Which two statements accurately describe characteristics of IPsec? (Choose two.)

Which two statements accurately describe characteristics of IPsec? (Choose two.)

• IPsec works at the transport layer and protects data at the network layer.
• IPsec is a framework of proprietary standards that depend on Cisco specific algorithms.
• IPsec is a framework of standards developed by Cisco that relies on OSI algorithms.
• IPsec is a framework of open standards that relies on existing algorithms.
• IPsec works at the network layer and operates over all Layer 2 protocols.
• IPsec works at the application layer and protects all application data.

Explanation: IPsec can secure a path between two network devices. IPsec can provide the following security functions:
Confidentiality - IPsec ensures confidentiality by using encryption.
Integrity - IPsec ensures that data arrives unchanged at the destination using a hash algorithm, such as MD5 or SHA.
Authentication - IPsec uses Internet Key Exchange (IKE) to authenticate users and devices that can carry out communication independently. IKE uses several types of authentication, including username and password, one-time password, biometrics, pre-shared keys (PSKs), and digital certificates.
Secure key exchange - IPsec uses the Diffie-Hellman (DH) algorithm to provide a public key exchange method for two peers to establish a shared secret key.

Exam with this question: CCNA Security Chapter 8 Exam Answers