Question:
What protection is provided by IPsec perfect forward secrecy?
- ensuring that packets are not modified in transit
- ensuring a compromised session key does not lead to the compromise of future keys
- providing protection against hackers trying to capture and insert network traffic
- creating new security keys between endpoints on a specified time interval
Explanation: With perfect forward secrecy each session key is derived independently of the previous key so that a compromise of one key does not mean compromise of future keys.
Related exam: CCNP ENARSI 8 Modules 18 - 20 Checkpoint Exam: VPNs Exam
