SY0-301 · Question #44
Configuring the mode, encryption methods, and security associations are part of which of the following?
The correct answer is A. IPSec. IPSec requires administrators to configure the operating mode, encryption and hashing algorithms, and security associations (SAs) that define how traffic is protected between endpoints.
Question
Configuring the mode, encryption methods, and security associations are part of which of the following?
Options
- AIPSec
- BFull disk encryption
- C802.1x
- DPKI
How the community answered
(24 responses)- A92% (22)
- B4% (1)
- D4% (1)
Why each option
IPSec requires administrators to configure the operating mode, encryption and hashing algorithms, and security associations (SAs) that define how traffic is protected between endpoints.
IPSec operates in either transport or tunnel mode and uses security associations to negotiate and store the agreed-upon parameters for a protected connection, including encryption algorithms such as AES and integrity algorithms such as SHA. Configuring these elements - mode, encryption methods, and SAs - is the fundamental setup task for any IPSec implementation.
Full disk encryption protects data at rest on a storage volume and does not involve modes, security associations, or negotiated encryption sessions.
802.1x is a network access control protocol for port-based authentication and does not use security associations or tunnel/transport modes.
PKI provides certificate-based identity infrastructure but is not itself configured with modes or security associations.
Concept tested: IPSec configuration - modes, encryption, and security associations
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/ipsec/ipsec-overview
Topics
Community Discussion
No community discussion yet for this question.