Question 1

_________ can be used to provide access control, confidentiality, data origin
authentication, connectionless integrity, rejection of replayed packets, and limited traffic flow confidentiality.

Accepted Answer

The answer of _________ can be used to provide access...

Question 2

A value chosen by the responder to identify a unique IKE SA is a _________ .

Accepted Answer

The Responder SPI (Security Parameter Index) is a value chosen by the responder to identify a unique IKE Security Association (SA).

Question 3

_________ mode is used when one or both ends of an SA are a security gateway,
such as a firewall or router that implements IPsec.

Accepted Answer

The answer of _________ mode is used when one or...

Question 4

the __________ payload contains either error or status information associated with this SA or this SA negotiation.

Accepted Answer

The Notify payload in IPsec is used to convey error or status information related to a Security Association (SA) or its negotiation process.

Question 5

IKE key determination employs __________ to ensure against replay attacks.

Accepted Answer

The answer of IKE key determination employs __________ to ensure...

Question 6

the __________ facility is concerned with the secure exchange of keys.

Accepted Answer

The answer of the __________ facility is concerned with the...

Question 7

A security association is uniquely identified by three parameters: Security
Protocol Identifier, IP Destination Address, and ________ .

Accepted Answer

The answer of A security association is uniquely identified by...

Question 8

the _________ payload allows IKE SAs to be authenticated using EAP.

Accepted Answer

The Extensible Authentication Protocol (EAP) payload in IKE (Internet Key Exchange) allows for the authentication of IKE Security Associations (SAs) using various EAP methods. This enables flexible authentication mechanisms, including those based on passwords, tokens, and certificates.

Question 9

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

Accepted Answer

A Security Association (SA) is a one-way relationship between a sender and a receiver that provides security services to the traffic carried on it, such as confidentiality, integrity, and authentication.

Question 10

the __________ exchange requires that each side send a pseudorandom number in
the initial message, which the other side acknowledges.

Accepted Answer

The answer of the __________ exchange requires that each side...

Question 11

__________ can be used to secure communication with other organizations,
ensuring authentication and confidentiality and providing a key exchange mechanism.

Accepted Answer

The answer of __________ can be used to secure communication...

Question 12

_________ identifies the type of data contained in the payload data field by identifying the first header in that payload.

Accepted Answer

The answer of _________ identifies the type of data contained...

Question 13

IPsec provides security services at the ________ layer by enabling a system to
select required security protocols, determine the algorithms to use for the
services and put in place any cryptographic keys required to provide the
requested services.

Accepted Answer

The answer of IPsec provides security services at the ________...

Question 14

IPsec policy is determined primarily by the interaction of two databases: the
security policy database and the __________ .

Accepted Answer

The answer of IPsec policy is determined primarily by the...

Question 15

A __________ attack is one in which an attacker obtains a copy of an authenticated
packet and later transmits it to the intended destination.

Accepted Answer

The answer of A __________ attack is one in which...

Question 16

the means by which IP traffic is related to specific SAs is the _________ .

Accepted Answer

The Security Policy Database (SPD) is responsible for determining how IP traffic is associated with specific Security Associations (SAs).

Question 17

the key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

Accepted Answer

The Security Policy Database (SPD) is the key management mechanism that is used to distribute keys. It is coupled to the authentication and privacy mechanisms only by way of the SPI. The SPI is a unique identifier that is used to identify a specific security association.

Question 18

Confidentiality is a service provided by an encryption format known as __________ .

Accepted Answer

The answer of Confidentiality is a service provided by an...

Question 19

IPsec encompasses three functional areas: authentication, key management, and
__________ .

Accepted Answer

The answer of IPsec encompasses three functional areas: authentication, key...

Question 20

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.the current specification is
RFC 4303.

Accepted Answer

The answer of _________ consists of an encapsulating header and...

Quiz 20: Ip Security

_________ can be used to provide access control, confidentiality, data origin authentication, connectionless integrity, rejection of replayed packets, and limited traffic flow confidentiality.

A value chosen by the responder to identify a unique IKE SA is a _________ .

_________ mode is used when one or both ends of an SA are a security gateway, such as a firewall or router that implements IPsec.

the __________ payload contains either error or status information associated with this SA or this SA negotiation.

IKE key determination employs __________ to ensure against replay attacks.

the __________ facility is concerned with the secure exchange of keys.

A security association is uniquely identified by three parameters: Security Protocol Identifier, IP Destination Address, and ________ .

the _________ payload allows IKE SAs to be authenticated using EAP.

A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

the __________ exchange requires that each side send a pseudorandom number in the initial message, which the other side acknowledges.

__________ can be used to secure communication with other organizations, ensuring authentication and confidentiality and providing a key exchange mechanism.

_________ identifies the type of data contained in the payload data field by identifying the first header in that payload.

IPsec provides security services at the ________ layer by enabling a system to select required security protocols, determine the algorithms to use for the services and put in place any cryptographic keys required to provide the requested services.

IPsec policy is determined primarily by the interaction of two databases: the security policy database and the __________ .

A __________ attack is one in which an attacker obtains a copy of an authenticated packet and later transmits it to the intended destination.

the means by which IP traffic is related to specific SAs is the _________ .

the key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

Confidentiality is a service provided by an encryption format known as __________ .

IPsec encompasses three functional areas: authentication, key management, and __________ .

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.the current specification is RFC 4303.