Discuss ISC2 ISSAP Exam Topic 6 Question 62

You work as a Chief Security Officer for Tech Perfect Inc. You have configured IPSec and ISAKMP protocol in the company's network in order to establish a secure communication infrastructure. ccording to the Internet RFC 2408, which of the following services does the ISAKMP protocol offer to the network?

Each correct answer represents a part of the solution. Choose all that apply.

AIt relies upon a system of security associations.

BIt provides key generation mechanisms.

CIt authenticates communicating peers.

DIt protects against threats, such as DoS attack, replay attack, etc.

Suggested Answer: B, C, D

It authenticates communicating peers.

It creates and manages security associations.

It provides key generation mechanisms.

It protects against threats, such as DoS attack, replay attack, etc.

Answer option A is incorrect. The ISAKMP protocol does not relies upon a system of security association. This service is offered by the IPSec

protocol. The ISAKMP only manages these security associations.

Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Cyril 11 months ago

Yup, all of these are correct services offered by ISAKMP.

Alayna 11 months ago

Key generation is definitely part of it!

Jeniffer 12 months ago

Wait, does it really protect against DoS attacks? I thought that was more on IPSec.

Franchesca 12 months ago

Totally agree, it also authenticates peers!

Isadora 12 months ago

ISAKMP does rely on security associations, that's a fact.

Tamesha 1 year ago

I don't recall ISAKMP specifically protecting against DoS or replay attacks, so I'm hesitant about option D being correct.

Lovetta 1 year ago

I practiced a similar question, and I think option C about authenticating peers is definitely a service it provides.

Gladys 1 year ago

I'm a bit unsure about the key generation part. I feel like ISAKMP might not directly handle that, but I could be wrong.

Trina 1 year ago

I remember that ISAKMP is definitely involved in establishing security associations, so I think option A is correct.

Gerri 1 year ago

Okay, let's see. The key here is understanding the purpose of the insert options on a content item. I believe the correct answer is B, since that option would give Content Authors the flexibility to add additional items under a specific content item.

Margurite 1 year ago

I'm a bit confused on how the amplification factor affects the health score calculation. I'll need to review the JUnit report documentation to make sure I understand this properly.

Corazon 1 year ago

Hmm, I'm a bit unsure about this one. The requirements seem clear, but I want to make sure I understand the implications of each option before selecting an answer.

Nada 1 year ago

I'm a bit confused by this one. Does setting the default offset account really prevent all non-ledger transactions from being posted to the general journal? I'll need to double-check the details.

ISC2 ISSAP Exam - Topic 6 Question 62 Discussion