QuestionQ11

Network Security Support Engineer

Which IKEv2 exchange provides DoS protection?

  • A IKE_Req_INIT
  • B IKE_SA_INIT
  • C IKE_Auth
  • D Create_CHILD_SA
Explanation

The IKE_SA_INIT exchange supports denial-of-service protection through the COOKIE notification mechanism, allowing a responder to defer costly state allocation until the initiator returns a valid cookie.

Community Discussion

No comments yet. Be the first to start the discussion!