1. Home
2. All questions
3. Question 38

CISSP study material · question 38 of 500

A security engineer is building the ordered policy table an IPsec implementation consults for every packet crossing the boundary, and a reviewer wants the test plan to cover every outcome a policy lookup can produce. Which dispositions can a lookup return? Choose three.

• Network security
• Security architecture

1. Discard, dropping the packet so that it never crosses the boundary
2. Protect, handing the packet to Authentication Header or Encapsulating Security Payload
3. Queue, holding the packet until a matching security association is negotiated
4. Bypass, letting the packet cross with no cryptographic treatment

Challenge yourself on this topic → Study as cards