Your network contains a server named Server1 that runs Windows Server 2008 R2. You configure IPSec on Server1. You need to identify the total number of encrypted bytes sent and received by Server1. Which node should you use to achieve this task? To answer, select the appropriate node in the answer area.
A.
Main Mode: Generic Filters
B.
Main Mode: Security Associations
C.
Quick Mode: Specific Filters
D.
Quick Mode: Security Associations
Explanation:
This view displays the active SAs with this computer. An SA is the combination of a negotiated key, security protocol, and SPI, which together define the security used to protect the communication from sender to receiver. Therefore, by looking at the security associations for this computer, you can determine which computers have connections with this computer, which type of data integrity and encryption is being used for that connection, and other information.This information can be helpful when you are testing IPsec policies and troubleshooting access issues.
http://technet.microsoft.com/en-us/library/cc737334(v=ws.10).aspx
The correct answer is “Quick Mode: Statistics” so none of the answers is correct here. Microsoft modified the answer to these in later exam:
A) Active Policy
B) Main Mode
C) Quick Mode
D) None
in which here B is correct answer.
sorry here C is correct
According to the Technet article linked in the explanation, this would be listed under Quick Mode Statistics. Quick mode is the easy pick because Main Mode uses AH while Quick mode uses ESP (the encrypted data).
The specific statistic listed in the Technet article is “confidential bytes sent”, located under the Quick Mode statistics subsection. If the answers Dan listed are the revised answers for the exam, the correct answer is C as sam mentioned.
Be prepared however, to click the correct area in the console window.
Quick Mode -> Statistics.