312-50V10 · Question #523
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?
The correct answer is C. ESP transport mode. ESP transport mode provides data confidentiality through encryption for host-to-host communication within the same LAN, making it the correct choice when both security and confidentiality are priorities.
Question
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?
Options
- AAH Tunnel mode
- BAH promiscuous
- CESP transport mode
- DESP confidential
How the community answered
(57 responses)- A2% (1)
- B4% (2)
- C86% (49)
- D9% (5)
Why each option
ESP transport mode provides data confidentiality through encryption for host-to-host communication within the same LAN, making it the correct choice when both security and confidentiality are priorities.
AH (Authentication Header) provides integrity and authentication but does NOT provide encryption or confidentiality, making it unsuitable when confidentiality is required.
'AH promiscuous' is not a valid IPSec mode - it is a fabricated distractor.
ESP (Encapsulating Security Payload) encrypts the payload of each IP packet, directly providing confidentiality - which AH cannot do. Transport mode protects the data between two hosts on the same LAN without adding a new IP header, making it appropriate for intra-LAN encryption. Tunnel mode would add overhead suited for gateway-to-gateway VPNs across different networks.
'ESP confidential' is not a valid IPSec mode - it is a fabricated distractor.
Concept tested: IPSec ESP transport mode for LAN confidentiality
Source: https://learn.microsoft.com/en-us/windows-server/security/windows-authentication/ipsec-transport-mode-vs-tunnel-mode
Topics
Community Discussion
No community discussion yet for this question.