Q1 IPsec can protect traffic in which OSI layers? (Choose four.) Options: A) Layer 4 B) Layer 1 C) Layer 6 D) Layer 5 E) Layer 2 F) Layer 7 G) Layer 3

Answer: A) Layer 4 D) Layer 5 F) Layer 7 G) Layer 3

Q2 Which IPsec function uses pre-shared passwords, digital certificates, or RSA certificates? Options: A) Integrity B) IPsec protocol C) Confidentiality D) Diffie-Hellman E) Authentication

Answer: E) Authentication

Q3 True or False: The IPsec framework must be updated each time a new standard is developed. Options: A) False B) True

Answer: A) False

Q4 Which choices are packet encapsulation options supported by IPsec? (Choose two.) Options: A) PSK B) ESP C) AH D) SHA E) RSA F) AES G) DH24

Answer: B) ESP C) AH

Q5 Which choices provide for the Confidentiality function in the IPsec framework? (Choose three.) Options: A) SEAL B) AH C) AES D) DH24 E) SHA F) PSK G) 3DES

Answer: A) SEAL C) AES G) 3DES

Q6 Which choices provide for the Integrity function in the IPsec framework? (Choose two.) Options: A) SEAL B) AES C) AH D) DH24 E) SHA F) MD5 G) PSK

Answer: E) SHA F) MD5

Q7 Which choices are available for the Authentication function in the IPsec framework? (Choose two.) Options: A) SHA B) RSA C) SEAL D) PSK E) DH24 F) AH G) AES

Answer: B) RSA D) PSK

Q8 Which Diffie-Hellman group choices are no longer recommended? Options: A) DH groups 19, 20, 21 and 24 B) DH groups 1, 2, and 5 C) DH groups 14, 15, and 16

Answer: B) DH groups 1, 2, and 5