Which statement best describes configuring an IPsec SA proposal in MikroTik?

Which statement best describes configuring an IPsec SA proposal in MikroTik?

• A. The two provided commands (set enc-algorithms and set auth-algorithms) form the basic SA proposal.
• B. IPsec SA can only be configured with a single command.
• C. You must configure a peer before setting the algorithm.
• D. You should enable IPsec before configuring the proposal.

Answer: (A)

IPsec SA proposal is defined by the algorithms chosen for encryption and for authentication. In MikroTik RouterOS, you configure these properties with two commands on the proposal: one sets the encryption algorithms, and the other sets the authentication/-integrity algorithms. Together, these two settings establish the basic security parameters of the SA, and the peers will negotiate a mutually supported combination from those options. You can list multiple choices in each category so the negotiation can succeed if both sides share at least one algorithm pair. The other statements don’t capture this fundamental idea: you don’t rely on a single command to define the whole SA, you can set the proposal before a peer is configured, and IPsec can be enabled after you’ve defined the proposal rather than being required beforehand.

IPsec SA proposal is defined by the algorithms chosen for encryption and for authentication. In MikroTik RouterOS, you configure these properties with two commands on the proposal: one sets the encryption algorithms, and the other sets the authentication/-integrity algorithms. Together, these two settings establish the basic security parameters of the SA, and the peers will negotiate a mutually supported combination from those options. You can list multiple choices in each category so the negotiation can succeed if both sides share at least one algorithm pair. The other statements don’t capture this fundamental idea: you don’t rely on a single command to define the whole SA, you can set the proposal before a peer is configured, and IPsec can be enabled after you’ve defined the proposal rather than being required beforehand.