QuestionQ53

Network Design

An engineer needs to interconnect two geographically separated data centers. The service provider supplies a Layer 2 Metro Ethernet link. A strict security policy mandates that information shared between the two sites be transmitted encrypted. The application deployed between the sites requires line-rate throughput regardless of packet size and speed.

Which solution satisfies these requirements?

  • A L2TPv2
  • B IPsec
  • C MACsec
  • D L2TPv3
Explanation

MACsec provides IEEE 802.1AE Layer 2 encryption, confidentiality, and integrity for Ethernet traffic. It can secure traffic across transparent Metro Ethernet services while operating at Ethernet port line rate regardless of packet size, unlike higher-layer IPsec encryption, which introduces additional overhead.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!