Study. uk . com
  1. Home
  2. All questions
  3. Question 273

CISSP study material · question 273 of 500

A design uses the authentication header to keep a management protocol's contents secret in transit. Why does this fail?

  1. AH provides confidentiality only in tunnel mode, and the design uses transport mode.
  2. AH cannot be used with management protocols, which require ESP.
  3. AH provides confidentiality only when paired with IKEv2.
  4. AH provides connectionless integrity, data origin authentication and optional anti-replay, but never confidentiality.
Show the answer

Answer: D. AH provides connectionless integrity, data origin authentication and optional anti-replay, but never confidentiality.

The IP authentication header provides integrity and data origin authentication with optional anti-replay. Encryption is offered by ESP; AH never provides a confidentiality service.

Source: RFC 4302 (IETF) — RFC 4302 > 1. Introduction

Challenge yourself on this topic → Study as cards