  • APre shared key authentication is normally based on simple passwords
  • BNeeds a Public Key Infrastructure (PKI) to work
  • CIKE is used to setup Security Associations
  • DIKE builds upon the Oakley protocol and the ISAKMP protocol.

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    92% (23)
  • D
    4% (1)

Explanation

Pre-shared key (PSK) authentication does NOT require a Public Key Infrastructure (PKI). PSK relies on a shared secret (simple password or passphrase) configured manually on both endpoints. PKI is required for certificate-based authentication, which is a separate and distinct IKE authentication method. The other statements are all true: PSK is based on simple passwords/passphrases (A), IKE does set up Security Associations (C), and IKE is indeed built upon the Oakley key determination protocol and ISAKMP (D).

Topics

#IPsec#IKE#Pre-shared Key#Authentication

Community Discussion

No community discussion yet for this question.

Full SSCP Practice