NSE 7 — Enterprise Firewall — Question 42

Which two statements about IKE version 2 are true? (Choose two.)

Answer options

• A. It supports the XAuth protocol.
• B. Phase 1 includes main mode.
• C. It exchanges a minimum of four messages to establish a secure tunnel.
• D. It supports the extensible authentication protocol (EAP).

Correct answer: C, D

Explanation

The correct statements are C and D because IKE version 2 does indeed exchange a minimum of four messages to set up a secure tunnel and supports EAP for authentication. Options A and B are incorrect as IKE version 2 does not use XAuth and does not involve a main mode in Phase 1.