IPSec and TLS

Question 1

IP spoofing is useful for ____________ communication

Answer 1

unidirectionalP2 L10

Question 2

IPsec can assure that ___________________

Answer 2

A router advertisement comes from an authorized routera routing update is not forgeda redirect message comes from the router to which the initial packet was sentP2 L10

Question 3

Encapsulated Security Payload (ESP) can be used inA) encryption only modeB) authentication only modeC) encryption and authentication mode

Answer 3

A, B, and CP2 L10

Question 4

Encapsulated Security Payload (ESP) can provide both confidentiality and integrity protection

Answer 4

trueP2 L10

Question 5

If the authentication option of ESP is chosen, message integrity code is computed before encryption

Answer 5

falseP2 L10

Question 6

To protect the confidentiality and integrity of the whole original IP packet, we can use ESP with the authentication option in tunnel mode

Answer 6

trueP2 L10

Question 7

In Authentication Header, the integrity hash covers the IP header

Answer 7

trueP2 L10

Question 8

The security association, SA, specifies a two-way security arrangements between the sender and receiver

Answer 8

falseP2 L10

Question 9

Security Parameter Index (SPI) is used to help receiver identify the Security Association (SA) to unprocess the IPSec packet

Answer 9

trueP2 L10

Question 10

If the sequence number of the IPSec header is greater than the largest number of the current anti-reply window the packet is rejected

Answer 10

falseP2 L10

Question 11

If the sequence number in the IPSec header is smaller than the smallest umber of the current anti-replay window the packet is rejected

Answer 11

trueP2 L10

Question 12

The Diffie-Hellman key exchange is restricted to two party communication only

Answer 12

falseP2 L10

Question 13

An IKE SA needs to be established before IPSec SAs can be negotiated

Answer 13

trueP2 L10

Question 14

The identity of the responder and receiver and the messages they have exchanged need to be authenticated(authentication and key exchange)

Answer 14

trueP2 L10

Question 15

With perfect forward secrecy, the IPSec SA keys are based on the IKE shared secret established in phase I.

Answer 15

falseP2 L10

Question 16

Most browsers come equipped with SSL and most web servers have implemented the protocol

Answer 16

trueP2 L10

Question 17

Since TLS is for the transport later, it relies on IPSec, which is for the IP later

Answer 17

falseP2 L10

Question 18

In most applications of TLS or SSL, public keys are used for authentication and key exchange

Answer 18

trueP2 L10