Discuss ISC2 SSCP Exam Topic 11 Question 24

Which of the following statements is NOT true of IPSec Transport mode?

AIt is required for gateways providing access to internal systems

BSet-up when end-point is host or communications terminates at end-points

CIf used in gateway-to-host communication, gateway must act as host

DWhen ESP is used for the security protocol, the hash is only applied to the upper layer protocols contained in the packet

Suggested Answer: A

Source: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 2, 2001, CRC Press, NY, Pages 166-167.

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Elli 11 months ago

Totally agree with B, it’s all about where the communication ends!

Nichelle 12 months ago

Wait, D seems off, how can the hash only apply to upper layers?

Vilma 12 months ago

B sounds right, it’s all about end-points.

Johnathon 12 months ago

I think C is a bit misleading, not sure about that one.

Loreta 1 year ago

A is definitely true for IPSec Transport mode.

Miss 1 year ago

I thought transport mode was mainly for end-to-end communication, so maybe B is the one that doesn't fit?

King 1 year ago

I’m leaning towards D being the false statement, but I can't recall the specifics about how ESP works in transport mode.

Glennis 1 year ago

I remember practicing a question about IPSec modes, and I feel like the gateway acting as a host is a tricky point in option C.

Kanisha 1 year ago

I think option A sounds a bit off, but I'm not entirely sure if it's the right answer.

Mignon 1 year ago

Hmm, there are a lot of potential problems here. I'll need to think through each of the options and decide which ones are the most significant.

Nan 1 year ago

Ah, this is a good one. The distributed data cache is a key feature of ACK that I'm familiar with. I'll quickly review the options and select the ones that I know are correct based on my understanding of how the cache works and the benefits it provides.

Shad 1 year ago

I feel pretty confident about this one. The question is asking which message is used by hosts to request an immediate router advertisement, and that's definitely Router Solicitation. I'm going with B.

ISC2 SSCP Exam - Topic 11 Question 24 Discussion