Chapter 9: Ip Security

Front 1

IP security is a capability that can be added to either current version of the Internet Protocol by means of additional headers.

Back 1

True

Front 2

The principal feature of IPsec is that it can encrypt and/or authenticate all traffic at the IP level.

Back 2

True

Front 3

Transport mode provides protections to the entire IP packet.

Back 3

False

Front 4

Additional padding may be added to provide partial traffic flow confidentiality by concealing the actual length of the payload.

Back 4

True

Front 5

Authentication must be applied to the entire original IP packet.

Back 5

False

Front 6

An end user whose system is equipped with IP security protocols can make a local call to an ISP and gain secure access to a company network.

Back 6

True

Front 7

Both tunnel and transport modes can be accommodated by the encapsulation security payload encryption format.

Back 7

True

Front 8

An individual SA can implement both the AH and the ESP protocol.

Back 8

False

Front 9

By implementing security at the IP level an organization can ensure secure networking not only for applications that have security mechanisms but also for the many security ignorant applications.

Back 9

True

Front 10

IPsec can guarantee that all traffic designated by the network administrator is authenticated bu cannot guarantee that it is encrypted.

Back 10

False

Front 11

Any traffic from the local host to a remote host for purposes of an IKE exchange bypasses the IPsec processing.

Back 11

True

Front 12

IPsec is executed on a packet-by-packet basis.

Back 12

True

Front 13

The Payload Data Field is designed to deter replay attacks.

Back 13

False

Front 14

The Security Parameters Index identifies a security association.

Back 14

True

Front 15

The default automated key management protocol for IPsec is referred to as ISAKMP/Oakley.

Back 15

True

Front 16

Authentication applied to the entire original IP packet is ______.

Back 16

tunnel mode

Front 17

_________ defines a number of techniques for key management.

Back 17

SKE

Front 18

Authentication applied to all of the packets except for the IP header is ___________.

Back 18

transport mode

Front 19

The __________ mechanism assures that a received packet was in fact transmitted by the party identified as the source in the packet header and assures that the packet has not been altered in transit.

Back 19

authentication

Front 20

________ provides the capability to secure communications across a LAN, across private and public WANs, and across and Internet.

Back 20

IPsec

Front 21

The __________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

Back 21

confidentiality

Front 22

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the __________.

Back 22

SPI

Front 23

A ________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.

Back 23

SA

Front 24

The means by which IP traffic is related to specific SAs is the _________.

Back 24

SPD

Front 25

_________ consists of an encapsulating header and trailer used to provide encryption of combined encryption/authentication. The current specification is RFC 4303.

Back 25

IPsec

Front 26

___________ identifies the type of data contained in the payload data field by identifying the first header in that payload.

Back 26

Sequence header

Front 27

A value chosen by the responder to identify a unique IKESA is a ____________.

Back 27

responder cookie

Front 28

IKE key determination employs _________ to ensure against replay attacks.

Back 28

flags