Which IPSec framework is used for creating a Security Association?

Which IPSec framework is used for creating a Security Association?

• A. SSH
• B. Public Key Infrastructure (PKI)
• C. Encapsulating Security Payload (ESP)
• D. Internet Key Exchange (IKE)

Answer: (D)

Establishing the Security Association in IPSec is done through a key management protocol that negotiates and sets the parameters and keys used to protect traffic. A Security Association is a unidirectional bundle of protection: it includes the SPI, selected encryption and/or authentication algorithms, keys, and lifetimes. IPSec relies on a separate process to create and manage these SAs, and that process is Internet Key Exchange. IKE negotiates the SA attributes and derives the keys that both ends will use, effectively authorizing and configuring how traffic will be protected in that direction. Once the SA exists, the actual protective methods—such as encapsulating payloads with ESP or authenticating with AH—operate under those agreed parameters. SSH is for remote access, and PKI is a certificate framework often used to authenticate peers in IKE, but neither creates the IPSec SA itself.

Establishing the Security Association in IPSec is done through a key management protocol that negotiates and sets the parameters and keys used to protect traffic. A Security Association is a unidirectional bundle of protection: it includes the SPI, selected encryption and/or authentication algorithms, keys, and lifetimes. IPSec relies on a separate process to create and manage these SAs, and that process is Internet Key Exchange. IKE negotiates the SA attributes and derives the keys that both ends will use, effectively authorizing and configuring how traffic will be protected in that direction. Once the SA exists, the actual protective methods—such as encapsulating payloads with ESP or authenticating with AH—operate under those agreed parameters. SSH is for remote access, and PKI is a certificate framework often used to authenticate peers in IKE, but neither creates the IPSec SA itself.