IPSec Components: Authentication, Encryption, and Key Exchange
Short answer
A The administrator should choose IPSec because it is the comprehensive suite that includes IKE for key exchange, AH/ESP for header authentication, and ESP for payload encryption.
Question
• Authenticate packet headers.
• Exchange encryption keys over the network.
• Transmit encrypted payloads.
Which of the following technologies should the administrator choose?
Key Takeaways
The trap is selecting specific sub-protocols like AH or ESP; however, only the full IPSec suite includes the critical IKE component required for automated key exchange.
Identify the network technology that provides authentication, key exchange, and encryption. The correct solution is IPSec, as it integrates IKE, AH, and ESP into a single secure framework.
Common mistake: Candidates often select ESP (B) because it handles encryption and authentication, missing the fact that ESP alone cannot negotiate keys over the network without the IKE component of IPSec.
Expert Analysis
The question requires a single technology that satisfies three distinct functions: authentication, key exchange, and encryption. IPSec is the only suite among the options that integrates all these components.
Authentication: While AH (Option C) authenticates headers, it does not provide encryption. ESP provides both authentication and encryption for payloads, but neither AH nor ESP can independently handle key management.
Key Exchange: The requirement to 'exchange encryption keys' points directly to IKE (Internet Key Exchange), which is part of the IPSec architecture. Neither AH, ESP, nor GRE include built-in key exchange mechanisms; they rely on external processes or manual configuration.
Encryption: ESP handles payload encryption. However, without the broader IPSec framework (which includes IKE for negotiation and SA management), ESP cannot function autonomously in a dynamic environment.
GRE (Option D) is a tunneling protocol but offers no security features natively. Therefore, only IPSec (Option A) encompasses the necessary protocols (AH/ESP for security, IKE for key exchange) to meet all criteria simultaneously.
Exam Strategy
When a question lists multiple security requirements (authentication, encryption, key exchange), look for the overarching protocol suite rather than individual data-plane protocols. If 'key exchange' is mentioned, immediately associate it with IKE/IPsec, as standalone encryption protocols like ESP or AES do not handle negotiation.
Frequently Asked Questions
Does ESP authenticate packet headers?
Can GRE provide encryption?
Community Votes
50% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
ERB14 👍 1 Answered AIPSec (Internet Protocol Security) is an entire suite of protocols that collectively satisfies all three requirements: Authenticate packet headers: Done via AH (Authentication Header) or ESP (Encapsulating Security Payload) with authentication. Exchange encryption keys over the network: Handled by IKE (Internet Key Exchange). Transmit encrypted payloads: Handled by ESP.
-
Skri113xX 👍 1 Answered BKinda torn, but B looks most likely to be what the exam is looking for.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All N10-009 Questions
Access 100 questions with complete answers and detailed explanations.
View Full N10-009 Practice Test →