WEBVTT

1
00:00.000 --> 00:06.500
So for this challenge, we're supposed to go through these questions to test our

2
00:06.500 --> 00:07.620
understanding

3
00:07.620 --> 00:09.800
of IPsec.

4
00:09.800 --> 00:15.440
So let's begin here with our first question from introduction to IPsec.

5
00:15.440 --> 00:22.550
And the question is, what does IPsec primarily provide in network communication

6
00:22.550 --> 00:22.580
?

7
00:22.580 --> 00:24.840
So we're supposed to choose one answer.

8
00:24.840 --> 00:28.800
Let's go down and look over the different choices and see which one is the most

9
00:28.800 --> 00:30.180
appropriate.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:28.800 --> 00:30.180
appropriate.

10
00:30.180 --> 00:33.920
So our first answer is QOS enforcement.

11
00:33.920 --> 00:39.930
Now IPsec does not have anything to do with QOS, so this first one will be an

12
00:39.930 --> 00:40.980
incorrect

13
00:40.980 --> 00:42.440
answer.

14
00:42.440 --> 00:46.240
Next, is end to end encryption and authentication.

15
00:46.240 --> 00:50.840
Well, that sounds like a pretty good answer, but before you mark it, let's look

16
00:50.840 --> 00:51.280
at the

17
00:51.280 --> 00:53.480
rest of our choices.

18
00:53.480 --> 00:57.260
Question three is dynamic IP address assignment.

19
00:57.260 --> 01:02.850
That's of course done by something called DHCP or dynamic host configuration
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

19
00:57.260 --> 01:02.850
That's of course done by something called DHCP or dynamic host configuration

20
01:02.850 --> 01:03.880
protocol.

21
01:03.880 --> 01:06.800
So that is not going to be correct.

22
01:06.800 --> 01:10.560
And our last answer is data compression.

23
01:10.560 --> 01:14.480
Now there are ways to do data compression on our networks.

24
01:14.480 --> 01:18.360
Most of them in all honesty are not used too much anymore.

25
01:18.360 --> 01:22.990
In the amount of bandwidth available in most cases, compression is simply not

26
01:22.990 --> 01:23.840
really worth

27
01:23.840 --> 01:24.840
it.

28
01:24.840 --> 01:28.320
But either way, it's not something provided by IPsec.

29
01:28.320 --> 01:33.070
So we're going to go ahead and say that our end to end encryption and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:28.320 --> 01:33.070
So we're going to go ahead and say that our end to end encryption and

30
01:33.070 --> 01:34.640
authentication is

31
01:34.640 --> 01:37.040
going to be our best answer.

32
01:37.040 --> 01:42.600
Our next question is from discovering ESP and data integrity.

33
01:42.600 --> 01:51.120
In IPsec, which protocol provides data integrity and confidentiality services.

34
01:51.120 --> 01:56.440
So we're looking for something that will actually take care of integrity and

35
01:56.440 --> 01:58.040
confidentiality.

36
01:58.040 --> 02:03.870
So as we look down our various answers, we have like, which does our key
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:58.040 --> 02:03.870
So as we look down our various answers, we have like, which does our key

37
02:03.870 --> 02:05.080
exchange.

38
02:05.080 --> 02:08.280
That's not going to provide integrity and confidentiality.

39
02:08.280 --> 02:10.480
ESP.

40
02:10.480 --> 02:14.320
That sounds like a good answer, but let's again look at the rest.

41
02:14.320 --> 02:19.040
TLS also not a correct answer.

42
02:19.040 --> 02:21.400
And then we have AH.

43
02:21.400 --> 02:27.280
Now AH would do the data integrity part, but not the confidentiality.

44
02:27.280 --> 02:30.560
AH does not provide encryption.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
02:27.280 --> 02:30.560
AH does not provide encryption.

45
02:30.560 --> 02:37.640
Therefore AH is going to be our incorrect answer, making ESP the correct answer

46
02:37.640 --> 02:37.760
for

47
02:37.760 --> 02:39.520
this question.

48
02:39.520 --> 02:45.410
Next, from discovering confidentiality, what are the two main types of

49
02:45.410 --> 02:47.200
encryption commonly

50
02:47.200 --> 02:52.960
utilized in IPsec to provide confidentiality?

51
02:52.960 --> 02:58.130
I think the biggest part to understanding this question is going to be the

52
02:58.130 --> 03:00.640
commonly utilized.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

52
02:58.130 --> 03:00.640
commonly utilized.

53
03:00.640 --> 03:07.640
A lot of these choices have been used, but which combination are commonly used?

54
03:07.640 --> 03:10.000
So again, let's go down our choices.

55
03:10.000 --> 03:13.960
First, we have DES and HMAC.

56
03:13.960 --> 03:18.840
Well, right away, we can say that this is going to be incorrect because DES is

57
03:18.840 --> 03:19.440
a legacy

58
03:19.440 --> 03:21.840
or outdated method.

59
03:21.840 --> 03:24.600
So we generally don't want to use this anymore.

60
03:24.600 --> 03:29.520
AES and SHA seems like a good answer.

61
03:29.520 --> 03:31.040
Let's look at the rest.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

61
03:29.520 --> 03:31.040
Let's look at the rest.

62
03:31.040 --> 03:42.200
Once again, we have triple DES and SHA.

63
03:42.200 --> 03:45.840
Finally, we have RSA and MD5.

64
03:45.840 --> 03:52.230
And although RSA is still used with things like certificates, MD5 is generally

65
03:52.230 --> 03:53.160
considered

66
03:53.160 --> 03:54.640
outdated.

67
03:54.640 --> 04:00.620
So again, we're looking at AES and SHA as being our best answer for this
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
03:54.640 --> 04:00.620
So again, we're looking at AES and SHA as being our best answer for this

68
04:00.620 --> 04:03.240
particular question.

69
04:03.240 --> 04:09.100
Next, from discovering key management, what is the primary function of key

70
04:09.100 --> 04:10.080
management

71
04:10.080 --> 04:12.640
in IPsec?

72
04:12.640 --> 04:16.960
Our first answer says ensuring data integrity.

73
04:16.960 --> 04:21.730
And we don't use our key management for data integrity, so that would be an

74
04:21.730 --> 04:24.360
incorrect answer.

75
04:24.360 --> 04:28.280
Next is generating and distributing encryption keys.

76
04:28.280 --> 04:34.370
Well, that actually does sound correct, but as always, let's verify the rest of
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

76
04:28.280 --> 04:34.370
Well, that actually does sound correct, but as always, let's verify the rest of

77
04:34.370 --> 04:35.560
our answers.

78
04:35.560 --> 04:37.560
Next is data compression.

79
04:37.560 --> 04:41.080
We've sort of already discussed that here in this challenge.

80
04:41.080 --> 04:46.600
The data compression is really not something that has anything to do with IPsec

81
04:46.600 --> 04:46.880
.

82
04:46.880 --> 04:48.720
Authenticating network devices.

83
04:48.720 --> 04:53.290
Now, authentication is something that's important, but that's not something

84
04:53.290 --> 04:54.160
that we're going

85
04:54.160 --> 04:57.240
to do with key management.

86
04:57.240 --> 05:00.760
Key management is for managing the encryption keys.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

86
04:57.240 --> 05:00.760
Key management is for managing the encryption keys.

87
05:00.760 --> 05:06.960
So that's going to make this our correct answer for this particular question.

88
05:06.960 --> 05:12.690
And our final question from discovering authentication and essays, which two

89
05:12.690 --> 05:14.760
authentication methods

90
05:14.760 --> 05:21.280
are commonly used to authenticate IPsec peers during the establishment of a

91
05:21.280 --> 05:23.480
secure connection.

92
05:23.480 --> 05:26.840
So once again, let's work our way down our list.

93
05:26.840 --> 05:30.920
In this case, it's specifically telling us that we're choosing two
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

93
05:26.840 --> 05:30.920
In this case, it's specifically telling us that we're choosing two

94
05:30.920 --> 05:32.720
authentication methods.

95
05:32.720 --> 05:35.000
So working our way down our list.

96
05:35.000 --> 05:40.320
The first one is PSK or pre shared key.

97
05:40.320 --> 05:41.960
That's going to be a correct answer.

98
05:41.960 --> 05:43.640
So let's just go ahead and mark it.

99
05:43.640 --> 05:47.800
If we find something better, we can come back and change this.

100
05:47.800 --> 05:50.280
Next is MAC address filtering.

101
05:50.280 --> 05:53.520
MAC address filtering is not an authentication method.

102
05:53.520 --> 05:56.440
So that is definitely going to be incorrect.

103
05:56.440 --> 06:02.230
Now EAP is an interesting one because EAP is extensible authentication protocol
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

103
05:56.440 --> 06:02.230
Now EAP is an interesting one because EAP is extensible authentication protocol

104
06:02.230 --> 06:02.240
.

105
06:02.240 --> 06:09.320
However, this is generally used for wireless or 802.1x.

106
06:09.320 --> 06:15.400
So this is going to be an incorrect answer from the perspective of IPsec.

107
06:15.400 --> 06:21.210
Purpose of course, address resolution protocol, this is used on the LAN to

108
06:21.210 --> 06:22.760
resolve IP to MAC

109
06:22.760 --> 06:23.840
addresses.

110
06:23.840 --> 06:28.650
So that is clearly going to be an incorrect answer, leaving of course digital

111
06:28.650 --> 06:29.600
certificates

112
06:29.600 --> 06:32.160
as our other correct answer.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

112
06:29.600 --> 06:32.160
as our other correct answer.

113
06:32.160 --> 06:38.200
So for this one, the correct answers are PSK and digital certificates.

114
06:38.200 --> 06:43.200
So that concludes this challenge as well as this skill.

115
06:43.200 --> 06:47.490
If you find you are missing any of the information to answer these questions, I

116
06:47.490 --> 06:48.240
would encourage

117
06:48.240 --> 06:52.480
you to go back and review each referenced section.

118
06:52.480 --> 06:58.400
Otherwise, congratulations on completing Connecting to Cloud providers over the

119
06:58.400 --> 06:59.400
internet.

120
06:59.400 --> 07:03.760
I hope this has been informative for you and I'd like to thank you for viewing.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
06:59.400 --> 07:03.760
I hope this has been informative for you and I'd like to thank you for viewing.

121
07:03.760 --> 07:13.720
[BLANK_AUDIO]