Exam 9: Ip Security

_________ defines a number of techniques for key management.

The Security Parameters Index identifies a security association.

A value chosen by the responder to identify a unique IKE SA is a _________ .

The _________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

_________ consists of an encapsulating header and trailer used to provide encryption or combined encryption/authentication.The current specification is RFC 4303.

IPsec encompasses three functional areas: authentication, key management, and __________ .

The __________ facility is concerned with the secure exchange of keys.

The means by which IP traffic is related to specific SAs is the _________ .

A __________ attack is one in which an attacker obtains a copy of an authenticated packet and later transmits it to the intended destination.

_________ identifies the type of data contained in the payload data field by identifying the first header in that payload.

IPsec is executed on a packet-by-packet basis.

_________ can be used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service, and traffic flow confidentiality.

The Payload Data Field is designed to deter replay attacks.

IPsec policy is determined primarily by the interaction of two databases: The security policy database and the __________ .

IKE key determination employs __________ to ensure against replay attacks.

__________ provides the capability to secure communications across a LAN, across private and public WANs, and across the Internet.

The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .

A security association is uniquely identified by three parameters: Security Protocol Identifier, IP Destination Address, and ________ .

The __________ payload contains either error or status information associated with this SA or this SA negotiation.

The default automated key management protocol for IPsec is referred to as ISAKMP/Oakley.