Study. uk . com
  1. Home
  2. All questions
  3. Question 274

CISSP study material · question 274 of 500

An engineer expects AH to cover every field of the IP header. Why does RFC 4302 describe its protection of the header as piecemeal?

  1. AH protects only the payload, and header coverage is an optional extension.
  2. Fields that change in transit cannot be predicted by the sender, so they are excluded from the integrity check.
  3. Header coverage is dropped whenever the packet is fragmented.
  4. Only fields duplicated in the next-layer header are covered.
Show the answer

Answer: B. Fields that change in transit cannot be predicted by the sender, so they are excluded from the integrity check.

AH covers as much of the header as it can, but fields that change in transit cannot be predicted by the sender and so go unprotected.

Source: RFC 4302 (IETF) — RFC 4302 > 1. Introduction

Challenge yourself on this topic → Study as cards