Which of the following is a VPN technology that neither supports user identity authentication nor data encryption and verification?

Question

Options

• AGRE Over IPSec
• BMPN VPN
• CL2TP VPN
• DL2TP Over IPSec
• EMPLS VPN

• A
  5% (3)
• B
  84% (46)
• C
  7% (4)
• D
  2% (1)
• E
  2% (1)

Explanation

MPN VPN (likely a variant label for MPLS-based VPN in this exam context) achieves traffic isolation purely through label-switched routing paths within the provider's network - it has no cryptographic mechanisms, meaning it supports neither user identity authentication nor data encryption/integrity verification. The other options all incorporate at least one security layer: GRE over IPSec (A) wraps GRE tunnels with IPSec, which provides both IKE-based authentication and AES/3DES encryption; L2TP VPN (C) encapsulates PPP frames and inherits PPP's user authentication protocols (PAP, CHAP, MS-CHAPv2), so it does support identity authentication even though it lacks encryption; L2TP over IPSec (D) combines both, giving you L2TP's authentication and IPSec's encryption; MPLS VPN (E) also relies on provider-managed label switching. The key distinction is that routing/label-switching VPNs (like the one in B) trust the provider's infrastructure for separation rather than cryptography, while tunnel-based VPNs (L2TP, GRE) and especially IPSec-backed variants add real security guarantees.

Memory tip: Think "No Crypto, No Keys" - if a VPN type has no tunnel security protocol (IPSec) and no PPP layer (for auth), it's flying naked. Label-switched VPNs ride the provider's private backbone and assume trust; they don't authenticate you or encrypt your data.

No community discussion yet for this question.