Study. uk . com
  1. Home
  2. All questions
  3. Question 285

CISSP study material · question 285 of 500

A network team asks how finely IPsec protection can be scoped between two sites. What does RFC 4301 permit?

  1. One tunnel per pair of gateways only, with no finer granularity available.
  2. Anything from a single tunnel carrying all traffic between two gateways to a separate tunnel for each TCP connection between host pairs.
  3. Granularity is fixed by the key management protocol and cannot be chosen.
  4. One tunnel per host pair, with per-connection scoping unavailable.
Show the answer

Answer: B. Anything from a single tunnel carrying all traffic between two gateways to a separate tunnel for each TCP connection between host pairs.

IPsec lets the administrator control the granularity at which protection is offered, from a single encrypted tunnel for all traffic between gateways to a separate tunnel per TCP connection.

Source: RFC 4301 (IETF) — RFC 4301 > 3.2 How IPsec Works

Challenge yourself on this topic → Study as cards