Cisco Certified Network Associate (CCNA) Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Study for the Cisco Certified Network Associate (CCNA) exam with our comprehensive quiz featuring multiple-choice questions and detailed explanations. Prepare effectively and enhance your understanding of networking concepts!

Practice this question and more.

What is the primary purpose of the Authentication Header (AH) in IPsec?

To encrypt the data for security
To provide data integrity for IP packets
To establish tunnels between gateways
To prioritize network traffic

The correct answer is: To provide data integrity for IP packets

The Authentication Header (AH) in IPsec is primarily designed to provide data integrity and authentication for IP packets. Its main goal is to ensure that the data has not been altered during transmission and to verify the identity of the sender. This is achieved through the use of cryptographic hash functions, which create a unique hash value for the packet content. If the packet is modified in any way, the hash will not match upon receipt, thereby indicating tampering. While encryption of data and establishing tunnels are also aspects of IPsec implementations, they are functions of the Encryption Security Protocol (ESP) and not the AH. Additionally, prioritizing network traffic falls outside the scope of what AH is intended to accomplish. The focus of AH is specifically on maintaining the integrity and authenticity of the transmitted data.