Regarding an IPsec security association (SA), which two statements are true? (Choose two.)
A.
IKE SA is bidirectional.
B.
IPsec SA is bidirectional.
C.
IKE SA is established during phase 2 negotiations.
D.
IPsec SA is established during phase 2 negotiations.
Explanation:
I think that the true Answers are A & D :
IKE SA is bidirectional & instablished during phase 1
Apology
I thought that the question is about IKE SA
So, Answer is correct
IPsec SA is NOT bidirectional and IKE SA is not estb. during P2.
Correct answer should be A & D.
B & D (IPsec SA not IKE SA)
Regardless of the question B&C are wrong.
IPsec SA is unidirectional and performed during phase 2.
IKE SA is bidirectional and established during phase 1 so A&C are correct
An IPsec SA is unidirectional in nature and defines how traffic for a particular traffic flow is to be protected by IPsec.
http://www.ciscopress.com/articles/article.asp?p=25474&seqNum=7
IKE has established the secure tunnel in phase 1
So Right Answer : A& D
yes A&D are correct
I wrongly put the answer in my last comment
Answer A D
IKE SA established during phase 1 negotiations
Bidirectional
IPsec SA established during phase 2 negotiations
Unidirectional
The JNCIS-SEC JN0-332 exam End of Life (EOL) on July 1, 2017, now the new exam is JN0-333.
The newest JN0-333 dumps are available here FYI:
https://drive.google.com/open?id=0B-ob6L_QjGLpNzNvWWE1ck01MHM
Good Luck!!!