ExamGecko
Question list
Search
Search

Question 486 - 156-315.81 discussion

Report
Export

Main Mode in IKEv1 uses how many packages for negotiation?

A.
4
Answers
A.
4
B.
depends on the make of the peer gateway
Answers
B.
depends on the make of the peer gateway
C.
3
Answers
C.
3
D.
6
Answers
D.
6
Suggested answer: D

Explanation:

Main Mode in IKEv1 usessix packetsfor negotiation1. Main Mode is the default mode for IKE phase I, which establishes a secure channel between the peers.Main Mode performs the following steps2:

The peers exchange their security policies and agree on a common set of parameters.

The peers generate a shared secret key using the Diffie-Hellman algorithm.

The peers authenticate each other using pre-shared keys, digital signatures, or public key encryption. Main Mode is partially encrypted, from the point at which the shared DH key is known to both peers2.Main Mode provides more security than Aggressive Mode, which uses only three packets for negotiation, but is faster and simpler2.

Reference:Check Point gateways always send main IP address as IKE Main Mode ID - Check Point Software,IPsec and IKE - Check Point Software

asked 16/09/2024
Pamela Joanne Ang
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first