156-215.80 · Question #273
Which of these attributes would be critical for a site-to-site VPN?
The correct answer is D. Strong data encryption. Site-to-site VPNs traverse untrusted public networks, making strong data encryption the foundational requirement to protect data in transit between two fixed network endpoints.
Question
Which of these attributes would be critical for a site-to-site VPN?
Options
- AScalability to accommodate user groups
- BCentralized management
- CStrong authentication
- DStrong data encryption
How the community answered
(43 responses)- A2% (1)
- B2% (1)
- C5% (2)
- D91% (39)
Why each option
Site-to-site VPNs traverse untrusted public networks, making strong data encryption the foundational requirement to protect data in transit between two fixed network endpoints.
Scalability to accommodate user groups is a characteristic of remote-access VPNs, which serve variable numbers of individual clients, not site-to-site tunnels connecting fixed networks.
Centralized management is an operational convenience for administering multiple VPNs but is not a technical requirement for the VPN itself to function securely.
Strong authentication is important for establishing the VPN tunnel (IKE Phase 1) but is secondary to encryption as the defining critical attribute of a site-to-site VPN.
A site-to-site VPN creates an encrypted tunnel between two network gateways over an untrusted medium such as the internet. Strong data encryption - typically via AES or 3DES within IPsec - is the core technical mechanism that ensures confidentiality of all traffic passing through the tunnel. Without it, the VPN provides connectivity but no meaningful security protection.
Concept tested: Site-to-site VPN core security requirements
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14106-how-ipsec-works.html
Topics
Community Discussion
No community discussion yet for this question.