ISC2 ISSAP Exam - Topic 6 Question 62 Discussion

Actual exam question for ISC2's ISSAP exam

Question #: 62
Topic #: 6

You work as a Chief Security Officer for Tech Perfect Inc. You have configured IPSec and ISAKMP protocol in the company's network in order to establish a secure communication infrastructure. ccording to the Internet RFC 2408, which of the following services does the ISAKMP protocol offer to the network?

Each correct answer represents a part of the solution. Choose all that apply.

AIt relies upon a system of security associations.

BIt provides key generation mechanisms.

CIt authenticates communicating peers.

DIt protects against threats, such as DoS attack, replay attack, etc.

Show Suggested Answer

Suggested Answer: B, C, D

It authenticates communicating peers.

It creates and manages security associations.

It provides key generation mechanisms.

It protects against threats, such as DoS attack, replay attack, etc.

Answer option A is incorrect. The ISAKMP protocol does not relies upon a system of security association. This service is offered by the IPSec

protocol. The ISAKMP only manages these security associations.

by Josphine at Dec 26, 2022, 06:54 AM

Limited Time Offer

25%

Off

Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cyril

4 months ago

Yup, all of these are correct services offered by ISAKMP.

upvoted 0 times

...

Alayna

4 months ago

Key generation is definitely part of it!

upvoted 0 times

...

Jeniffer

4 months ago

Wait, does it really protect against DoS attacks? I thought that was more on IPSec.

upvoted 0 times

...

Franchesca

4 months ago

Totally agree, it also authenticates peers!

upvoted 0 times

...

Isadora

4 months ago

ISAKMP does rely on security associations, that's a fact.

upvoted 0 times

...

Tamesha

5 months ago

I don't recall ISAKMP specifically protecting against DoS or replay attacks, so I'm hesitant about option D being correct.

upvoted 0 times

...

Lovetta

5 months ago

I practiced a similar question, and I think option C about authenticating peers is definitely a service it provides.

upvoted 0 times

...

Gladys

5 months ago

I'm a bit unsure about the key generation part. I feel like ISAKMP might not directly handle that, but I could be wrong.

upvoted 0 times

...

Trina

5 months ago

I remember that ISAKMP is definitely involved in establishing security associations, so I think option A is correct.

upvoted 0 times

...

Gerri

5 months ago

Okay, let's see. The key here is understanding the purpose of the insert options on a content item. I believe the correct answer is B, since that option would give Content Authors the flexibility to add additional items under a specific content item.

upvoted 0 times

...

Margurite

5 months ago

I'm a bit confused on how the amplification factor affects the health score calculation. I'll need to review the JUnit report documentation to make sure I understand this properly.

upvoted 0 times

...

Corazon

5 months ago

Hmm, I'm a bit unsure about this one. The requirements seem clear, but I want to make sure I understand the implications of each option before selecting an answer.

upvoted 0 times

...

Nada

5 months ago

I'm a bit confused by this one. Does setting the default offset account really prevent all non-ledger transactions from being posted to the general journal? I'll need to double-check the details.

upvoted 0 times

...