Which are two modes of IP security ?
2015
Which are two modes of IP security ?
- A.
Transport and certificate
- B.
Transport and tunnel
- C.
Certificate and tunnel
- D.
Preshared and transport
Attempted by 88 students.
Show answer & explanation
Correct answer: B
Correct answer: Transport and tunnel.
Why:
Transport mode: Protects only the payload of the original IP packet (used for end-to-end, host-to-host connections). The original IP header is kept, and ESP or AH can be applied to the payload.
Tunnel mode: Encapsulates the entire original IP packet inside a new IP packet and header (commonly used for gateway-to-gateway or site-to-site VPNs).
Note on other terms in the options:
Certificates and pre-shared keys are authentication methods used during IKE (Internet Key Exchange) to authenticate peers. They are not IPsec modes.