Question:
What protection is provided by IPsec perfect forward secrecy?
- ensuring that packets are not modified in transit
- ensuring a compromised session key does not lead to the compromise of future keys
- providing protection against hackers trying to capture and insert network traffic
- creating new security keys between endpoints on a specified time interval
Explanation: With perfect forward secrecy each session key is derived independently of the previous key so that a compromise of one key does not mean compromise of future keys.
Exam with this question: CCNP Enterprise: Advanced Routing (Version 8.0) – VPNs Exam
Please login or Register to submit your answer