MENU
What are two functions of IKEv1 but not IKEv2? (Choose two)
Suggested Answer: D, E
Get Premium 350-701 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In a Cisco Secure Workload implementation, telemetry data can be generated from IPFIX (Internet Protocol Flow Information Export) records using NetFlow connectors and Cisco Secure Workload itself. NetFlow provides insights into network traffic flow and volume, while Cisco Secure Workload uses this data for visibility, segmentation, and security analytics within the data center.
42 comments · newest first
PO
Portia
11 months ago
IKEv1 does initiate with IKE_SA_INIT, that's a fact!
CA
Carisa
11 months ago
IKEv1's aggressive mode is a cleartext risk, though.
EL
Elinore
11 months ago
Wait, are you sure about that EAP thing?
FI
Fidelia
11 months ago
Totally agree, IKEv1 is faster in some cases!
OD
Odette
12 months ago
IKEv1 supports NAT-T, but IKEv2 doesn't.
ER
Erinn
12 months ago
I feel like EAP authentication is more associated with IKEv2, but IKEv1 might have some support for it too.
NI
Nieves
1 year ago
IKEv1 does negotiate faster in some scenarios, but I can't remember if that's specifically tied to main mode or aggressive mode.
LE
Leonardo
1 year ago
I remember something about aggressive mode in IKEv1, but I can't recall if it really sends identities in cleartext.
PR
Precious
1 year ago
I think NAT-T is definitely a feature of IKEv1, but I'm not sure if it's the only one.
SH
Shalon
1 year ago
I'm pretty confident that IKEv1 uses EAP authentication, while IKEv2 does not. That's a clear distinction between the two versions.
BE
Bette
1 year ago
I'm a bit unsure about the negotiation speed between main mode and aggressive mode in IKEv1. I'll need to review that part to make sure I have it right.
VI
Virgie
1 year ago
The aggressive mode in IKEv1 passing identities in cleartext is definitely a key difference from IKEv2. I remember learning about that in class.
GE
Gerry
1 year ago
Okay, let's think this through. I know IKEv1 supports NAT-T, but I'm not sure if that's a feature that IKEv2 lacks. I'll need to double-check that.
BA
Barrett
1 year ago
This question seems straightforward, but I want to make sure I understand the differences between IKEv1 and IKEv2 correctly.
OC
Octavio
1 year ago
Ah, I think I've got it! Deviations from the baseline should be investigated and documented, so I'm going with option B.
AA
Aaron
1 year ago
Wait, IKEv1 uses the IKE_SA_INIT message? No wonder it's so much faster than IKEv2 - it's like they're playing a game of 'Whose protocol can be more confusing?'
HE
Helene
1 year ago
I'd rather have my identities passed in cleartext than have to remember all these weird IKE version numbers. Back in my day, we just used IPsec and liked it!
LA
Lavera
1 year ago
I think one function of IKEv1 but not IKEv2 is aggressive mode, but I'm not sure about the second one.
MA
Maryann
1 year ago
It's true, sometimes simpler is better when it comes to security protocols.
RU
Ruth
1 year ago
I agree, IKEv2 may be more secure but it lacks those two functions.
TA
Tayna
1 year ago
I agree, it can get confusing with all these different IKE versions.
CA
Cassandra
1 year ago
Yeah, IKEv1 also has the ability to use digital signatures for authentication.
EV
Evangelina
1 year ago
I prefer the simplicity of just using IPsec without all these different versions.
AV
Avery
1 year ago
I prefer IKEv1 because it supports aggressive mode and uses pre-shared keys.
KR
Kris
1 year ago
I'm tempted to pick E just to see if the exam writer is trying to trick us. But B and D are the real winners here.
SA
Salome
1 year ago
Let's go with B and D then, sounds like the safest bet.
TA
Tayna
1 year ago
I agree, those are the two functions of IKEv1 but not IKEv2.
RI
Richelle
1 year ago
I think B and D are the correct answers.
HY
Hyun
1 year ago
A and C seem like the obvious choices here. NAT-T support and faster mode negotiation are clear advantages of IKEv1 over IKEv2.
SH
Sharee
1 year ago
A) and C) are the correct functions of IKEv1 but not IKEv2.
SA
Salome
1 year ago
C) With IKEv1, mode negotiates faster than main mode.
BR
Brice
1 year ago
A) NAT-T is supported in IKEv1 but not in IKEv2.
DA
Dana
2 years ago
Definitely going with B and D. Aggressive mode in IKEv1 is a security risk, and EAP authentication is a key feature that's missing in IKEv2.
MO
Moira
1 year ago
IKEv1 conversations starting with IKE_SA_INIT message is a nice touch.
EV
Evelynn
1 year ago
I prefer IKEv1 for its faster mode negotiation and NAT-T support.
RE
Reynalda
1 year ago
Yes, EAP authentication is a key feature missing in IKEv2.
AL
Aleta
1 year ago
Agreed, aggressive mode in IKEv1 is definitely a security risk.
DA
Dalene
1 year ago
I think EAP authentication is crucial, it's a shame IKEv2 doesn't support it.
GI
Gilma
1 year ago
Agreed, aggressive mode in IKEv1 is definitely a security risk.
AM
Amber
2 years ago
I'm not sure about option B, but I think option A is definitely one of the functions of IKEv1.
KE
Kenia
2 years ago
I agree with Edwin, NAT-T and cleartext identities are unique to IKEv1.
ED
Edwin
2 years ago
I think option A and B are the correct answers.