ECSS: EC-Council Certified Security SpecialistDemo

Question

To support IPSec operation, the sending and receiving devices must share a public key. This is achieved using a protocol called Internet Security Association and Key Management Protocol/Oakley (ISAKMP/Oakley), which enables the receiver to obtain a public key and authenticate the sender through digital certificates.

Which IPSec service provides authentication, integrity checking, and encryption for packets at the IP level?

A SSL
B PGP
C AH
D ESP

Explanation

Encapsulating Security Payload (ESP) is the IPsec service that provides confidentiality through encryption and can provide data-origin authentication and connectionless integrity for IP traffic. Authentication Header (AH) provides authentication and integrity protection but does not encrypt data.

Learn more

RFC 4303: IP Encapsulating Security Payload (ESP)

ECSS: EC-Council Certified Security SpecialistDemo

AstroTutor

Notes

Readiness

QuestionQ46

Community Discussion