A company's remote locations connect to the data centers via MPLS. A new request requires that unicast and multicast traffic that exits in the remote locations be encrypted. Which non-tunneled…

SSL VPN creates an encrypted application-layer tunnel and does not support multicast traffic encryption, nor does it qualify as a non-tunneled technology.

FlexVPN uses IKEv2 to create IPsec tunnels, making it a tunneling technology that does not meet the non-tunneled requirement.

DMVPN uses GRE tunnels encapsulated with IPsec, which adds tunnel headers and disqualifies it as a non-tunneled technology.

GETVPN (Group Encrypted Transport VPN) encrypts traffic using IPsec while preserving the original source and destination IP addresses, making it non-tunneled by design. It natively supports multicast encryption, which tunneling-based technologies cannot provide, and is specifically architected for deployment over MPLS networks where routing infrastructure already exists. These characteristics satisfy both the non-tunneled requirement and the need to encrypt multicast traffic from remote locations.