Match each VPN framework element on the left with its primary functional purpose on the right.
- Diffie-Hellman (DH) GroupEnables two peer devices to securely derive a shared secret key over an unsecure network.
- Encapsulating Security Payload (ESP)Provides data confidentiality through encryption along with data integrity and authentication.
- Authentication Header (AH)Provides data integrity and origin authentication for IP packets without providing confidentiality.
- Internet Key Exchange (IKE)Establishes a secure control channel and negotiates Security Associations (SAs).
Cevap
Diffie-Hellman (DH) Group pairs with deriving shared secret keys over unsecure networks; Encapsulating Security Payload (ESP) pairs with providing confidentiality through encryption along with integrity; Authentication Header (AH) pairs with providing data integrity without confidentiality; Internet Key Exchange (IKE) pairs with establishing control channels and negotiating SAs.
Each IPsec component performs a distinct function: Diffie-Hellman derives shared secret keys over an untrusted link, ESP delivers packet encryption and integrity, AH delivers authentication without confidentiality, and IKE manages negotiation and Security Associations.
Adım Adım Çözüm
Anahtar Kavram
IPsec Protocol Framework Components