Exam 300-730 topic 1 question 187 discussion

See: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html#GUID-C8F2200D-C50E-408B-966F-249EC70AADD0

KEK - Encrypts the rekey message TEK - Used by all the group members to communicate securely among each other Explanation: "The TEK becomes the IPsec SA with which the group members within the same group communicate. The KEK encrypts the rekey message." GDOI protocol - Provides group key and group AS management Explanation: "DGOI is defined as the Internet Security Association Key Management Protocol (ISAKMP) Domain of Interpretation (DOI) for group key management." KS - Maintains security policies and provides the session key for encrypting traffic Explanation: "The responsibilities of the key server include maintaining the policy and creating and maintaining the keys for the group. When a group member registers, the key server downloads this policy and the keys to the group member. The key server also rekeys the group before existing keys expire." GM - Gets the IPSec SA to encrypto data traffic within the group Explanation: Only one left :)