Cisco Certified Network Associate (CCNA) Practice Exam

Disable ads (and more) with a membership for a one time $4.99 payment

Prepare for the Cisco Certified Network Associate (CCNA) Practice Exam. Test your knowledge with our interactive quizzes featuring multiple choice questions, hints, and explanations. Equip yourself for success!

Practice this question and more.


What is the primary purpose of the Authentication Header (AH) in IPsec?

  1. To encrypt the data for security

  2. To provide data integrity for IP packets

  3. To establish tunnels between gateways

  4. To prioritize network traffic

The correct answer is: To provide data integrity for IP packets

The Authentication Header (AH) in IPsec is primarily designed to provide data integrity and authentication for IP packets. Its main goal is to ensure that the data has not been altered during transmission and to verify the identity of the sender. This is achieved through the use of cryptographic hash functions, which create a unique hash value for the packet content. If the packet is modified in any way, the hash will not match upon receipt, thereby indicating tampering. While encryption of data and establishing tunnels are also aspects of IPsec implementations, they are functions of the Encryption Security Protocol (ESP) and not the AH. Additionally, prioritizing network traffic falls outside the scope of what AH is intended to accomplish. The focus of AH is specifically on maintaining the integrity and authenticity of the transmitted data.