Study. uk . com
  1. Home
  2. All questions
  3. Question 281

CISSP study material · question 281 of 500

Which two statements about IPsec key management match RFC 4301? Choose two.

  1. Support for both manual and automated key distribution is required.
  2. IKEv2 is specified as the public-key based automated method, while other automated techniques may be used.
  3. Manual keying is prohibited outside laboratory environments.
  4. Key distribution is out of scope and left entirely to the deployment.
Show the answer

Answer: A. Support for both manual and automated key distribution is required.
B. IKEv2 is specified as the public-key based automated method, while other automated techniques may be used.

RFC 4301 requires support for both manual and automated key distribution and specifies IKEv2 as the public-key based approach for automated management, while permitting other techniques.

Source: RFC 4301 (IETF) — RFC 4301 > 3.2 How IPsec Works

Challenge yourself on this topic → Study as cards