SSCP · Question #578
What is NOT true with pre shared key authentication within IKE / IPsec protocol?
The correct answer is B. Needs a Public Key Infrastructure (PKI) to work. Pre-shared key (PSK) authentication does NOT require a Public Key Infrastructure (PKI). PSK relies on a shared secret (simple password or passphrase) configured manually on both endpoints. PKI is required for certificate-based authentication, which is a separate and distinct…
Question
What is NOT true with pre shared key authentication within IKE / IPsec protocol?
Options
- APre shared key authentication is normally based on simple passwords
- BNeeds a Public Key Infrastructure (PKI) to work
- CIKE is used to setup Security Associations
- DIKE builds upon the Oakley protocol and the ISAKMP protocol.
How the community answered
(25 responses)- A4% (1)
- B92% (23)
- D4% (1)
Explanation
Pre-shared key (PSK) authentication does NOT require a Public Key Infrastructure (PKI). PSK relies on a shared secret (simple password or passphrase) configured manually on both endpoints. PKI is required for certificate-based authentication, which is a separate and distinct IKE authentication method. The other statements are all true: PSK is based on simple passwords/passphrases (A), IKE does set up Security Associations (C), and IKE is indeed built upon the Oakley key determination protocol and ISAKMP (D).
Topics
Community Discussion
No community discussion yet for this question.