CISSP-ISSAP · Question #164
Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the…
The correct answer is A. IP Security (IPSec). IPSec (A) is correct because L2TP on its own provides no encryption - it relies on IPSec to secure the tunnel, forming the well-known L2TP/IPSec pairing that encrypts data end-to-end across public networks like the Internet. MPPE (B) is the encryption protocol paired with PPTP…
Question
Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the data will be sent across a public network. For security reasons, the management wants the data sent through the Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection. Which communication protocol will Peter use to accomplish the task?
Options
- AIP Security (IPSec)
- BMicrosoft Point-to-Point Encryption (MPPE)
- CPretty Good Privacy (PGP)
- DData Encryption Standard (DES)
How the community answered
(47 responses)- A70% (33)
- B9% (4)
- C17% (8)
- D4% (2)
Explanation
IPSec (A) is correct because L2TP on its own provides no encryption - it relies on IPSec to secure the tunnel, forming the well-known L2TP/IPSec pairing that encrypts data end-to-end across public networks like the Internet.
MPPE (B) is the encryption protocol paired with PPTP, not L2TP - it's a Microsoft-specific solution for a different tunneling protocol entirely. PGP (C) is an application-layer encryption tool designed for email and file encryption, not VPN tunneling or network-level security. DES (D) is a symmetric encryption algorithm (a cipher), not a communication protocol - it can't establish or secure a tunnel by itself.
Memory tip: Think "L2TP has no locks - it needs IPSec as its padlock." The two are almost always mentioned together (L2TP/IPSec), so if you see L2TP in a question about encryption, IPSec is your answer.
Topics
Community Discussion
No community discussion yet for this question.