Notifications
Clear all
Topic starter
22/10/2022 12:15 pm
Which of the following statements about IKE is correct? (Multiple choice)
- A . IPSec has two negotiation modes to establish SA, one is manual mode and the other is IKE automatic negotiation (isakmp) mode.
- B . In IKE v1 aggressive mode, you can choose to find the corresponding authentication word according to the IP address or Name of the negotiation initiator and finally complete the negotiation.
- C . The NA7 traversal function deletes the verification process of the UDP port number in the IKE negotiation process, and realizes the discovery function of the NAT gateway device in the VPN tunnel, that is, if the NAT gateway device is found, UDP encapsulation will be used in the subsequent IPSec data transmission.
- D . The security mechanism of IKE includes DH Diffie-Hellman exchange and key distribution, perfect forward security (Perfect Forward Secrecy PFS) and encryption algorithms such as SHA1.
Suggested Answer: ABC