Question:

(a) Give 2 benefits of using IPsec.

(b) IPSec uses two protocol for security: Authentication Header protocol (AH) and the Encapsulated Security Header Protocol (ESP). Why is AH required with ESP even though ESP provides authentication?

(c) Describe how the Encapsulated Security Header protocol (ESP) can be used to provide traffic analysis confidentiality using IPSec.

(d) What is a Security Association (SA) and what does it define? Why are there two SAs per one connection? How can two communicating peers agree on what kind of SAs they use?

(e) List two types of firewall that can be used.

(f) Describe the following threats to firewalls:
(i) Denial of service,
(ii) IP Spoofing and

What countermeasures can be adopted against these threats.

(g) What is a honey pot and why is it commonly used?