LFCA: Linux Foundation Certified IT Associate

Question

A solution must be deployed to create a virtual Layer 3 point-to-point connection between two data centers over the Internet for securely transferring sensitive data with encryption. The solution must ensure that data is encrypted at the network layer. Which option meets these requirements?

Explanation

IPsec tunnel mode establishes a virtual Layer 3 link over an untrusted network, and ESP provides confidentiality by encrypting the protected IP traffic. AH supplies authentication and integrity but does not encrypt data; MACsec is a Layer 2 technology. Cisco documents ESP as the IPsec transform for payload encryption and AH as the transform for payload authentication.

Learn more

Cisco IOS Security Command Reference: crypto ipsec transform-set

LFCA: Linux Foundation Certified IT Associate

AstroTutor

Notes

Readiness

QuestionQ72

Community Discussion