GSEC · Question #314
What advantage does a Client-to-Client VPN have over other types of VPNs?
The correct answer is A. The traffic never traverses any network segment in clear text. A client-to-client VPN encrypts traffic end-to-end between the two communicating endpoints, ensuring no network segment between them ever sees the data in cleartext.
Question
What advantage does a Client-to-Client VPN have over other types of VPNs?
Options
- AThe traffic never traverses any network segment in clear text
- BThe client applications do not need to support cryptography
- CNetwork devices do not have to look at the message content to provide QoS
- DThe VPN gateway is located at the edge of the corporate network
How the community answered
(47 responses)- A70% (33)
- B11% (5)
- C15% (7)
- D4% (2)
Why each option
A client-to-client VPN encrypts traffic end-to-end between the two communicating endpoints, ensuring no network segment between them ever sees the data in cleartext.
In a client-to-client VPN, the encryption and decryption occur at the originating and terminating clients respectively, so the payload remains encrypted across every intermediate network hop. Unlike gateway-to-gateway or remote-access VPNs where traffic may be decrypted at the edge before traversing the internal LAN, client-to-client VPNs maintain confidentiality for the entire path. This end-to-end model eliminates any cleartext exposure on any segment.
Client-to-client VPNs require that both client applications actively perform cryptographic operations - this is the opposite of not needing cryptography support.
End-to-end encryption actually makes QoS more difficult because intermediate devices cannot inspect the encrypted payload to classify or prioritize traffic.
Having the VPN gateway at the edge of the corporate network describes a remote-access or site-to-site VPN architecture, not a client-to-client model.
Concept tested: End-to-end encryption in client-to-client VPN architecture
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-77r1.pdf
Topics
Community Discussion
No community discussion yet for this question.