Study Questions

Question 1

What are the in 2 IPsec modes

Answer 1

1. Tunnel mode -commonly used to provide secure communication between two Network gateways.
2. Transport mode
   -used when 2 hosts connect directly. The circuit brakes after the session ends.

Question 2

What is an SA

Answer 2

Security association
-a set of specifications that negotiate between nodes to establish the IPsec relationship.
Specifications include -cryptographic keys
-Authentication preferences
-certificates
-algorithm selections.

Question 3

What are the CompTIA’s incident response lifecycle seven-step process?

Answer 3

1. Preparation
2. Detection
3. Analysis —
4. Containment —
5. Eradication —
6. Recovery — .
7. Lessons learned —