IP Security Quiz - 1

What is the purpose of IP Security?

• To provide application-specific security measures

• To ensure secure communications over the Internet

• To manage key encryption

• To enhance network layer security

Which of the following are the three functional areas that an IP Security system should provide?

• Authentication, Confidentiality, Key Management

• Firewall, Antivirus, Intrusion Detection

• Authorization, Integrity, Availability

• Encryption, Decryption, Compression

What is the main benefit of using IPSec in a firewall/router?

• Requires high processor overhead for each packet

• Adds complexity to network design

• Is resistant to bypass and secures routing architecture

• Provides strong security to individual users

What is the purpose of Security Associations in IPSec?

• To identify the type of header in the packet

• To hold parameters for each SA and uniquely identify them

• To determine the encryption algorithm used

• To establish communication between client and server

Which mode in IPSec is used for host to host communication?

• Authentication Mode

• Padding Mode

• Transport Mode

• Tunnel Mode

What is the purpose of the Authentication Header (AH) in IPSec?

• Identifies the SPI and Destination Address

• Authenticates the entire IP packet including the outer IP header

• Contains the integrity check value for the packet

• Provides data privacy and encryption

Which field in the Encapsulating Security Payload (ESP) header provides antireplay services?

• Protected Data

• Padding

• Security Parameter Index (SPI)

• Sequence Number

What is the main difference between Authentication Header (AH) and Encapsulating Security Payload (ESP) in IPSec?

• AH works through NATed networks, while ESP does not

• AH uses a hash algorithm for data integrity, while ESP hashes both payload and header

• AH authenticates the IP datagram portion, while ESP authenticates the entire IP packet

• AH provides data privacy, while ESP provides data origin authentication

What is the purpose of the Security Policy Database (SPD) in IPSec?

• To identify the SA and SPI for each packet

• To hold parameters for each SA and uniquely identify them

• To determine the encryption algorithm used

• To define which SA to use on IP traffic based on policy entries

Which action does the SPD Protect Action perform in IPSec?

• Discard packets that are not properly secured

• Drop packets if SA does not exist

• Generate SA dynamically for outbound packets

• Apply security for inbound packets