350-701 · Question #614
Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)
The correct answer is C. Generic Routing Encapsulation Protocol D. Layer 2 Tunneling Protocol. Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP) are tunneling protocols that lack inherent security, thus relying on IPsec to provide data integrity, authentication, and encryption for secure VPN connections.
Question
Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)
Options
- ASecure Socket Tunneling Protocol
- BOpenVPN
- CGeneric Routing Encapsulation Protocol
- DLayer 2 Tunneling Protocol
- EPoint-to-Point Tunneling Protocol
How the community answered
(61 responses)- A2% (1)
- B2% (1)
- C93% (57)
- E3% (2)
Why each option
Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP) are tunneling protocols that lack inherent security, thus relying on IPsec to provide data integrity, authentication, and encryption for secure VPN connections.
Secure Socket Tunneling Protocol (SSTP) uses SSL/TLS for encryption and authentication natively, so it does not typically rely on IPsec for these functions.
OpenVPN uses the OpenSSL library and TLS/SSL for encryption and authentication natively, making IPsec redundant for its core security mechanisms.
GRE is a simple tunneling protocol that lacks built-in security features, but it can be encapsulated within an IPsec tunnel (GRE over IPsec) to secure the GRE payload, providing data integrity, authentication, and encryption for the traffic.
L2TP provides tunneling for Layer 2 frames, but it does not offer encryption or strong authentication on its own; therefore, it is commonly paired with IPsec (L2TP/IPsec) to secure the encapsulated traffic, fulfilling data integrity, authentication, and data encryption requirements.
Point-to-Point Tunneling Protocol (PPTP) has known security vulnerabilities and uses MS-CHAPv2 for authentication and a modified version of GRE for tunneling, but it does not use IPsec for its primary security and encryption.
Concept tested: VPN tunneling protocols with IPsec
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsec/configuration/xe-16/sec-ipsec-vpn-xe-16-book/sec-gre-ipsec-vpn.html
Topics
Community Discussion
No community discussion yet for this question.