nerdexam
Cisco

350-701 · Question #614

Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)

The correct answer is C. Generic Routing Encapsulation Protocol D. Layer 2 Tunneling Protocol. Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP) are tunneling protocols that lack inherent security, thus relying on IPsec to provide data integrity, authentication, and encryption for secure VPN connections.

Submitted by brentm· Mar 30, 2026Network Security

Question

Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)

Options

  • ASecure Socket Tunneling Protocol
  • BOpenVPN
  • CGeneric Routing Encapsulation Protocol
  • DLayer 2 Tunneling Protocol
  • EPoint-to-Point Tunneling Protocol

How the community answered

(61 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    93% (57)
  • E
    3% (2)

Why each option

Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP) are tunneling protocols that lack inherent security, thus relying on IPsec to provide data integrity, authentication, and encryption for secure VPN connections.

ASecure Socket Tunneling Protocol

Secure Socket Tunneling Protocol (SSTP) uses SSL/TLS for encryption and authentication natively, so it does not typically rely on IPsec for these functions.

BOpenVPN

OpenVPN uses the OpenSSL library and TLS/SSL for encryption and authentication natively, making IPsec redundant for its core security mechanisms.

CGeneric Routing Encapsulation ProtocolCorrect

GRE is a simple tunneling protocol that lacks built-in security features, but it can be encapsulated within an IPsec tunnel (GRE over IPsec) to secure the GRE payload, providing data integrity, authentication, and encryption for the traffic.

DLayer 2 Tunneling ProtocolCorrect

L2TP provides tunneling for Layer 2 frames, but it does not offer encryption or strong authentication on its own; therefore, it is commonly paired with IPsec (L2TP/IPsec) to secure the encapsulated traffic, fulfilling data integrity, authentication, and data encryption requirements.

EPoint-to-Point Tunneling Protocol

Point-to-Point Tunneling Protocol (PPTP) has known security vulnerabilities and uses MS-CHAPv2 for authentication and a modified version of GRE for tunneling, but it does not use IPsec for its primary security and encryption.

Concept tested: VPN tunneling protocols with IPsec

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsec/configuration/xe-16/sec-ipsec-vpn-xe-16-book/sec-gre-ipsec-vpn.html

Topics

#IPsec#GRE#L2TP#VPN tunneling

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice