nerdexam
Cisco

352-001 · Question #737

Which solution provides interoperability and protects data traffic from eavesdropping?

The correct answer is C. IPsec-VPN. IPsec-VPN is the standard, interoperable solution that encrypts data in transit to prevent eavesdropping.

Designing Security

Question

Which solution provides interoperability and protects data traffic from eavesdropping?

Options

  • AGET-VPN
  • BCisco MPLS TE
  • CIPsec-VPN
  • DDMVPN

How the community answered

(23 responses)
  • A
    4% (1)
  • C
    91% (21)
  • D
    4% (1)

Why each option

IPsec-VPN is the standard, interoperable solution that encrypts data in transit to prevent eavesdropping.

AGET-VPN

GET-VPN is a Cisco-proprietary group encryption solution designed for trusted MPLS or private WAN cores and does not provide cross-vendor interoperability.

BCisco MPLS TE

Cisco MPLS TE is a traffic engineering mechanism that optimizes path selection in MPLS networks but provides no data encryption or protection against eavesdropping.

CIPsec-VPNCorrect

IPsec is an IETF open standard protocol suite (RFC 4301) that provides data confidentiality through encryption (AES, 3DES), integrity via HMAC, and peer authentication, making it interoperable across all vendor platforms. Because it is standards-based, any RFC-compliant device can establish IPsec tunnels with any other vendor's device. The encryption directly prevents eavesdropping on traffic in transit across untrusted networks.

DDMVPN

DMVPN is a Cisco-proprietary overlay solution that simplifies hub-and-spoke VPN deployment but requires Cisco hardware and is not an open-standard interoperable technology.

Concept tested: IPsec VPN interoperability and encryption standards

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/xe-16/sec-sec-for-vpns-w-ipsec-xe-16-book.html

Topics

#IPsec VPN#encryption#interoperability#data protection

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice