cisco exam 200 301

cisco exam 200 301. ESP and AH: The two main methods of implementing IPSec. ESP stands for Encapsulating Secure Net Load (Encapsulating).Encryption algorithms to ensure confidentiality: DES, 3DES, and AES. Hashing algorithms to ensure integrity: MD5 and SHA.Authentication algorithms: Pre-Shared Key (PSK) and RSA digital signature.Key management: Algorithms or protocols that can be used for key management include Diffie-Hellman (DH), which can be used to dynamically generate symmetric keys for weighing algorithms; PKI, which supports the issuance of digital certificates by trusted CAs; and the Internet KeyExchange (IKE) protocol, which performs a number of negotiation and management tasks required for IPSec to operate. Internet KeyExchange (IKE) protocol, which performs a large number of negotiation and management tasks required for IPSec operation.2. SSLInformation transmitted over public networks is to be protected with encryption to prevent unauthorized access to the data. Using Internet banking as an example, it is important not only to avoid letting attackers learn usernames, passwords and codes, but also not to allow attackers to modify packets in transit during a customer's transaction with the bank. The IPSec protocol seems well suited for applications such as Internet banking, as it can encrypt data, perform integrity checks, and authenticate the identity of the Internet banking server to be connected. While IPSec can be a "big deal," not many people want to have an IPSec client or software installed and running on their computers. More importantly, not everyone has access to the digital certificates or PSKO's that can be used to successfully complete authentication304 Chapter 6 Cryptography and Public Key Infrastructure (PKI) BasicsSecurity Pay load), which has all the features of IPSec; AH stands for Authentication Header, which has some of the features of IPSec but does not support the most important feature of IPSec (encrypting data). Therefore, AH is not commonly used.The use of another technology, called Secure Sockets Layer (SSL), still allows people to benefit from the concept of encryption and authentication.The concept of encryption and authentication. The convenience of SSL is that any computer with a browser installed supports SSL functionality, so