JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 24

Which two statements are correct about IPsec security associations? (Choose two.)

Answer options

• A. IPsec security associations are bidirectional.
• B. IPsec security associations are unidirectional.
• C. IPsec security associations are established during IKE Phase 1 negotiations.
• D. IPsec security associations are established during IKE Phase 2 negotiations.

Correct answer: B, D

Explanation

The correct statement is that IPsec security associations are unidirectional, meaning they handle traffic in one direction only, which is why option B is correct. Additionally, IPsec security associations are established during IKE Phase 2 negotiations, making option D correct as well, while options A and C are incorrect statements.