nerdexam
CompTIA

SY0-301 · Question #546

A company's legacy server requires administration using Telnet. Which of the following protocols could be used to secure communication by offering encryption at a lower OSI layer? (Select TWO).

The correct answer is A. IPv6 C. IPSec. IPSec and IPv6 both operate at the network layer (Layer 3), which is below the application layer where Telnet operates, and can encrypt traffic at that lower OSI layer.

Security architecture

Question

A company's legacy server requires administration using Telnet. Which of the following protocols could be used to secure communication by offering encryption at a lower OSI layer? (Select TWO).

Options

  • AIPv6
  • BSFTP
  • CIPSec
  • DSSH
  • EIPv4

How the community answered

(47 responses)
  • A
    83% (39)
  • B
    9% (4)
  • D
    4% (2)
  • E
    4% (2)

Why each option

IPSec and IPv6 both operate at the network layer (Layer 3), which is below the application layer where Telnet operates, and can encrypt traffic at that lower OSI layer.

AIPv6Correct

IPv6 includes built-in support for IPSec as a mandatory component of its specification, providing encryption and authentication at the network layer (Layer 3). IPSec (C) independently provides encryption, authentication, and integrity checking at Layer 3 via AH and ESP protocols, encapsulating higher-layer protocols like Telnet without requiring changes to the Telnet application itself.

BSFTP

SFTP operates at the application layer (Layer 7) and is a file transfer protocol, not a means of encrypting an existing Telnet session.

CIPSecCorrect
DSSH

SSH operates at the application layer and replaces Telnet rather than encrypting it at a lower OSI layer.

EIPv4

IPv4 does not natively include encryption capabilities and operates at Layer 3 without providing security services.

Concept tested: Network layer encryption with IPSec and IPv6

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/ipsec/ipsec-overview

Topics

#IPSec#IPv6#OSI model#protocol security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice