101 · Question #702
An administrator needs to deploy a VON solution that offers data integrity and origin authentication of IP packets. Which solution the administrator use?
The correct answer is A. IPSecVPN. IPSec VPN is the only option that natively provides both data integrity and origin authentication at the IP packet level.
Question
An administrator needs to deploy a VON solution that offers data integrity and origin authentication of IP packets. Which solution the administrator use?
Options
- AIPSecVPN
- BPPTP
- CGRE
- DSSL VPN
How the community answered
(59 responses)- A81% (48)
- B5% (3)
- C3% (2)
- D10% (6)
Why each option
IPSec VPN is the only option that natively provides both data integrity and origin authentication at the IP packet level.
IPSec uses the Authentication Header (AH) protocol to provide origin authentication and connectionless data integrity by cryptographically signing each packet, and the Encapsulating Security Payload (ESP) protocol to add confidentiality and integrity. These mechanisms verify that packets originated from a trusted peer and have not been modified in transit, directly satisfying both stated requirements. No other listed technology provides these guarantees natively at the network layer.
PPTP relies on MS-CHAPv2 for authentication, which has well-documented cryptographic weaknesses, and does not provide strong data integrity or origin authentication at the packet level.
GRE is a stateless tunneling protocol with no built-in security, authentication, or integrity mechanisms - it must be combined with IPSec to gain those properties.
SSL VPN secures application-layer sessions between endpoints but does not provide origin authentication or integrity verification of raw IP packets as IPSec AH does.
Concept tested: IPSec VPN data integrity and origin authentication
Source: https://datatracker.ietf.org/doc/html/rfc4301
Topics
Community Discussion
No community discussion yet for this question.