Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 SSCP Exam - Topic 11 Question 24 Discussion

Which of the following statements is NOT true of IPSec Transport mode?
A) It is required for gateways providing access to internal systems
B) Set-up when end-point is host or communications terminates at end-points
C) If used in gateway-to-host communication, gateway must act as host
D) When ESP is used for the security protocol, the hash is only applied to the upper layer protocols contained in the packet

ISC2 SSCP Exam - Topic 11 Question 24 Discussion

Actual exam question for ISC2's SSCP exam
Question #: 24
Topic #: 11
[All SSCP Questions]

Which of the following statements is NOT true of IPSec Transport mode?

Show Suggested Answer Hide Answer
Suggested Answer: A

Source: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 2, 2001, CRC Press, NY, Pages 166-167.


by Margart at May 09, 2022, 10:21 PM

Limited Time Offer

25%

Off

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Elli
8 months ago
Totally agree with B, it’s all about where the communication ends!
upvoted 0 times
...
Nichelle
9 months ago
Wait, D seems off, how can the hash only apply to upper layers?
upvoted 0 times
...
Vilma
9 months ago
B sounds right, it’s all about end-points.
upvoted 0 times
...
Johnathon
9 months ago
I think C is a bit misleading, not sure about that one.
upvoted 0 times
...
Loreta
9 months ago
A is definitely true for IPSec Transport mode.
upvoted 0 times
...
Miss
9 months ago
I thought transport mode was mainly for end-to-end communication, so maybe B is the one that doesn't fit?
upvoted 0 times
...
King
9 months ago
I’m leaning towards D being the false statement, but I can't recall the specifics about how ESP works in transport mode.
upvoted 0 times
...
Glennis
9 months ago
I remember practicing a question about IPSec modes, and I feel like the gateway acting as a host is a tricky point in option C.
upvoted 0 times
...
Kanisha
9 months ago
I think option A sounds a bit off, but I'm not entirely sure if it's the right answer.
upvoted 0 times
...
Mignon
9 months ago
Hmm, there are a lot of potential problems here. I'll need to think through each of the options and decide which ones are the most significant.
upvoted 0 times
...
Nan
9 months ago
Ah, this is a good one. The distributed data cache is a key feature of ACK that I'm familiar with. I'll quickly review the options and select the ones that I know are correct based on my understanding of how the cache works and the benefits it provides.
upvoted 0 times
...
Shad
10 months ago
I feel pretty confident about this one. The question is asking which message is used by hosts to request an immediate router advertisement, and that's definitely Router Solicitation. I'm going with B.
upvoted 0 times
...

Save Cancel