QuestionQ36

Securing the Network

Multiple customer sites connect through your service-provider network by using a Layer 3 VPN. You must design the Layer 3 VPN so that traffic transmitted between sites is encrypted.

Which technology would you use to accomplish this?

  • A Use IPsec with AH.
  • B Use GRE with a key sequence number.
  • C Use IPsec with ESP.
  • D Use OSPF with IPsec authentication.
Explanation

IPsec ESP provides confidentiality by encrypting protected IP traffic, making it appropriate for encrypted site-to-site Layer 3 VPN communication. AH authenticates and protects integrity but does not encrypt traffic; GRE sequence numbering and OSPF authentication also do not provide payload confidentiality.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!