NSE4_FGT-6.4 practice

Q2 Multiple choice

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

Select all that apply.

A
Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
B
An SA never expires.
C
A phase 1 SA is bidirectional, while a phase 2 SA is directional.
D
Phase 2 SA expiration can be time-based, volume-based, or both.
E
Both the phase 1 SA and phase 2 SA are bidirectional.