SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ956

Network and Communications Security

Which statement is NOT true about pre-shared-key authentication within the IKE/IPsec protocol?

  • A Pre shared key authentication is normally based on simple passwords
  • B Needs a Public Key Infrastructure (PKI) to work
  • C IKE is used to setup Security Associations
  • D IKE builds upon the Oakley protocol and the ISAKMP protocol.
Explanation

Pre-shared-key authentication establishes peer authentication using a shared secret configured in advance, so it does not require a Public Key Infrastructure (PKI). PKI is used for certificate-based public-key authentication. IKE negotiates authenticated keying material for security associations, and IKEv1 combines Oakley with ISAKMP.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!