350-401 Question 301

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  MACsec doesn't use anonymous Diffie-Hellman for key generation. The keys are derived from the 802.1X session, not from an anonymous key exchange. Anonymous mode would defeat the purpose of authenticated encryption

• Chose D1

  802.1AE provides encryption and authentication services

• Chose D2

  MACsec = IEEE 802.1AE + MKA protocol → Provides encryption and authentication for Ethernet frames.