DRAG DROP Drag and drop the VPN functions from the left onto the descriptions on the right. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-701/page_525_img_1.jpg

Nah, Sanjay, I don’t think RSA is for confidentiality here. It’s AES -> confidentiality, SHA-1 -> integrity, ISAKMP -> IKE SAs, RSA -> authentication. Easy to mix up since RSA can encrypt but in VPN/IPsec questions it usually means auth.

Mapping should be: SHA-1 for integrity, ISAKMP defines IKE SAs, AES handles confidentiality, RSA gives authentication. Classic IPsec building blocks, pretty sure this lines up with what most study guides say.

Probably C, botnets are typically used to launch DDoS attacks since they can coordinate traffic from lots of infected hosts at once.

I remember a similar question and matched AES to integrity, RSA for confidentiality, SHA-1 as authentication, and ISAKMP for IKE SAs. Think that's how it works because RSA can encrypt data too, right? Open to correction.

Q: 29

DRAG DROP Drag and drop the VPN functions from the left onto the descriptions on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

RSA
AES
SHA-1
ISAKMP

Correct Answer:

Answer Area ensures data integrity: C. SHA-1 defines IKE SAS: D. ISAKMP ensures data confidentiality: B. AES provides authentication: A. RSA

Explanation

In the context of IPsec VPNs, cryptographic algorithms and protocols serve distinct roles to secure communications:

SHA-1 (Secure Hash Algorithm): A hashing algorithm used to generate a unique digest of the data. This digest allows the receiver to verify that the data was not altered during transit, ensuring data integrity.
ISAKMP (Internet Security Association and Key Management Protocol): Defined in RFC 2408, ISAKMP provides the framework for authentication and key exchange. It defines the procedures and packet formats to establish, negotiate, and delete Security Associations (SAs), effectively defining IKE SAs.
AES (Advanced Encryption Standard): A symmetric encryption algorithm used to encrypt the data payload, rendering it unreadable to unauthorized parties, thereby ensuring data confidentiality.
RSA (Rivest-Shamir-Adleman): An asymmetric algorithm often used in IKE for digital signatures to verify the identity of the peers, providing authentication.

References

Cisco Systems. Security for VPNs with IPsec Configuration Guide. "IPsec Network Security Overview." Available at: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/xe-3s/sec-sec-for-vpns-w-ipsec-xe-3s-book/sec-ips-sec-over.html (Accessed: 2026).

Relevance: Confirms AES for confidentiality, SHA for data integrity, and RSA for authentication (signatures).

Maughan, D., et al. Internet Security Association and Key Management Protocol (ISAKMP). IETF RFC 2408, November 1998. https://doi.org/10.17487/RFC2408

Relevance: Abstract and Introduction define ISAKMP's role in establishing Security Associations (SAs) and cryptographic key management.

Frankel, S., et al. IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap. IETF RFC 6071, February 2011. https://doi.org/10.17487/RFC6071

Relevance: Section 5.3 discusses the use of RSA for authentication within the IKE framework.

Cisco 350-701 Real Exam Questions [October 2026 Update] Quiz

DRAG DROP Drag and drop the VPN functions from the left onto the descriptions on the right. <img src="https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-701/page_525_img_1.jpg" alt="Cisco 350-701 question" loading="lazy" class="ce-embedded-img" />

Premium Access Includes

DRAG DROP Drag and drop the VPN functions from the left onto the descriptions on the right.