ExamGecko
Question list
Search
Search

Related questions











Question 49 - 212-81 discussion

Report
Export

In IPSec, if the VPN is a gateway-gateway or a host-gateway, then which one of the following is true?

A.
IPSec does not involve gateways
Answers
A.
IPSec does not involve gateways
B.
Only transport mode can be used
Answers
B.
Only transport mode can be used
C.
Encapsulating Security Payload (ESP) authentication must be used
Answers
C.
Encapsulating Security Payload (ESP) authentication must be used
D.
Only the tunnel mode can be used
Answers
D.
Only the tunnel mode can be used
Suggested answer: D

Explanation:

IPSec has two different modes: transport mode and tunnel mode.

Only the tunnel mode can be used

https://en.wikipedia.org/wiki/IPsec

In tunnel mode, the entire IP packet is encrypted and authenticated. It is then encapsulated into a new IP packet with a new IP header. Tunnel mode is used to create virtual private networks for network-to-network communications (e.g. between routers to link sites), host-to-network communications (e.g. remote user access) and host-to-host communications (e.g. private chat).

Incorrect answers:

Encapsulating Security Payload (ESP) authentication must be used. ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.

IPSec does not involve gateways. Wrong.

Only transport mode can be used. Transport mode, the default mode for IPSec, provides for end-to-end security. It can secure communications between a client and a server. When using the transport mode, only the IP payload is encrypted.

asked 18/09/2024
Anouar Ettahery
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first