CCIE Security Exam: Features Supported with ESP

Features Supported with ESP

Prev Question Next Question

Question

Which three features are supported with ESP? (Choose three.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

ACD.

ESP (Encapsulating Security Payload) is a protocol used to provide secure transmission of sensitive information over the internet. It works by encrypting data and providing authentication and integrity checks.

Let's go through each option to determine the correct answer:

A. ESP uses IP protocol 50.

This statement is correct. ESP uses IP protocol 50 to provide encryption, authentication, and integrity checks.

B. ESP supports Layer 4 and above encryption only.

This statement is incorrect. ESP can provide encryption at Layer 3 and above, depending on the configuration.

C. ESP provides confidentiality, data origin authentication, connectionless integrity, and anti-replay service.

This statement is correct. ESP provides confidentiality by encrypting the data, data origin authentication by verifying the sender, connectionless integrity by ensuring the data has not been tampered with in transit, and anti-replay service by preventing the attacker from replaying captured packets.

D. ESP supports tunnel or transport modes.

This statement is correct. ESP supports both tunnel mode, where the entire original IP packet is encapsulated within another IP packet, and transport mode, where only the payload of the original IP packet is encrypted.

E. ESP has less overhead and is faster than the AH protocol.

This statement is partially correct. While ESP may have less overhead than AH, it may not necessarily be faster, as the encryption and decryption process can add processing time.

F. ESP provides confidentiality, data origin authentication, connection-oriented integrity, and anti-replay service.

This statement is incorrect. ESP provides connectionless integrity, not connection-oriented integrity.

Therefore, the correct answers are A, C, and D.