A new MPLS network link has been established between a company and its business partner. The link provides logical isolation in order to prevent access from other business partners. Which of the…

MPLS IPVPN mode still relies on provider-level logical separation with no encryption, meaning the carrier or a compromised MPLS node can still read traffic in plaintext.

SSL/TLS only protects specific application flows that implement it, leaving other protocols and data flows unprotected across the link.

MPLS provides logical separation of traffic through label switching but does not encrypt data in transit - packets are readable by the MPLS provider. Deploying IPSec VPN tunnels over the MPLS link provides authenticated key exchange, encryption (confidentiality), and HMAC-based integrity verification at the network layer, ensuring data cannot be read or tampered with even by the carrier.

HTTPS and SSH protect only specific application-layer protocols and do not provide blanket encryption for all data traversing the MPLS link, leaving gaps for other traffic types.