1. Home
2. All questions
3. Question 36

CISSP study material · question 36 of 500

An engineer is documenting the security associations required for a bidirectional IPsec tunnel carrying ordinary request and response traffic. A colleague proposes one association covering both directions and binding Authentication Header (AH) and Encapsulating Security Payload (ESP) together. How should the engineer describe the actual requirement?

• Network security
• Security engineering

1. Each association is unidirectional and carries either AH or ESP, so two-way traffic needs a pair and layering protocols needs more.
2. Each association is bidirectional and carries either AH or ESP, so two-way traffic needs one and layering protocols needs a pair.
3. Each association is unidirectional and may carry AH and ESP together, so two-way traffic needs a pair and nothing further.
4. Each association is bidirectional and may carry AH and ESP together, so one association covers both directions and both protocols.

Challenge yourself on this topic → Study as cards