LFCA: Linux Foundation Certified IT AssociateDemo

By Linux Foundation · Question Mode

QuestionQ72

Security Fundamentals

A solution must be deployed to create a virtual Layer 3 point-to-point connection between two data centers over the Internet for securely transferring sensitive data with encryption. The solution must ensure that data is encrypted at the network layer. Which option meets these requirements?

  • A MACsec protocol configured with AES-GCM encryption.
  • B IPsec tunnel configured with ESP in the transform set.
  • C IPsec with transform-set AH over IP-in-IP tunnel.
  • D IPsec tunnel configured with AH in the transform set.
Explanation

IPsec tunnel mode establishes a virtual Layer 3 link over an untrusted network, and ESP provides confidentiality by encrypting the protected IP traffic. AH supplies authentication and integrity but does not encrypt data; MACsec is a Layer 2 technology. Cisco documents ESP as the IPsec transform for payload encryption and AH as the transform for payload authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!