Questão 2568859

• Banca: UECE-CEV
• Órgão: CGE - CE
• Ano: 2013
• Provas: UECE-CEV - 2013 - CGE - CE - Auditoria em Tecnologia da Informação
• Disciplina: Redes de Computadores
• Assuntos: Acesso Remoto - VPN (Virtual Private Network), Software para Acesso Remoto e Team Viwer; Segurança de Redes

O protocolo IPSec é utilizado na segurança de virtual private networks (VPNs). Assinale a opção que possui SOMENTE componentes do protocolo IPSec.

• A. Authentication Header, Transport Layer Security e Secure Socket Tunneling.
• B. Secure Socket Tunneling, Internet Key Exchange e NAT Firewall.
• C. Authentication Trailer, Transport Layer Security e NAT Firewall.
• D. Authentication Header, Encapsulating Security Payload e Internet Key Exchange.

Gabarito: D

Comentários

• Segundo Forouzan, os componentes do IPsec são:

   

  1 - AH

  2 - ESP

  3 - IKE

   

   

   

  Comunicação de Dados e Redes de Computadores - 4ed - Forouzan

• Prezados,
  
  O IPSec possui os componentes Authentication Header, Encapsulation Security Payload, Internet Key Exchange.
  Secure socket tunneling não existe.
  NAT Firewall não faz parte do IPSec.
  
  Portanto a alternativa correta é a letra D
  
  

• AH: Autenticação e integridade;

  ESP: Criptografia (sigilo) e Autenticação (opcional)

  IKE: Troca de chaves;

  .

  Gabarito D

  .

  At.te

  Foco na missão ❣

• d-

  IPsec uses cryptographic security services to protect communications over Internet Protocol (IP) networks. As a part of the IPv4 enhancement, IPsec is a layer 3 OSI model or internet layer end-to-end security scheme.

  The IPsec is an open standard as a part of the IPv4 suite. IPsec uses the following protocols to perform various functions:

  1- Authentication Headers (AH) provides connectionless data integrity and data origin authentication for IP datagrams and provides protection against replay attacks.

  2- Encapsulating Security Payloads (ESP) provides confidentiality, connectionless data integrity, data origin authentication, an anti-replay service (a form of partial sequence integrity), and limited traffic-flow confidentiality.

  3- Internet Security Association and Key Management Protocol (ISAKMP) provides a framework for authentication and key exchange, with actual authenticated keying material provided either by manual configuration with pre-shared keys, Internet Key Exchange (IKE and IKEv2), Kerberized Internet Negotiation of Keys (KINK), or IPSECKEY DNS records. The purpose is to generate the Security Associations (SA) with the bundle of algorithms and parameters necessary for AH and/or ESP operations.

  IPsec support is an optional add-on in IPv4, but is a mandatory part of IPv6.

  https://en.wikipedia.org/wiki/IPsec#Algorithms