Question 1

A value chosen by the responder to identify a unique IKE SA is a _________ .
A)Initiator SPI
B)Responder Cookie
C)Flag
D)Message ID

Accepted Answer

Responder Cookie is a value chosen by the responder to identify a unique IKE SA.

Question 2

IPsec provides security services at the ________ layer by enabling a system to select required security protocols,determine the algorithms to use for the services and put in place any cryptographic keys required to provide the requested services.

Accepted Answer

The answer of IPsec provides security services at the ________...

Question 3

Confidentiality is provided by an encryption format known as __________ .

Accepted Answer

The answer of Confidentiality is provided by an encryption format...

Question 4

A __________ attack is one in which an attacker obtains a copy of an authenticated packet and later transmits it to the intended destination.

Accepted Answer

The answer of A __________ attack is one in which...

Question 5

A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .

Accepted Answer

The answer of A security association is uniquely identified by...

Question 6

The means by which IP traffic is related to specific SAs is the _________ .
A)TRS
B)SPD
C)SAD
D)SPI

Accepted Answer

The Security Policy Database (SPD) is used to determine the processing of IP traffic and relates it to specific Security Associations (SAs).

Question 7

The __________ facility is concerned with the secure exchange of keys.

Accepted Answer

The answer of The __________ facility is concerned with the...

Question 8

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .
A)IAB
B)SPI
C)ESP
D)SPD

Accepted Answer

The Security Parameter Index (SPI) is used to identify a specific security association (SA) and is used by the key management mechanism to distribute keys to the appropriate SA.

Question 9

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.
A)SAD
B)SPD
C)SA
D)SPI

Accepted Answer

SA stands for Security Association, which is a one way relationship between a sender and receiver that provides security services to the traffic carried on it. SAD (Security Association Database) and SPD (Security Policy Database) are related to SA, but do not specifically describe the one way relationship between sender and receiver. SPI (Security Parameter Index) is a value that is used to identify a specific SA, but does not describe the relationship itself. Therefore, the best choice is C.

Question 10

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.
A)SPI
B)ESP
C)ISA
D)IPsec

Accepted Answer

The answer of _________ consists of an encapsulating header and...

Question 11

The __________ payload contains either error or status information associated with this SA or this SA negotiation.
A)Encrypted
B)Notify
C)Configuration
D)Nonce

Accepted Answer

The Notify payload contains error or status information associated with the security association (SA) or its negotiation. The Encrypted and Nonce payloads do not contain such information, while the Configuration payload is used for setting up the parameters of the SA.

Question 12

IPsec encompasses three functional areas: authentication,key management,and __________ .

Accepted Answer

The answer of IPsec encompasses three functional areas: authentication,key management,and...

Question 13

IKE key determination employs __________ to ensure against replay attacks.
A)cookies
B)groups
C)flags
D)nonces

Accepted Answer

The answer of IKE key determination employs __________ to ensure...

Question 14

IPsec policy is determined primarily by the interaction of two databases: The security policy database and the __________ .

Accepted Answer

The answer of IPsec policy is determined primarily by the...

Question 15

The _________ payload allows peers to identify packet flows for processing by IPsec services.
A)Configuration
B)Vendor ID
C)Traffic Selector
D)Extensible Authentication Protocol

Accepted Answer

The answer of The _________ payload allows peers to identify...

Question 16

_________ identifies the type of data contained in the payload data field by identifying the first header in that payload.
A)Security Parameters Index
B)Next Header
C)Sequence Header
D)Payload Data

Accepted Answer

The answer of _________ identifies the type of data contained...

Question 17

_________ can be used to provide confidentiality,data origin authentication, connectionless integrity,an anti-replay service,and traffic flow confidentiality.

Accepted Answer

The answer of _________ can be used to provide confidentiality,data...

Question 18

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

Accepted Answer

The answer of _________ mode is used when one or...

Question 19

Authentication makes use of the _________ message authentication code.

Accepted Answer

The answer of Authentication makes use of the _________ message...

Question 20

The selectors that determine a Security Policy Database are: Name,Local and Remote Ports,Next Layer Protocol,Remote IP Address,and _________ .

Accepted Answer

The answer of The selectors that determine a Security Policy...

Quiz 20: Ip Security

A value chosen by the responder to identify a unique IKE SA is a _________ .

IPsec provides security services at the ________ layer by enabling a system to select required security protocols,determine the algorithms to use for the services and put in place any cryptographic keys required to provide the requested services.

Confidentiality is provided by an encryption format known as __________ .

A __________ attack is one in which an attacker obtains a copy of an authenticated packet and later transmits it to the intended destination.

A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .

The means by which IP traffic is related to specific SAs is the _________ .

The __________ facility is concerned with the secure exchange of keys.

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.

The __________ payload contains either error or status information associated with this SA or this SA negotiation.

IPsec encompasses three functional areas: authentication,key management,and __________ .

IKE key determination employs __________ to ensure against replay attacks.

IPsec policy is determined primarily by the interaction of two databases: The security policy database and the __________ .

The _________ payload allows peers to identify packet flows for processing by IPsec services.

_________ identifies the type of data contained in the payload data field by identifying the first header in that payload.

_________ can be used to provide confidentiality,data origin authentication, connectionless integrity,an anti-replay service,and traffic flow confidentiality.

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

Authentication makes use of the _________ message authentication code.

The selectors that determine a Security Policy Database are: Name,Local and Remote Ports,Next Layer Protocol,Remote IP Address,and _________ .