GCIH Question #217: Real Exam Question with Answer & Explanation

The correct answer is B: IPsec. IPsec operates at the network layer to provide packet-level encryption and authentication between hosts, including within a LAN environment.

Question

Which of the following provides packet-level encryption between hosts in a LAN?

Options

APPTP
BIPsec
CPFS
DTunneling protocol

Explanation

IPsec operates at the network layer to provide packet-level encryption and authentication between hosts, including within a LAN environment.

Common mistakes.

A. PPTP (Point-to-Point Tunneling Protocol) is a VPN protocol used primarily for remote access tunneling by encapsulating PPP frames, and does not provide native packet-level encryption between hosts on a LAN.
C. PFS (Perfect Forward Secrecy) is a cryptographic key exchange property ensuring that compromise of long-term keys does not expose past session keys - it is a characteristic of key negotiation, not a standalone encryption protocol.
D. Tunneling protocol is a broad generic category describing protocols that encapsulate traffic for transport, not a specific protocol that provides packet-level encryption between LAN hosts.

Concept tested. IPsec transport mode for LAN packet encryption

Reference. https://www.rfc-editor.org/rfc/rfc4301

Community Discussion

No community discussion yet for this question.

Full GCIH Practice