GSLC · Question #14
Which of the following statements about Encapsulating Security Payload (ESP) are true? Each correct answer represents a complete solution. Choose two.
The correct answer is A. It is an IPSec protocol. D. It can also be nested with the Layer Two Tunneling Protocol (L2TP). ESP is one of the two core IPSec protocols providing encryption and authentication, and it is commonly combined with L2TP to form secure VPN tunnels.
Question
Which of the following statements about Encapsulating Security Payload (ESP) are true? Each correct answer represents a complete solution. Choose two.
Options
- AIt is an IPSec protocol.
- BIt is a text-based communication protocol.
- CIt uses TCP port 22 as the default port and operates at the application layer.
- DIt can also be nested with the Layer Two Tunneling Protocol (L2TP).
How the community answered
(38 responses)- A95% (36)
- B3% (1)
- C3% (1)
Why each option
ESP is one of the two core IPSec protocols providing encryption and authentication, and it is commonly combined with L2TP to form secure VPN tunnels.
ESP (Encapsulating Security Payload) is one of the two primary IPSec protocols, alongside AH (Authentication Header), and it provides confidentiality, data origin authentication, connectionless integrity, and anti-replay protection for IP packets at the network layer.
ESP is a binary network-layer encapsulation protocol that encrypts IP packet payloads - it is not text-based in any form.
TCP port 22 belongs to SSH, not ESP; ESP uses IP protocol number 50, does not rely on a TCP or UDP port, and operates at the network layer rather than the application layer.
ESP can be nested within L2TP to form L2TP/IPSec, a widely deployed VPN configuration in which L2TP provides the tunnel framework and ESP supplies the encryption and authentication, making this a well-documented and supported pairing.
Concept tested: ESP as IPSec protocol compatible with L2TP tunneling
Source: https://learn.microsoft.com/en-us/windows/win32/fwp/ah-and-esp
Topics
Community Discussion
No community discussion yet for this question.