nerdexam
F5

101 · Question #702

An administrator needs to deploy a VON solution that offers data integrity and origin authentication of IP packets. Which solution the administrator use?

The correct answer is A. IPSecVPN. IPSec VPN is the only option that natively provides both data integrity and origin authentication at the IP packet level.

Section 4: Security Basics

Question

An administrator needs to deploy a VON solution that offers data integrity and origin authentication of IP packets. Which solution the administrator use?

Options

  • AIPSecVPN
  • BPPTP
  • CGRE
  • DSSL VPN

How the community answered

(59 responses)
  • A
    81% (48)
  • B
    5% (3)
  • C
    3% (2)
  • D
    10% (6)

Why each option

IPSec VPN is the only option that natively provides both data integrity and origin authentication at the IP packet level.

AIPSecVPNCorrect

IPSec uses the Authentication Header (AH) protocol to provide origin authentication and connectionless data integrity by cryptographically signing each packet, and the Encapsulating Security Payload (ESP) protocol to add confidentiality and integrity. These mechanisms verify that packets originated from a trusted peer and have not been modified in transit, directly satisfying both stated requirements. No other listed technology provides these guarantees natively at the network layer.

BPPTP

PPTP relies on MS-CHAPv2 for authentication, which has well-documented cryptographic weaknesses, and does not provide strong data integrity or origin authentication at the packet level.

CGRE

GRE is a stateless tunneling protocol with no built-in security, authentication, or integrity mechanisms - it must be combined with IPSec to gain those properties.

DSSL VPN

SSL VPN secures application-layer sessions between endpoints but does not provide origin authentication or integrity verification of raw IP packets as IPSec AH does.

Concept tested: IPSec VPN data integrity and origin authentication

Source: https://datatracker.ietf.org/doc/html/rfc4301

Topics

#IPSec VPN#data integrity#origin authentication#VPN protocols

Community Discussion

No community discussion yet for this question.

Full 101 Practice