Microsoft Exam Questions

Which node should you use to achieve this task? To answer, select the appropriate node in the answer

Your network contains a server named Server1 that runs Windows Server 2008 R2. You configure IPSec on Server1. You need to identify the total number of encrypted bytes sent and received by Server1. Which node should you use to achieve this task? To answer, select the appropriate node in the answer area.

A.
Main Mode: Generic Filters

B.
Main Mode: Security Associations

C.
Quick Mode: Specific Filters

D.
Quick Mode: Security Associations

Explanation:
This view displays the active SAs with this computer. An SA is the combination of a negotiated key, security protocol, and SPI, which together define the security used to protect the communication from sender to receiver. Therefore, by looking at the security associations for this computer, you can determine which computers have connections with this computer, which type of data integrity and encryption is being used for that connection, and other information.

This information can be helpful when you are testing IPsec policies and troubleshooting access issues.

http://technet.microsoft.com/en-us/library/cc737334(v=ws.10).aspx