nerdexam
GIAC

GSLC · Question #14

Which of the following statements about Encapsulating Security Payload (ESP) are true? Each correct answer represents a complete solution. Choose two.

The correct answer is A. It is an IPSec protocol. D. It can also be nested with the Layer Two Tunneling Protocol (L2TP). ESP is one of the two core IPSec protocols providing encryption and authentication, and it is commonly combined with L2TP to form secure VPN tunnels.

Security Architecture & Engineering

Question

Which of the following statements about Encapsulating Security Payload (ESP) are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt is an IPSec protocol.
  • BIt is a text-based communication protocol.
  • CIt uses TCP port 22 as the default port and operates at the application layer.
  • DIt can also be nested with the Layer Two Tunneling Protocol (L2TP).

How the community answered

(38 responses)
  • A
    95% (36)
  • B
    3% (1)
  • C
    3% (1)

Why each option

ESP is one of the two core IPSec protocols providing encryption and authentication, and it is commonly combined with L2TP to form secure VPN tunnels.

AIt is an IPSec protocol.Correct

ESP (Encapsulating Security Payload) is one of the two primary IPSec protocols, alongside AH (Authentication Header), and it provides confidentiality, data origin authentication, connectionless integrity, and anti-replay protection for IP packets at the network layer.

BIt is a text-based communication protocol.

ESP is a binary network-layer encapsulation protocol that encrypts IP packet payloads - it is not text-based in any form.

CIt uses TCP port 22 as the default port and operates at the application layer.

TCP port 22 belongs to SSH, not ESP; ESP uses IP protocol number 50, does not rely on a TCP or UDP port, and operates at the network layer rather than the application layer.

DIt can also be nested with the Layer Two Tunneling Protocol (L2TP).Correct

ESP can be nested within L2TP to form L2TP/IPSec, a widely deployed VPN configuration in which L2TP provides the tunnel framework and ESP supplies the encryption and authentication, making this a well-documented and supported pairing.

Concept tested: ESP as IPSec protocol compatible with L2TP tunneling

Source: https://learn.microsoft.com/en-us/windows/win32/fwp/ah-and-esp

Topics

#ESP#IPSec#L2TP#VPN protocols

Community Discussion

No community discussion yet for this question.

Full GSLC Practice