NSE 7 – Network Security Technologies 7.2 — Question 50

In IKEv2, which exchange establishes the first CHILD_SA?

Answer options

• A. IKE_SA_INIT
• B. INFORMATIONAL
• C. CREATE_CHILD_SA
• D. IKE_Auth

Correct answer: D

Explanation

The correct answer is D, IKE_Auth, as it is during this exchange that the first CHILD_SA is established following the IKE_SA_INIT. Options A, B, and C do not create the CHILD_SA; instead, they serve different purposes in the IKEv2 process.