312-50V10 Question #792: Real Exam Question with Answer & Explanation

The correct answer is A: IPsec. IPsec is a Layer 3 protocol that encrypts IP packets end-to-end, making it the only option here that operates at the network layer. SFTP, FTPS, and SSL all operate above Layer 3.

Cryptography

Question

Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for end-to-end encryption of the connection?

Options

AIPsec
BSFTP
CFTPS
DSSL

Explanation

IPsec is a Layer 3 protocol that encrypts IP packets end-to-end, making it the only option here that operates at the network layer. SFTP, FTPS, and SSL all operate above Layer 3.

Common mistakes.

B. SFTP (SSH File Transfer Protocol) is an application-layer (Layer 7) replacement for FTP, not a Layer 3 encryption protocol.
C. FTPS is FTP secured with SSL/TLS, which operates at the application/session layer, not Layer 3.
D. SSL/TLS operates at the session/presentation layer (Layers 5-6), not at Layer 3 of the OSI model.

Concept tested. IPsec as a Layer 3 encryption protocol

Reference. https://learn.microsoft.com/en-us/windows-server/security/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2

Topics

#IPsec#layer 3 encryption#end-to-end encryption#FTP security

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice